§1607 NTIA program for preventing future vulnerabilities

Summary

Create a program, within 120 days after March 12, 2020, for the federal government to share information about supply chain security risks with trusted providers of advanced communications service and trusted suppliers of communications equipment or services. The program must allow public notice and comment. It must include regular briefings and events, outreach to small businesses and companies that mainly serve rural areas, a plan (by 180 days after March 12, 2020) to declassify information when possible and to speed up security clearances, and coordination with the Department of Homeland Security and the Department of Commerce. The program only lets the government share risk information to trusted providers and suppliers, not the other way around. The Federal Communications Commission must add at least one public or consumer representative to the Communications Security, Reliability, and Interoperability Council and to each of its subgroups, with those appointments made within 180 days after March 12, 2020; those appointees are in addition to members who were on the Council on March 12, 2020. Definitions: Assistant Secretary = Assistant Secretary of Commerce for Communications and Information; foreign adversary = a foreign government or person that repeatedly or seriously harms U.S. national security or safety; supply chain security risk = risks and vulnerabilities involving equipment and software; trusted = the Assistant Secretary has determined the provider or supplier is not owned, controlled, or influenced by a foreign adversary.