[Congressional Record Volume 168, Number 7 (Tuesday, January 11, 2022)]
[Senate]
[Pages S162-S163]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]




               SUPPLY CHAIN SECURITY TRAINING ACT OF 2021

  Mr. SCHUMER. Madam President, I ask unanimous consent that the Senate 
proceed to the immediate consideration of Calendar No. 153, S. 2201.
  The PRESIDING OFFICER. The clerk will report the bill by title.
  The legislative clerk read as follows:

       A bill (S. 2201) to manage supply chain risk through 
     counterintelligence training, and for other purposes.

  There being no objection, the Senate proceeded to consider the bill, 
which had been reported from the Committee on Homeland Security and 
Governmental Affairs, with amendments, as follows:
  (The parts of the bill intended to be stricken are shown in boldface 
brackets, and the parts of the bill intended to be inserted are shown 
in italics.)

                                S. 2201

       Be it enacted by the Senate and House of Representatives of 
     the United States of America in Congress assembled,

     SECTION 1. SHORT TITLE.

       This Act may be cited as the ``Supply Chain Security 
     Training Act of 2021''.

     SEC. 2. TRAINING PROGRAM TO MANAGE SUPPLY CHAIN RISK.

       (a) In General.--Not later than 180 days after the date of 
     the enactment of this Act, the Administrator of General 
     Services, through the Federal Acquisition Institute, shall 
     develop a training program for officials with supply chain 
     risk management responsibilities at [executive] Federal 
     agencies.
       (b) Content.--The training program shall be designed to 
     prepare such personnel to perform supply chain risk 
     management activities and identify and mitigate supply chain 
     security threats that arise throughout the acquisition 
     lifecycle, including for the acquisition of information and 
     communications technology. The training program shall--
       (1) include, considering the protection of classified and 
     other sensitive information, information on current, specific 
     supply chain security threats; and
       (2) be updated as determined to be necessary by the 
     Administrator.
       (c) Coordination and Consultation.--In developing the 
     training program, the Administrator shall--
       (1) coordinate with the Federal Acquisition Security 
     Council, the Secretary of Homeland Security, and the Director 
     of the Office of Personnel Management; and
       (2) consult with the Director of the Department of 
     Defense's Defense Acquisition University and the Director of 
     National Intelligence.
       (d) Guidance.--
       (1) In general.--Not later than 180 days after the training 
     program is developed under subsection (a), the Director of 
     the Office of Management and Budget shall promulgate guidance 
     to Federal agencies requiring executive agency adoption and 
     use of the training program. Such guidance shall--
       [(1)] (A) allow executive agencies to incorporate the 
     training program into existing agency training programs; and
       [(2)] (B) provide guidance on how to identify executive 
     agency officials with supply chain risk management 
     responsibilities.
       (2) Availability.--The Director of the Office of Management 
     and Budget shall make the guidance promulgated under 
     paragraph (1) available to Federal agencies of the 
     legislative and judicial branches.

     SEC. 3. REPORTS ON IMPLEMENTATION OF PROGRAM.

       Not later than 180 days after the completion of the first 
     course, and annually thereafter for the next three years, the 
     Administrator of General Services shall submit to the 
     appropriate congressional committees and leadership a report 
     on implementation of the training program required under 
     section 2.

     SEC. 4. DEFINITIONS.

       In this Act:
       (1) Appropriate congressional committees and leadership.--
     The term ``appropriate congressional committees'' means--
       (A) the Committee on Homeland Security and Governmental 
     Affairs and the Committee on Armed Services of the Senate; 
     and

[[Page S163]]

       (B) the Committee on Oversight and Reform and the Committee 
     on Armed Services of the House of Representatives.
       (2) Information and communications technology.--The term 
     ``information and communications technology'' has the meaning 
     given the term in section 4713(k) of title 41, United States 
     Code.
       (3) Executive agency.--The term ``executive agency'' has 
     the meaning given the term in section 133 of title 41, United 
     States Code.
       (4) Federal agency.--The term ``Federal agency'' means any 
     agency, committee, commission, office, or other establishment 
     in the executive, legislative, or judicial branch of the 
     Federal Government.
       [(4)](5) Training program.--The term ``training program'' 
     means the training program developed pursuant to section 
     2(a).

  Mr. SCHUMER. I ask unanimous consent that the committee-reported 
amendments be withdrawn; that the Peters substitute amendment, which is 
at the desk, be considered and agreed to; that the bill, as amended, be 
considered read a third time and passed; and that the motion to 
reconsider be considered made and laid upon the table.
  The PRESIDING OFFICER. Without objection, it is so ordered.
  The committee-reported amendments were withdrawn.
  The amendment (No. 4899), in the nature of a substitute, was agreed 
to, as follows:

                (Purpose: In the nature of a substitute)

        Strike all after the enacting clause and insert the 
     following:

     SECTION 1. SHORT TITLE.

       This Act may be cited as the ``Supply Chain Security 
     Training Act of 2021''.

     SEC. 2. TRAINING PROGRAM TO MANAGE SUPPLY CHAIN RISK.

       (a) In General.--Not later than 180 days after the date of 
     the enactment of this Act, the Administrator of General 
     Services, through the Federal Acquisition Institute, shall 
     develop a training program for officials with supply chain 
     risk management responsibilities at Federal agencies.
       (b) Content.--The training program shall be designed to 
     prepare such personnel to perform supply chain risk 
     management activities and identify and mitigate supply chain 
     security risks that arise throughout the acquisition 
     lifecycle, including for the acquisition of information and 
     communications technology. The training program shall--
       (1) include, considering the protection of classified and 
     other sensitive information, information on current, specific 
     supply chain security threats and vulnerabilities; and
       (2) be updated as determined to be necessary by the 
     Administrator.
       (c) Coordination and Consultation.--In developing and 
     determining updates to the training program, the 
     Administrator shall--
       (1) coordinate with the Federal Acquisition Security 
     Council, the Secretary of Homeland Security, and the Director 
     of the Office of Personnel Management; and
       (2) consult with the Director of the Department of 
     Defense's Defense Acquisition University, the Director of 
     National Intelligence, and the Director of the National 
     Institute of Standards and Technology.
       (d) Guidance.--
       (1) In general.--Not later than 180 days after the training 
     program is developed under subsection (a), the Director of 
     the Office of Management and Budget shall promulgate guidance 
     to Federal agencies requiring executive agency adoption and 
     use of the training program. Such guidance shall--
       (A) allow executive agencies to incorporate the training 
     program into existing agency training programs; and
       (B) provide guidance on how to identify executive agency 
     officials with supply chain risk management responsibilities.
       (2) Availability.--The Director of the Office of Management 
     and Budget shall make the guidance promulgated under 
     paragraph (1) available to Federal agencies of the 
     legislative and judicial branches.

     SEC. 3. REPORTS ON IMPLEMENTATION OF PROGRAM.

       Not later than 180 days after the completion of the first 
     course, and annually thereafter for the next three years, the 
     Administrator of General Services shall submit to the 
     appropriate congressional committees and leadership a report 
     on implementation of the training program required under 
     section 2.

     SEC. 4. DEFINITIONS.

       In this Act:
       (1) Appropriate congressional committees and leadership.--
     The term ``appropriate congressional committees'' means--
       (A) the Committee on Homeland Security and Governmental 
     Affairs and the Committee on Armed Services of the Senate; 
     and
       (B) the Committee on Oversight and Reform and the Committee 
     on Armed Services of the House of Representatives.
       (2) Information and communications technology.--The term 
     ``information and communications technology'' has the meaning 
     given the term in section 4713(k) of title 41, United States 
     Code.
       (3) Executive agency.--The term ``executive agency'' has 
     the meaning given the term in section 133 of title 41, United 
     States Code.
       (4) Federal agency.--The term ``Federal agency'' means any 
     agency, committee, commission, office, or other establishment 
     in the executive, legislative, or judicial branch of the 
     Federal Government.
       (5) Training program.--The term ``training program'' means 
     the training program developed pursuant to section 2(a).
  The bill (S. 2201), as amended, was ordered to be engrossed for a 
third reading, was read the third time, and passed.

                          ____________________