An Act To manage supply chain risk through counterintelligence training, and for other purposes.

June 16, 2022

[S. 2201]

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

Supply Chain Security Training Act of 2021.

41 USC 1703 note.

SECTION 1. SHORT TITLE. This Act may be cited as the “Supply Chain Security Training Act of 2021”.

SEC. 2. TRAINING PROGRAM TO MANAGE SUPPLY CHAIN RISK.(a) In General.—

Deadline.

Not later than 180 days after the date of the enactment of this Act, the Administrator of General Services, through the Federal Acquisition Institute, shall develop a training program for officials with supply chain risk management responsibilities at Federal agencies. (b) Content.—The training program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition lifecycle, including for the acquisition of information and communications technology. The training program shall—(1) include, considering the protection of classified and other sensitive information, information on current, specific supply chain security threats and vulnerabilities; and (2) be updated as determined to be necessary by the Administrator. (c) Coordination and Consultation.—In developing and determining updates to the training program, the Administrator shall—(1) coordinate with the Federal Acquisition Security Council, the Secretary of Homeland Security, and the Director of the Office of Personnel Management; and (2) consult with the Director of the Department of Defense’s Defense Acquisition University, the Director of National Intelligence, and the Director of the National Institute of Standards and Technology. (d) Guidance.—(1) In general.

Deadline.

—Not later than 180 days after the training program is developed under subsection (a), the Director of the Office of Management and Budget shall promulgate guidance to Federal agencies requiring executive agency adoption and use of the training program. Such guidance shall—(A) allow executive agencies to incorporate the training program into existing agency training programs; and136 STAT. 1270 (B) provide guidance on how to identify executive agency officials with supply chain risk management responsibilities. (2) Availability.—The Director of the Office of Management and Budget shall make the guidance promulgated under paragraph (1) available to Federal agencies of the legislative and judicial branches.

SEC. 3. REPORTS ON IMPLEMENTATION OF PROGRAM. Not

Time period.

later than 180 days after the completion of the first course, and annually thereafter for the next three years, the Administrator of General Services shall submit to the appropriate congressional committees and leadership a report on implementation of the training program required under section 2.

SEC. 4. DEFINITIONS. In this Act:(1) Appropriate congressional committees and leadership.—The term “appropriate congressional committees” means—(A) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (B) the Committee on Oversight and Reform and the Committee on Armed Services of the House of Representatives. (2) Information and communications technology.—The term “information and communications technology” has the meaning given the term in section 4713(k) of title 41, United States Code. (3) Executive agency.—The term “executive agency” has the meaning given the term in section 133 of title 41, United States Code. (4) Federal agency.—The term “Federal agency” means any agency, committee, commission, office, or other establishment in the executive, legislative, or judicial branch of the Federal Government.136 STAT. 1270 (5) Training program.—The term “training program” means the training program developed pursuant to section 2(a).

Approved June 16, 2022.