II
Calendar No. 403
116th CONGRESS
2d Session
H. R. 2881
IN THE SENATE OF THE UNITED STATES
January 9, 2020
Received; read twice and placed on the calendar
AN ACT
To require the President to develop a strategy to ensure the security of next generation mobile telecommunications systems and infrastructure in the United States and to assist allies and strategic partners in maximizing the security of next generation mobile telecommunications systems, infrastructure, and software, and for other purposes.
Short title
This Act may be cited as the Secure 5G and Beyond Act of 2020
.
Strategy to ensure security of next generation wireless communications systems and infrastructure
Appropriate committees of congress defined
In this Act, the term appropriate committees of Congress
means—
the Select Committee on Intelligence, the Committee on Commerce, Science, and Transportation, the Committee on Foreign Relations, the Committee on Armed Services, and the Committee on Homeland Security and Governmental Affairs of the Senate; and
the Permanent Select Committee on Intelligence, the Committee on Energy and Commerce, the Committee on Foreign Affairs, the Committee on Armed Services, and the Committee on Homeland Security of the House of Representatives.
Strategy required
Not later than 180 days after the date of enactment of this Act, the President, in consultation with the Chairman of the Federal Communications Commission, the Secretary of Commerce, the Assistant Secretary of Commerce for Communications and Information, the Secretary of Homeland Security, the Director of National Intelligence, the Attorney General, the Secretary of State, the Secretary of Energy, and the Secretary of Defense, and consistent with the protection of national security information, shall develop and submit to the appropriate committees of Congress a strategy—
to ensure the security of 5th and future generations wireless communications systems and infrastructure within the United States;
to assist mutual defense treaty allies of the United States, strategic partners of the United States, and other countries, when in the security and strategic interests of the United States, in maximizing the security of 5th and future generations wireless communications systems and infrastructure inside their countries; and
to protect the competitiveness of United States companies, privacy of United States consumers, and integrity and impartiality of standards-setting bodies and processes related to 5th and future generations wireless communications systems and infrastructure.
Designation
The strategy developed under subsection (b) shall be known as the National Strategy to Secure 5G and Next Generation Wireless Communications
(referred to in this Act as the Strategy
).
Elements
The Strategy shall represent a whole-of-government approach and shall include the following:
A description of efforts to facilitate domestic 5th and future generations wireless communications rollout.
A description of efforts to assess the risks to and identify core security principles of 5th and future generations wireless communications infrastructure.
A description of efforts to address risks to United States and national security during development and deployment of 5th and future generations wireless communications infrastructure worldwide.
A description of efforts to promote responsible global development and deployment of 5th and future generations wireless communications, including through robust international engagement, leadership in the development of international standards, and incentivizing market competitiveness of secure 5th and future generation wireless communications infrastructure options.
Public Consultation
In developing the Strategy, the President shall consult with relevant groups that represent consumers or the public interest, private sector communications providers, and communications infrastructure and systems equipment developers.
Strategy implementation plan
Not later than 180 days after the date of the enactment of this Act, the President shall develop an implementation plan for the Strategy (referred to in this Act as the Strategy implementation plan
), which shall include, at a minimum, the following:
A description of United States national and economic security interests pertaining to the deployment of 5th and future generations wireless communications systems and infrastructure.
An identification and assessment of potential security threats and vulnerabilities to the infrastructure, equipment, systems, software, and virtualized networks that support 5th and future generations wireless communications systems, infrastructure, and enabling technologies. The assessment shall, as practicable, include a comprehensive evaluation of the full range of threats to, and unique security challenges posed by, 5th and future generations wireless communications systems and infrastructure, as well as steps that public and private sector entities can take to mitigate those threats.
An evaluation of available domestic suppliers of 5th and future generations wireless communications equipment and other suppliers in countries that are mutual defense allies or strategic partners of the United States and a strategy to assess their ability to produce and supply 5th generation and future generations wireless communications systems and infrastructure.
Identification of where security gaps exist in the United States domestic or mutual defense treaty allies and strategic partners communications equipment supply chain for 5th and future generations wireless communications systems and infrastructure.
Identification of incentives and policy options to help close or narrow any security gaps identified under paragraph (4) in the United States domestic industrial base, including research and development in critical technologies and workforce development in 5th and future generations wireless communications systems and infrastructure.
Identification of incentives and policy options for leveraging the communications equipment suppliers from mutual defense treaty allies, strategic partners, and other countries to ensure that private industry in the United States has adequate sources for secure, effective, and reliable 5th and future generations wireless communications systems and infrastructure equipment.
A plan for diplomatic engagement with mutual defense treaty allies, strategic partners, and other countries to share security risk information and findings pertaining to 5th and future generations wireless communications systems and infrastructure equipment and cooperation on mitigating those risks.
A plan for engagement with private sector communications infrastructure and systems equipment developers and critical infrastructure owners and operators who have a critical dependency on communications infrastructure to share information and findings on 5th and future generations wireless communications systems and infrastructure equipment standards to secure platforms.
A plan for engagement with private sector communications infrastructure and systems equipment developers to encourage the maximum participation possible on standards-setting bodies related to such systems and infrastructure equipment standards by public and private sector entities from the United States.
A plan for diplomatic engagement with mutual defense treaty allies, strategic partners, and other countries to share information and findings on 5th and future generations wireless communications systems and infrastructure equipment standards to promote maximum interoperability, competitiveness, openness, and secure platforms.
A plan for diplomatic engagement with mutual defense treaty allies, strategic partners, and other countries to share information and findings on 5th and future generations wireless communications infrastructure and systems equipment concerning the standards-setting bodies related to such systems and infrastructure equipment to promote maximum transparency, openness, impartiality, integrity, and neutrality.
A plan for joint testing environments with mutual defense treaty allies, strategic partners, and other countries to ensure a trusted marketplace for 5th and future generations wireless communications systems and infrastructure equipment.
A plan for research and development by the Federal Government, in close partnership with trusted supplier entities, mutual defense treaty allies, strategic partners, and other countries to reach and maintain United States leadership in 5th and future generations wireless communications systems and infrastructure security, including the development of an ongoing capability to identify security vulnerabilities in 5th and future generations wireless communications systems.
Options for identifying and helping to mitigate the security risks of 5th and future generations wireless communications systems and infrastructure that have security flaws or vulnerabilities, or are utilizing equipment sourced from countries of concern, and that have already been put in place within the systems and infrastructure of mutual defense treaty allies, strategic partners, and other countries, when in the security interests of the United States.
A description of the roles and responsibilities of the appropriate executive branch agencies and interagency mechanisms to coordinate implementation of the Strategy, as provided in section 4(d).
An identification of the key diplomatic, development, intelligence, military, and economic resources necessary to implement the Strategy, including specific budgetary requests.
As necessary, a description of such legislative or administrative action needed to carry out the Strategy.
Limitations and briefings
Limitations
In general
The Strategy and the Strategy implementation plan shall not include a recommendation or a proposal to nationalize 5th or future generations wireless communications systems or infrastructure.
Rule of construction
Nothing in this Act shall be construed to limit the authority or ability of any executive branch agency.
Public comment
Not later than 60 days after the date of enactment of this Act, the President shall seek public comment regarding the development and implementation of the Strategy implementation plan.
Briefing
In general
Not later than 21 days after the date on which the Strategy implementation plan is completed, the President shall direct appropriate representatives from the executive branch agencies involved in the formulation of the Strategy and Strategy implementation plan to provide the appropriate committees of Congress a briefing on the implementation of the Strategy.
Unclassified setting
The briefing under paragraph (1) shall be held in an unclassified setting to the maximum extent possible.
Implementation
The National Telecommunications and Information Administration shall, in coordination with other relevant executive branch agencies—
implement the Strategy;
keep congressional committees apprised of progress on implementation; and
not implement any proposal or recommendation involving spectrum licensed by the Commission unless the implementation of such proposal or recommendation is first approved by the Commission.
Form
The Strategy and Strategy implementation plan shall be submitted to the appropriate committees of Congress in unclassified form, but may include a classified annex.
Passed the House of Representatives January 8, 2020.
Cheryl L. Johnson,
Clerk
January 9, 2020
Received; read twice and placed on the calendar