§1607 Ntia Program for Preventing Future Vulnerabilities

Summary

Create a program within 120 days after March 12, 2020, to share information about supply chain security risks with trusted providers of advanced communications service and trusted suppliers of communications equipment or services. The Assistant Secretary of Commerce for Communications and Information must run the program with help from the Director of National Intelligence, the FBI Director, the Secretary of Homeland Security, and the Commission. The program must include notice-and-comment, regular briefings and events, outreach to small businesses and rural providers, and a report to two Congressional committees within 180 days after March 12, 2020, that explains how to declassify material when possible and speed up clearances for sharing. The program must fit with work by the Department of Homeland Security and the Department of Commerce, and it only allows federal agencies to share risk information with trusted providers and suppliers—not the other way around. The Commission must add at least one public or consumer representative to the Communications Security, Reliability, and Interoperability Council and to each of its subgroups within 180 days after March 12, 2020; these members are extra to those who served on March 12, 2020. Definitions: Assistant Secretary = Assistant Secretary of Commerce for Communications and Information; foreign adversary = a foreign government or person that harms U.S. national security; supply chain security risk = risks and vulnerabilities about equipment and software; trusted = a provider or supplier the Assistant Secretary finds not owned, controlled, or influenced by a foreign adversary.