STRATEGY FOR ASSURED ACCESS TO TRUSTED MICROELECTRONICS.

SEC. 231. STRATEGY FOR ASSURED ACCESS TO TRUSTED MICROELECTRONICS.(a) Strategy.—The Secretary of Defense shall develop a strategy to ensure that the Department of Defense has assured 130 STAT. 2060 access to trusted microelectronics by not later than September 30, 2019.(b) Elements.—The strategy under subsection (a) shall include the following:(1) Definitions of the various levels of trust required by classes of Department of Defense systems.(2) Means of classifying systems of the Department of Defense based on the level of trust such systems are required to maintain with respect to microelectronics.(3) Means by which trust in microelectronics can be assured.(4) Means to increase the supplier base for assured microelectronics to ensure multiple supply pathways.(5) An assessment of the microelectronics needs of the Department of Defense in future years, including the need for trusted, radiation-hardened microelectronics.(6) An assessment of the microelectronic needs of the Department of Defense that may not be fulfilled by entities outside the Department of Defense.(7) The resources required to assure access to trusted microelectronics, including infrastructure, workforce, and investments in science and technology.(8) A research and development strategy to ensure that the Department of Defense can, to the maximum extent practicable, use state of the art commercial microelectronics capabilities or their equivalent, while satisfying the needs for trust.(9) Recommendations for changes in authorities, regulations, and practices, including acquisition policies, financial management, public-private partnership policies, or in any other relevant areas, that would support the achievement of the goals of the strategy.(c) Submission and Updates.—(1) Not later than one year after the date of the enactment of this Act, the Secretary shall submit to the congressional defense committees the strategy developed under subsection (a). The strategy shall be submitted in unclassified form, but may include a classified annex.(2) Not later than two years after submitting the strategy under paragraph (1) and not less frequently than once every two years thereafter until September 30, 2024, the Secretary shall update the strategy as the Secretary considers appropriate to support Department of Defense missions.(d) Directive Required.—Not later than September 30, 2019, the Secretary of Defense shall issue a directive for the Department of Defense describing how Department of Defense entities may access assured and trusted microelectronics supply chains for Department of Defense systems.(e) Report and Certification.—Not later than September 30, 2020, the Secretary of the Defense shall submit to the congressional defense committees—(1) a report on—(A) the status of the implementation of the strategy developed under subsection (a);(B) the actions being taken to achieve full implementation of such strategy, and a timeline for such implementation; and130 STAT. 2061(C) the status of the implementation of the directive required by subsection (d); and(2) a certification of whether the Department of Defense has an assured means for accessing a sufficient supply of trusted microelectronics, as required by the strategy developed under subsection (a).(f) Definitions.—In this section:(1) The term “assured” refers, with respect to microelectronics, to the ability of the Department of Defense to guarantee availability of microelectronics parts at the necessary volumes and with the performance characteristics required to meet the needs of the Department of Defense.(2) The terms “trust” and “trusted” refer, with respect to microelectronics, to the ability of the Department of Defense to have confidence that the microelectronics function as intended and are free of exploitable vulnerabilities, either intentionally or unintentionally designed or inserted as part of the system at any time during its life cycle.