[Congressional Record Volume 171, Number 133 (Friday, August 1, 2025)]
[Senate]
[Pages S5253-S5254]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]
SA 3492. Mrs. BLACKBURN submitted an amendment intended to be
proposed by her to the bill S. 2296, to authorize appropriations for
fiscal year 2026 for military activities of the Department of Defense,
for military construction, and for defense activities of the Department
of Energy, to prescribe military personnel strengths for such fiscal
year, and for other purposes; which was ordered to lie on the table; as
follows:
At the appropriate place in title XVI, insert the
following:
SEC. 16__. STRATEGY ON QUANTUM READINESS.
(a) Strategy Required.--Not later than 180 days after the
date of the enactment of this Act, the Secretary of Defense
shall, in coordination with the Chief Information Officer of
the Department of Defense, submit to the congressional
defense committees a strategy on quantum readiness. Such
strategy shall include each of the following:
(1) An assessment of the risks that quantum computing pose
to Department of Defense systems and data.
(2) A determination of which Department systems and data
are most vulnerable to quantum threats and critical to
protect, and timelines for the transition of such systems and
data.
(3) An identification of the progress made by organizations
and elements of the Department of Defense in inventorying and
migrating all cryptographic systems to post-quantum
cryptography by 2035 or earlier.
(4) A plan to adopt and deploy automated quantum readiness
platform tools, including capabilities that--
(A) provide continuous visibility into an organization's
cryptographic landscape;
(B) automate the prioritization of cryptographic risks; and
(C) facilitate the remediation of insecure cryptography.
(5) An identification of the methodology used for
evaluating and validating Department cryptographic modules as
quantum ready.
(6) An estimate of resources needed to achieve quantum
readiness by the target deadline of 2035, as well as an
additional estimate of resources needed to achieve quantum
readiness earlier than 2035.
(7) A detailed breakdown of how the funds provided in
section 20005(a)(29) of the Act entitled ``An Act to provide
for reconciliation pursuant to title II of H. Con. Res. 14'',
approved July 4, 2025 (Public Law 119-21) will be allocated
and obligated across specific programs, projects, and
activities.
(8) Any other matter the Secretary of Defense considers
relevant.
(b) Form of Strategy.--The strategy required by subsection
(a) shall be submitted in unclassified form but may contain a
classified annex.
(c) Briefing.--Not later than 240 days after the date of
the enactment of this Act, the Secretary shall, in
coordination with the Chief Information Officer, submit to
the congressional defense committees a briefing on the
strategy required under subsection (a).
(d) Definitions.--In this section:
(1) The term ``post-quantum cryptography'' has the meaning
given that term in
[[Page S5254]]
section 3 of the Quantum Computing Cybersecurity Preparedness
Act (Public Law 117-260; 6 U.S.C. 1526 note).
(2) The term ``quantum readiness'' means the state in which
an agency's cryptographic systems have been inventoried,
continuously assessed for quantum vulnerabilities, and
remediated through the adoption of quantum-resistant
cryptographic algorithms and other practices.
______