[Congressional Bills 117th Congress]
[From the U.S. Government Publishing Office]
[S. 2201 Enrolled Bill (ENR)]

        S.2201

                    One Hundred Seventeenth Congress

                                 of the

                        United States of America


                          AT THE SECOND SESSION

           Begun and held at the City of Washington on Monday,
          the third day of January, two thousand and twenty two


                                 An Act


 
 To manage supply chain risk through counterintelligence training, and 
                           for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
    This Act may be cited as the ``Supply Chain Security Training Act 
of 2021''.
SEC. 2. TRAINING PROGRAM TO MANAGE SUPPLY CHAIN RISK.
    (a) In General.--Not later than 180 days after the date of the 
enactment of this Act, the Administrator of General Services, through 
the Federal Acquisition Institute, shall develop a training program for 
officials with supply chain risk management responsibilities at Federal 
agencies.
    (b) Content.--The training program shall be designed to prepare 
such personnel to perform supply chain risk management activities and 
identify and mitigate supply chain security risks that arise throughout 
the acquisition lifecycle, including for the acquisition of information 
and communications technology. The training program shall--
        (1) include, considering the protection of classified and other 
    sensitive information, information on current, specific supply 
    chain security threats and vulnerabilities; and
        (2) be updated as determined to be necessary by the 
    Administrator.
    (c) Coordination and Consultation.--In developing and determining 
updates to the training program, the Administrator shall--
        (1) coordinate with the Federal Acquisition Security Council, 
    the Secretary of Homeland Security, and the Director of the Office 
    of Personnel Management; and
        (2) consult with the Director of the Department of Defense's 
    Defense Acquisition University, the Director of National 
    Intelligence, and the Director of the National Institute of 
    Standards and Technology.
    (d) Guidance.--
        (1) In general.--Not later than 180 days after the training 
    program is developed under subsection (a), the Director of the 
    Office of Management and Budget shall promulgate guidance to 
    Federal agencies requiring executive agency adoption and use of the 
    training program. Such guidance shall--
            (A) allow executive agencies to incorporate the training 
        program into existing agency training programs; and
            (B) provide guidance on how to identify executive agency 
        officials with supply chain risk management responsibilities.
        (2) Availability.--The Director of the Office of Management and 
    Budget shall make the guidance promulgated under paragraph (1) 
    available to Federal agencies of the legislative and judicial 
    branches.
SEC. 3. REPORTS ON IMPLEMENTATION OF PROGRAM.
    Not later than 180 days after the completion of the first course, 
and annually thereafter for the next three years, the Administrator of 
General Services shall submit to the appropriate congressional 
committees and leadership a report on implementation of the training 
program required under section 2.
SEC. 4. DEFINITIONS.
    In this Act:
        (1) Appropriate congressional committees and leadership.--The 
    term ``appropriate congressional committees'' means--
            (A) the Committee on Homeland Security and Governmental 
        Affairs and the Committee on Armed Services of the Senate; and
            (B) the Committee on Oversight and Reform and the Committee 
        on Armed Services of the House of Representatives.
        (2) Information and communications technology.--The term 
    ``information and communications technology'' has the meaning given 
    the term in section 4713(k) of title 41, United States Code.
        (3) Executive agency.--The term ``executive agency'' has the 
    meaning given the term in section 133 of title 41, United States 
    Code.
        (4) Federal agency.--The term ``Federal agency'' means any 
    agency, committee, commission, office, or other establishment in 
    the executive, legislative, or judicial branch of the Federal 
    Government.
        (5) Training program.--The term ``training program'' means the 
    training program developed pursuant to section 2(a).

                               Speaker of the House of Representatives.

                            Vice President of the United States and    
                                               President of the Senate.