GAO REPORT ON DEPARTMENT CRITICAL TELECOMMUNICATIONS EQUIPMENT OR SERVICES OBTAINED FROM SUPPLIERS CLOSELY LINKED TO A LEADING CYBER-THREAT ACTOR.

SEC. 707. GAO REPORT ON DEPARTMENT CRITICAL TELECOMMUNICATIONS EQUIPMENT OR SERVICES OBTAINED FROM SUPPLIERS CLOSELY LINKED TO A LEADING CYBER-THREAT ACTOR.(a) Report Required.—Not later than 180 days after the date of the enactment of this Act, the Comptroller General of the United States shall submit to Congress a report on any critical telecommunications equipment, technologies, or services obtained or used by the Department or its contractors or subcontrators that is—(1) manufactured by a foreign supplier, or a contractor or subcontractor of such supplier, that is closely linked to a leading cyber-threat actor; or(2) from an entity that incorporates or utilizes information technology manufactured by a foreign supplier, or a contractor or subcontractor of such supplier, that is closely linked to a leading cyber-threat actor.(b) Form.—The report shall be submitted in unclassified form, but may include a classified annex.(c) Definitions.—In this section:(1) Leading cyber-threat actor.—The term “leading cyber-threat actor” means a country identified as a leading threat actor in cyberspace in the report entitled “Worldwide Threat Assessment of the US Intelligence Community”, dated February 9, 2016.(2) Closely linked.—The term “closely linked”, with respect to a foreign supplier, contractor, or subcontrator and a leading cyber-threat actor, means the foreign supplier, contractor, or subcontractor—(A) has ties to the military forces of such actor;(B) has ties to the intelligence services of such actor;(C) is the beneficiary of significant low interest or no-interest loans, loan forgiveness, or other support of such actor; or(D) is incorporated or headquartered in the territory of such actor.