GAO REPORT ON DEPARTMENT CRITICAL TELECOMMUNICATIONS EQUIPMENT OR SERVICES OBTAINED FROM SUPPLIERS CLOSELY LINKED TO A LEADING CYBER-THREAT ACTOR.

SEC. 707. GAO REPORT ON DEPARTMENT CRITICAL TELECOMMUNICATIONS EQUIPMENT OR SERVICES OBTAINED FROM SUPPLIERS CLOSELY LINKED TO A LEADING CYBER-THREAT ACTOR. (a) Report Required.—Not later than 180 days after the date of the enactment of this Act, the Comptroller General of the United States shall submit to Congress a report on any critical telecommunications equipment, technologies, or services obtained or used by the Department or its contractors or subcontrators that is— (1) manufactured by a foreign supplier, or a contractor or subcontractor of such supplier, that is closely linked to a leading cyber-threat actor; or (2) from an entity that incorporates or utilizes information technology manufactured by a foreign supplier, or a contractor or subcontractor of such supplier, that is closely linked to a leading cyber-threat actor. (b) Form.—The report shall be submitted in unclassified form, but may include a classified annex. (c) Definitions.—In this section: (1) Leading cyber-threat actor.—The term “leading cyber-threat actor” means a country identified as a leading threat actor in cyberspace in the report entitled “Worldwide Threat Assessment of the US Intelligence Community”, dated February 9, 2016. (2) Closely linked.—The term “closely linked”, with respect to a foreign supplier, contractor, or subcontrator and a leading cyber-threat actor, means the foreign supplier, contractor, or subcontractor— (A) has ties to the military forces of such actor; (B) has ties to the intelligence services of such actor; (C) is the beneficiary of significant low interest or no-interest loans, loan forgiveness, or other support of such actor; or (D) is incorporated or headquartered in the territory of such actor.