DRAFT SAM 2023 12 Ascend BPA Appendix XX Legislation Regulations and Policies.pdf

Appendix <<XX>>: Legislation, Regulations, and Policies

Table XX: Legislation, Regulations, and Policies

United States Federal Government

— Acquisitions.gov

XX Section 889 Policies https://www.acquisition.gov/Section- 889-Policies

— Code of Federal Regulations (CFR)

XX 5 CFR 731 ADMINISTRATIVE

PERSONNEL, Suitability https://www.ecfr.gov/current/title-5/c hapter-I/subchapter-B/part-731

XX 13 CFR 121 BUSINESS CREDIT AND

ASSISTANCE, Small Business Size Regulations https://www.ecfr.gov/current/title-13/ chapter-I/part-121

XX 13 CFR 121.1203(d)(3) BUSINESS CREDIT AND ASSISTANCE, When will a waiver of the Nonmanufacturer Rule be granted for an individual contract?

https://www.ecfr.gov/current/title-13/ chapter-I/part-121/subpart-B/subject -group-ECFR018164ef7cdfc0f/secti on-121.1203

XX 13 CFR 125.6 BUSINESS CREDIT AND

ASSISTANCE, What are the prime contractor's limitations on subcontracting?

https://www.ecfr.gov/current/title-13/ chapter-I/part-125#125.6

XX 14 CFR 47.2 AERONAUTICS AND

SPACE, Definitions - Citizen of the United States or U.S. Citizen https://www.ecfr.gov/current/title-14/ chapter-I/subchapter-C/part-47/subp art-A/section-47.2

XX 22 CFR 120.61 FOREIGN RELATIONS,

Person https://www.ecfr.gov/current/title-22/ chapter-I/subchapter-M/part-120/su bpart-C/section-120.61

XX 22 CFR 120.62 FOREIGN RELATIONS,

U.S. Person https://www.ecfr.gov/current/title-22/ chapter-I/subchapter-M/part-120/su bpart-C/section-120.62

XX 32 CFR 117 NATIONAL DEFENSE,

National Industrial Security Program Operating Manual (NISPOM) https://www.ecfr.gov/current/title-32/ subtitle-A/chapter-I/subchapter-D/pa rt-117

XX 32 CFR 117.15 NATIONAL DEFENSE,

Safeguarding Classified Information https://www.ecfr.gov/current/title-32/ subtitle-A/chapter-I/subchapter-D/pa rt-117/section-117.15 https://www.acquisition.gov/Section-889-Policies https://www.acquisition.gov/Section-889-Policies https://www.ecfr.gov/current/title-5/chapter-I/subchapter-B/part-731 https://www.ecfr.gov/current/title-5/chapter-I/subchapter-B/part-731 https://www.ecfr.gov/current/title-13/chapter-I/part-121 https://www.ecfr.gov/current/title-13/chapter-I/part-121 https://www.ecfr.gov/current/title-13/chapter-I/part-121/subpart-B/subject-group-ECFR018164ef7cdfc0f/section-121.1203 https://www.ecfr.gov/current/title-13/chapter-I/part-121/subpart-B/subject-group-ECFR018164ef7cdfc0f/section-121.1203 https://www.ecfr.gov/current/title-13/chapter-I/part-121/subpart-B/subject-group-ECFR018164ef7cdfc0f/section-121.1203 https://www.ecfr.gov/current/title-13/chapter-I/part-121/subpart-B/subject-group-ECFR018164ef7cdfc0f/section-121.1203 https://www.ecfr.gov/current/title-13/chapter-I/part-125#125.6 https://www.ecfr.gov/current/title-13/chapter-I/part-125#125.6 https://www.ecfr.gov/current/title-14/chapter-I/subchapter-C/part-47/subpart-A/section-47.2 https://www.ecfr.gov/current/title-14/chapter-I/subchapter-C/part-47/subpart-A/section-47.2 https://www.ecfr.gov/current/title-14/chapter-I/subchapter-C/part-47/subpart-A/section-47.2 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.61 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.61 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.61 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.62 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.62 https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M/part-120/subpart-C/section-120.62 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117/section-117.15 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117/section-117.15 https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-117/section-117.15

XX 32 CFR 2001 NATIONAL DEFENSE,

Classified National Security Information https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2001

XX.X 32 CFR 2001 Subpart C NATIONAL DEFENSE, National Security Information, Identifications and Markings https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2001/sub part-C

XX 32 CFR 2001.80 NATIONAL DEFENSE,

Prescribed Standard Forms https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2001/sub part-H/section-2001.80

XX 32 CFR 2001.43 NATIONAL DEFENSE,

Storage https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2001/sub part-E/section-2001.43

XX 32 CFR 2002 NATIONAL DEFENSE,

Controlled Unclassified Information (CUI) https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2002

XX 32 CFR 2004 NATIONAL DEFENSE,

National Industrial Security Program

(NISP)

https://www.ecfr.gov/current/title-32/ subtitle-B/chapter-XX/part-2004

XX 36 CFR 1194 PARKS, FORESTS, AND

PUBLIC PROPERTY, Information and Communications Technology Standards and Guidelines1 https://www.ecfr.gov/current/title-36/ chapter-XI/part-1194

— Department of Commerce

— — National Telecommunications and Information Administration (NTIA)

XX The Minimum Elements For a Software Bill of Materials (SBOM) Pursuant to Executive Order 14028 on Improving the Nation’s Cybersecurity https://www.ntia.gov/report/2021/mi nimum-elements-software-bill-materi als-sbom

— Department of Defense (DoD)

XX Joint Travel Regulations https://www.defensetravel.dod.mil/si te/travelreg.cfm

—— Defense Federal Acquisition Regulation Supplement (DFARS)

XX DFARS 204.17 - Service Contract Inventory https://www.acquisition.gov/dfars/pa rt-204-administrative-and-informatio n-matters#changeme_16263015044

XX.X DFARS 204.1703 Reporting https://www.acquisition.gov/dfars/pa

1 Regulations: Rehabilitation Act of 1973, Public Law 105-220, Sec. 508 Electronic and information technology regulations https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-200 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-200 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-C https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-C https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-C https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-H/section-2001.80 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-H/section-2001.80 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-H/section-2001.80 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-E/section-2001.43 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-E/section-2001.43 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2001/subpart-E/section-2001.43 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2002 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2002 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2004 https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2004 https://www.ecfr.gov/current/title-36/chapter-XI/part-1194 https://www.ecfr.gov/current/title-36/chapter-XI/part-1194 https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom https://www.defensetravel.dod.mil/site/travelreg.cfm https://www.defensetravel.dod.mil/site/travelreg.cfm https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#changeme_1626301504418 https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#changeme_1626301504418 https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#changeme_1626301504418 https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#changeme_1626301504418 https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#DFARS_204.1703

Requirements rt-204-administrative-and-informatio n-matters#DFARS_204.1703

XX DFARS 239.76 - Cloud Computing https://www.acquisition.gov/dfars/pa rt-239-acquisition-information-techn ology#DFARS-239.76

XX.X DFARS 239.7602-1 General https://www.acquisition.gov/dfars/pa rt-239-acquisition-information-techn ology#DFARS-239.7602-1

XX.X DFARS 239.7602-2 Required storage of data within the United States or outlying areas https://www.acquisition.gov/dfars/pa rt-239-acquisition-information-techn ology#DFARS-239.7602-2

XX DFARS 252.203-7003 Agency Office of the Inspector General https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS_252.203-70

XX DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.204-701

XX DFARS 252.227-7013 Rights in Technical Data - Noncommercial Items https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.227-701

XX DFARS 252.227-7014 Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.227-701

XX DFARS 252.227-7015 Technical Data - Commercial Items https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.227-701

XX DFARS 252.227-7025 Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.227-702

XX DFARS 252.239-7010 Cloud Computing Services https://www.acquisition.gov/dfars/pa rt-252-solicitation-provisions-and-co ntract-clauses#DFARS-252.239-701

—— Defense Information Systems Agency (DISA) https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#DFARS_204.1703 https://www.acquisition.gov/dfars/part-204-administrative-and-information-matters#DFARS_204.1703 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.76 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.76 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.76 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-1 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-1 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-1 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-2 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-2 https://www.acquisition.gov/dfars/part-239-acquisition-information-technology#DFARS-239.7602-2 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS_252.203-7003 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS_252.203-7003 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS_252.203-7003 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS_252.203-7003 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7012 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7012 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7012 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7012 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7013 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7013 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7013 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7013 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7014 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7014 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7014 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7014 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7015 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7015 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7015 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7015 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7025 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7025 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7025 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.227-7025 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.239-7010 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.239-7010 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.239-7010 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.239-7010

XX Memorandum 2019 08 15: Department of Defense (DoD) Memorandum of Reciprocity for FedRAMP Authorized Moderate Baseline Cloud Service Offerings (CSO) at Impact Level 2 (IL2) https://www.doncio.navy.mil/FileHan dler.ashx?id=13641

— Department of Homeland Security (DHS)

— — Cybersecurity & Infrastructure Security Agency (CISA)

XX Binding Operational Directive 18-01 - Enhancing Email and Web Security https://www.cisa.gov/binding-operati onal-directive-18-01#checklist

— Department of State (DoS)

XX Foreign Affairs Handbook, 5 FAH-8 H-354, Cloud Computing Security https://fam.state.gov/FAM/05FAH08/ 05FAH080350.html

XX Standard Regulations https://aoprals.state.gov/

— Executive Office of the President (EOP)

XX Executive Order 13526: Classified National Security Information https://www.federalregister.gov/docu ments/2010/01/05/E9-31418/classifi ed-national-security-information

XX Executive Order 13556: Controlled Unclassified Information https://www.federalregister.gov/docu ments/2010/11/09/2010-28360/contr olled-unclassified-information

XX Executive Order 13873: Securing the Information and Communications Technology and Services Supply Chain https://www.federalregister.gov/docu ments/2019/05/17/2019-10538/secu ring-the-information-and-communica tions-technology-and-services-suppl y-chain

XX Executive Order 14008: Tackling the Climate Crisis at Home and Abroad https://www.federalregister.gov/docu ments/2021/02/01/2021-02177/tackl ing-the-climate-crisis-at-home-and-a broad

XX Executive Order 14028: Improving the Nation's Cybersecurity https://www.federalregister.gov/docu ments/2021/05/17/2021-10460/impr oving-the-nations-cybersecurity

XX Executive Order 14030: Climate-Related Financial Risk https://www.federalregister.gov/docu ments/2021/05/25/2021-11168/clima te-related-financial-risk

XX Executive Order 14035: Diversity, Equity, Inclusion, and Accessibility in the Federal https://www.federalregister.gov/docu ments/2021/06/30/2021-14127/diver https://www.doncio.navy.mil/FileHandler.ashx?id=13641 https://www.doncio.navy.mil/FileHandler.ashx?id=13641 https://www.cisa.gov/binding-operational-directive-18-01#checklist https://www.cisa.gov/binding-operational-directive-18-01#checklist https://fam.state.gov/FAM/05FAH08/05FAH080350.html https://fam.state.gov/FAM/05FAH08/05FAH080350.html https://aoprals.state.gov/ https://www.federalregister.gov/documents/2010/01/05/E9-31418/classified-national-security-information https://www.federalregister.gov/documents/2010/01/05/E9-31418/classified-national-security-information https://www.federalregister.gov/documents/2010/01/05/E9-31418/classified-national-security-information https://www.federalregister.gov/documents/2010/11/09/2010-28360/controlled-unclassified-information https://www.federalregister.gov/documents/2010/11/09/2010-28360/controlled-unclassified-information https://www.federalregister.gov/documents/2010/11/09/2010-28360/controlled-unclassified-information https://www.federalregister.gov/documents/2019/05/17/2019-10538/securing-the-information-and-communications-technology-and-services-supply-chain https://www.federalregister.gov/documents/2019/05/17/2019-10538/securing-the-information-and-communications-technology-and-services-supply-chain https://www.federalregister.gov/documents/2019/05/17/2019-10538/securing-the-information-and-communications-technology-and-services-supply-chain https://www.federalregister.gov/documents/2019/05/17/2019-10538/securing-the-information-and-communications-technology-and-services-supply-chain https://www.federalregister.gov/documents/2019/05/17/2019-10538/securing-the-information-and-communications-technology-and-services-supply-chain https://www.federalregister.gov/documents/2021/02/01/2021-02177/tackling-the-climate-crisis-at-home-and-abroad https://www.federalregister.gov/documents/2021/02/01/2021-02177/tackling-the-climate-crisis-at-home-and-abroad https://www.federalregister.gov/documents/2021/02/01/2021-02177/tackling-the-climate-crisis-at-home-and-abroad https://www.federalregister.gov/documents/2021/02/01/2021-02177/tackling-the-climate-crisis-at-home-and-abroad https://www.federalregister.gov/documents/2021/05/17/2021-10460/improving-the-nations-cybersecurity https://www.federalregister.gov/documents/2021/05/17/2021-10460/improving-the-nations-cybersecurity https://www.federalregister.gov/documents/2021/05/17/2021-10460/improving-the-nations-cybersecurity https://www.federalregister.gov/documents/2021/05/25/2021-11168/climate-related-financial-risk https://www.federalregister.gov/documents/2021/05/25/2021-11168/climate-related-financial-risk https://www.federalregister.gov/documents/2021/05/25/2021-11168/climate-related-financial-risk https://www.federalregister.gov/documents/2021/06/30/2021-14127/diversity-equity-inclusion-and-accessibility-in-the-federal-workforce https://www.federalregister.gov/documents/2021/06/30/2021-14127/diversity-equity-inclusion-and-accessibility-in-the-federal-workforce

Workforce sity-equity-inclusion-and-accessibilit y-in-the-federal-workforce

XX Executive Order 14057: Clean Energy Industries and Jobs; Efforts To Catalyze Through Federal Sustainability https://www.federalregister.gov/publi c-inspection/2021-27114/clean-ener gy-industries-and-jobs-efforts-to-cat alyze-through-federal-sustainability-eo-14057

XX Homeland Security Presidential Directive 12: Policy for a Common Identification Standard for Federal Employees and Contractors https://www.dhs.gov/homeland-secu rity-presidential-directive-12

XX National Cybersecurity Strategy https://www.whitehouse.gov/briefing -room/statements-releases/2023/03/ 02/fact-sheet-biden-harris-administr ation-announces-national-cybersecu rity-strategy/

XX Presidential Policy Directive 21: Critical Infrastructure Security and Resilience https://obamawhitehouse.archives.g ov/the-press-office/2013/02/12/presi dential-policy-directive-critical-infrast ructure-security-and-resil

XX Presidential Policy Directive 41: Critical Infrastructure Security and Resilience https://obamawhitehouse.archives.g ov/the-press-office/2016/07/26/presi dential-policy-directive-united-states -cyber-incident

— Federal Acquisition Regulation (FAR)

XX FAR 2.101 Definitions https://www.acquisition.gov/far/part-

2#FAR_2_101

XX FAR 3.909 Prohibition on Providing Funds to an Entity that Requires Certain Internal Confidentiality Agreements or Statements https://www.acquisition.gov/far/part-

3#FAR_3_909

XX FAR 4.4 Safeguarding Classified Information Within Industry https://www.acquisition.gov/far/subp art-4.4

XX FAR 7.5 Inherently Governmental Functions https://www.acquisition.gov/far/part- 7#FAR_Subpart_7_5

XX FAR 8.404 Use of Federal Supply Schedules https://www.acquisition.gov/far/part-

8#FAR_8_404

XX FAR 8.405-6 Limiting Sources https://www.acquisition.gov/far/8.40 5-6 https://www.federalregister.gov/documents/2021/06/30/2021-14127/diversity-equity-inclusion-and-accessibility-in-the-federal-workforce https://www.federalregister.gov/documents/2021/06/30/2021-14127/diversity-equity-inclusion-and-accessibility-in-the-federal-workforce https://www.federalregister.gov/public-inspection/2021-27114/clean-energy-industries-and-jobs-efforts-to-catalyze-through-federal-sustainability-eo-14057 https://www.federalregister.gov/public-inspection/2021-27114/clean-energy-industries-and-jobs-efforts-to-catalyze-through-federal-sustainability-eo-14057 https://www.federalregister.gov/public-inspection/2021-27114/clean-energy-industries-and-jobs-efforts-to-catalyze-through-federal-sustainability-eo-14057 https://www.federalregister.gov/public-inspection/2021-27114/clean-energy-industries-and-jobs-efforts-to-catalyze-through-federal-sustainability-eo-14057 https://www.federalregister.gov/public-inspection/2021-27114/clean-energy-industries-and-jobs-efforts-to-catalyze-through-federal-sustainability-eo-14057 https://www.dhs.gov/homeland-security-presidential-directive-12 https://www.dhs.gov/homeland-security-presidential-directive-12 https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/ https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/ https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/ https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/ https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/ https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil https://obamawhitehouse.archives.gov/the-press-office/2016/07/26/presidential-policy-directive-united-states-cyber-incident https://obamawhitehouse.archives.gov/the-press-office/2016/07/26/presidential-policy-directive-united-states-cyber-incident https://obamawhitehouse.archives.gov/the-press-office/2016/07/26/presidential-policy-directive-united-states-cyber-incident https://obamawhitehouse.archives.gov/the-press-office/2016/07/26/presidential-policy-directive-united-states-cyber-incident https://www.acquisition.gov/far/part-2#FAR_2_101 https://www.acquisition.gov/far/part-2#FAR_2_101 https://www.acquisition.gov/far/part-3#FAR_3_909 https://www.acquisition.gov/far/part-3#FAR_3_909 https://www.acquisition.gov/far/subpart-4.4 https://www.acquisition.gov/far/subpart-4.4 https://www.acquisition.gov/far/part-7#FAR_Subpart_7_5 https://www.acquisition.gov/far/part-7#FAR_Subpart_7_5 https://www.acquisition.gov/far/part-8#FAR_8_404 https://www.acquisition.gov/far/part-8#FAR_8_404 https://www.acquisition.gov/far/8.405-6 https://www.acquisition.gov/far/8.405-6

XX FAR 9.4 Debarment, Suspension, and Ineligibility https://www.acquisition.gov/far/part- 9#FAR_Subpart_9_4

XX FAR 9.5 Organizational and Consultant Conflicts of Interest https://www.acquisition.gov/far/subp art-9.5

XX FAR 11.002 Policy https://www.acquisition.gov/far/part-

11#FAR_11_002

XX FAR 16.202 Firm Fixed Price https://www.acquisition.gov/far/part-

16#FAR_16_202

XX FAR 16.601 Time-and-Materials (T&M) Contracts https://www.acquisition.gov/far/16.6

XX FAR 16.602 Labor-Hour (LH) Contracts https://www.acquisition.gov/far/part-

16#FAR_16_602

XX FAR 16.503 Requirements contracts https://www.acquisition.gov/far/part-

16#FAR_16_503

XX FAR 16.505 Ordering https://www.acquisition.gov/far/16.5

XX FAR 17.1 Multi-year Contracting https://www.acquisition.gov/far/part- 17#FAR_Subpart_17_1

XX FAR 17.2 Options https://www.acquisition.gov/far/part- 17#FAR_Subpart_17_2

XX FAR 17.207 Exercise of Options https://www.acquisition.gov/far/17.2

XX FAR 23.2 Energy and Water Efficiency and Renewable Energy https://www.acquisition.gov/far/part- 23#FAR_Subpart_23_2

XX FAR 23.7 Contracting for Environmentally Preferable Products and Services https://www.acquisition.gov/far/part- 23#FAR_Subpart_23_7

XX FAR 24.2 Freedom of Information Act https://www.acquisition.gov/far/part- 24#FAR_Subpart_24_2

XX FAR 27.4 Rights in Data and Copyrights https://www.acquisition.gov/far/part- 27#FAR_Subpart_27_4

XX.X FAR 27.404-1 Unlimited rights data https://www.acquisition.gov/far/part-

27#FAR_27_404_1

XX.X FAR 27.404-2 Limited rights data and restricted computer software https://www.acquisition.gov/far/part-

27#FAR_27_404_2

XX FAR 27.405-1 Special works https://www.acquisition.gov/far/part-https://www.acquisition.gov/far/part-9#FAR_Subpart_9_4 https://www.acquisition.gov/far/part-9#FAR_Subpart_9_4 https://www.acquisition.gov/far/subpart-9.5 https://www.acquisition.gov/far/subpart-9.5 https://www.acquisition.gov/far/part-11#FAR_11_002 https://www.acquisition.gov/far/part-11#FAR_11_002 https://www.acquisition.gov/far/part-16#FAR_16_202 https://www.acquisition.gov/far/part-16#FAR_16_202 https://www.acquisition.gov/far/16.601 https://www.acquisition.gov/far/16.601 https://www.acquisition.gov/far/part-16#FAR_16_602 https://www.acquisition.gov/far/part-16#FAR_16_602 https://www.acquisition.gov/far/part-16#FAR_16_503 https://www.acquisition.gov/far/part-16#FAR_16_503 https://www.acquisition.gov/far/16.505 https://www.acquisition.gov/far/16.505 https://www.acquisition.gov/far/part-17#FAR_Subpart_17_1 https://www.acquisition.gov/far/part-17#FAR_Subpart_17_1 https://www.acquisition.gov/far/part-17#FAR_Subpart_17_2 https://www.acquisition.gov/far/part-17#FAR_Subpart_17_2 https://www.acquisition.gov/far/17.207 https://www.acquisition.gov/far/17.207 https://www.acquisition.gov/far/part-23#FAR_Subpart_23_2 https://www.acquisition.gov/far/part-23#FAR_Subpart_23_2 https://www.acquisition.gov/far/part-23#FAR_Subpart_23_7 https://www.acquisition.gov/far/part-23#FAR_Subpart_23_7 https://www.acquisition.gov/far/part-24#FAR_Subpart_24_2 https://www.acquisition.gov/far/part-24#FAR_Subpart_24_2 https://www.acquisition.gov/far/part-27#FAR_Subpart_27_4 https://www.acquisition.gov/far/part-27#FAR_Subpart_27_4 https://www.acquisition.gov/far/part-27#FAR_27_404_1 https://www.acquisition.gov/far/part-27#FAR_27_404_1 https://www.acquisition.gov/far/part-27#FAR_27_404_2 https://www.acquisition.gov/far/part-27#FAR_27_404_2 https://www.acquisition.gov/far/part-27#FAR_27_405_1

27#FAR_27_405_1

XX FAR 31.205-46 Travel Costs https://www.acquisition.gov/far/part-

31#FAR_31_205_46

XX FAR FAR 37.104 Personal services contracts https://www.acquisition.gov/far/37.1

XX FAR 39.2 Information and Communication Technology https://www.acquisition.gov/far/part- 39#FAR_Subpart_39_2

XX FAR 39.204 Exceptions https://www.acquisition.gov/far/part-

39#FAR_39_204

XX FAR 39.205 Exemptions https://www.acquisition.gov/far/part-

39#FAR_39_205

XX FAR 42.15 Contractor Performance Information https://www.acquisition.gov/far/part- 42#FAR_Subpart_42_15

XX FAR 47.4 Air Transportation by U.S.-Flag Carriers https://www.acquisition.gov/far/part- 47#FAR_Subpart_47_4

XX FAR 49 Termination of Contracts https://www.acquisition.gov/far/part-

XX FAR 52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements-Representation https://www.acquisition.gov/far/part-

52#FAR_52_203_18

XX FAR 52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements https://www.acquisition.gov/far/part-

52#FAR_52_203_19

XX FAR 52.204-2 Security Requirements https://www.acquisition.gov/far/part-

52#FAR_52_204_2

XX FAR 52.204-9 Personal Identity Verification of Contractor Personnel https://www.acquisition.gov/far/part-

52#FAR_52_204_9

XX FAR 52.204-14 Service Contract Reporting Requirements https://www.acquisition.gov/far/part-

52#FAR_52_204_14

XX FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems https://www.acquisition.gov/far/part-

52#FAR_52_204_21

XX 52.217-8 Option to Extend Services https://www.acquisition.gov/far/part-

52#FAR_52_217_8

XX FAR 52.223-22 Public Disclosure of Greenhouse Gas Emissions and https://www.acquisition.gov/far/part-

52#FAR_52_223_22

https://www.acquisition.gov/far/part-27#FAR_27_405_1 https://www.acquisition.gov/far/part-31#FAR_31_205_46 https://www.acquisition.gov/far/part-31#FAR_31_205_46 https://www.acquisition.gov/far/37.104 https://www.acquisition.gov/far/37.104 https://www.acquisition.gov/far/part-39#FAR_Subpart_39_2 https://www.acquisition.gov/far/part-39#FAR_Subpart_39_2 https://www.acquisition.gov/far/part-39#FAR_39_204 https://www.acquisition.gov/far/part-39#FAR_39_204 https://www.acquisition.gov/far/part-39#FAR_39_205 https://www.acquisition.gov/far/part-39#FAR_39_205 https://www.acquisition.gov/far/part-42#FAR_Subpart_42_15 https://www.acquisition.gov/far/part-42#FAR_Subpart_42_15 https://www.acquisition.gov/far/part-47#FAR_Subpart_47_4 https://www.acquisition.gov/far/part-47#FAR_Subpart_47_4 https://www.acquisition.gov/far/part-49 https://www.acquisition.gov/far/part-49 https://www.acquisition.gov/far/part-52#FAR_52_203_18 https://www.acquisition.gov/far/part-52#FAR_52_203_18 https://www.acquisition.gov/far/part-52#FAR_52_203_19 https://www.acquisition.gov/far/part-52#FAR_52_203_19 https://www.acquisition.gov/far/part-52#FAR_52_204_2 https://www.acquisition.gov/far/part-52#FAR_52_204_2 https://www.acquisition.gov/far/part-52#FAR_52_204_9 https://www.acquisition.gov/far/part-52#FAR_52_204_9 https://www.acquisition.gov/far/part-52#FAR_52_204_14 https://www.acquisition.gov/far/part-52#FAR_52_204_14 https://www.acquisition.gov/far/part-52#FAR_52_204_21 https://www.acquisition.gov/far/part-52#FAR_52_204_21 https://www.acquisition.gov/far/part-52#FAR_52_217_8 https://www.acquisition.gov/far/part-52#FAR_52_217_8 https://www.acquisition.gov/far/part-52#FAR_52_223_22 https://www.acquisition.gov/far/part-52#FAR_52_223_22

Reduction Goals-Representation

XX FAR 52.227-14 Rights in Data-General https://www.acquisition.gov/far/part-

52#FAR_52_227_14

XX FAR 52.227-17 Rights in Data-Special Works https://www.acquisition.gov/far/part-

52#FAR_52_227_17

— General Services Administration (GSA)

XX Federal Travel Regulation https://www.gsa.gov/policy-regulatio ns/regulations/federal-travel-regulati on-ftr

XX GSA Order 4800.2I: Eligibility to Use GSA Sources of Supply and Services https://www.gsa.gov/directive/eligibil ity-to-use-gsa-sources-of-supply-an d-services

XX IT Security Procedural Guide: Incident Response (IR) CIO-IT Security-01-02 https://www.gsa.gov/policy-regulatio ns/policy/information-integrity-and-a ccess/it-security-procedural-guides

—— General Services Administration Manual (GSAM)

XX GSAM 504.1370 GSA Credentials and Access Management Procedures https://www.acquisition.gov/gsam/50 4.1370

XX GSAM 552.216-75 Transactional Data Reporting https://www.acquisition.gov/content/ part-552-solicitation-provisions-and-contract-clauses#i1876737

XX GSAM 552.238-78 Identification of Products that Have Environmental Attributes https://www.acquisition.gov/gsam/pa rt-552#GSAM_552_238_78

XX GSAM 552.238-115 Special Ordering Procedures for the Acquisition of Order-Level Materials https://www.acquisition.gov/content/ part-552-solicitation-provisions-and-contract-clauses#i1876737

XX GSAM 552.238-199 Special Ordering Procedures Applicable When Procuring Cloud Computing On a Consumption Basis (MAR 2022)

Attachment X

— Government Accountability Office (GAO)

XX Principles of Federal Appropriations Law https://www.gao.gov/legal/appropriat ions-law/red-book

XX.X Principles of Federal Appropriations Law, Volume I, Chapter 5 Availability of https://www.gao.gov/legal/appropriat ions-law/red-book https://www.acquisition.gov/far/part-52#FAR_52_227_14 https://www.acquisition.gov/far/part-52#FAR_52_227_14 https://www.acquisition.gov/far/part-52#FAR_52_227_17 https://www.acquisition.gov/far/part-52#FAR_52_227_17 https://www.gsa.gov/policy-regulations/regulations/federal-travel-regulation-ftr https://www.gsa.gov/policy-regulations/regulations/federal-travel-regulation-ftr https://www.gsa.gov/policy-regulations/regulations/federal-travel-regulation-ftr https://www.gsa.gov/directive/eligibility-to-use-gsa-sources-of-supply-and-services https://www.gsa.gov/directive/eligibility-to-use-gsa-sources-of-supply-and-services https://www.gsa.gov/directive/eligibility-to-use-gsa-sources-of-supply-and-services https://www.gsa.gov/policy-regulations/policy/information-integrity-and-access/it-security-procedural-guides https://www.gsa.gov/policy-regulations/policy/information-integrity-and-access/it-security-procedural-guides https://www.gsa.gov/policy-regulations/policy/information-integrity-and-access/it-security-procedural-guides https://www.acquisition.gov/gsam/504.1370 https://www.acquisition.gov/gsam/504.1370 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.acquisition.gov/gsam/part-552#GSAM_552_238_78 https://www.acquisition.gov/gsam/part-552#GSAM_552_238_78 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.acquisition.gov/content/part-552-solicitation-provisions-and-contract-clauses#i1876737 https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book

Appropriations: Time, B. The Bona Fide Needs Rule

XX.X Principles of Federal Appropriations Law, Volume I, Chapter 5 Availability of Appropriations: Time, B. The Bona Fide Needs Rule, 8. Multiyear Contracts, c.

Fiscal Year Appropriations https://www.gao.gov/legal/appropriat ions-law/red-book

XX.X Principles of Federal Appropriations Law, Volume II, Chapter 6 Availability of Appropriations: Amount, C. The Antideficiency Act https://www.gao.gov/legal/appropriat ions-law/red-book

XX B-164908(2), JANUARY 31, 1969, 48

COMP. GEN. 497

https://www.gao.gov/products/b-164

— Office of Management and Budget (OMB)

XX Federal Cloud Computing Strategy (Cloud Smart Strategy) https://cloud.cio.gov/strategy/#cloud -smart

XX M-15-14: Management and Oversight of Federal Information Technology https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2015

XX M-16-12: Category Management Policy 16-1: Improving the Acquisition and Management of Common Information Technology: Software Licensing https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2016

XX M-19-13: Category Management: Making Smarter Use of Common Contract Solutions and Practices2, 3 https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2019

XX M-19-26: Update to the Trusted Internet Connections (TIC) Initiative https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2019

XX M-21-07: Completing the Transition to Internet Protocol Version 6 (IPv6) https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2021

XX M-21-30: Protecting Critical Software Through Enhanced Security Measures https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2021

3 Portions of OMB M-19-13: Category Management: Making Smarter Use of Common Contract Solutions and Practices have been revised by OMB M-22-03: Advancing Equity in Federal Procurement

2 Best In Class, Spend Under Management, Tiered Maturity Model https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/legal/appropriations-law/red-book https://www.gao.gov/products/b-1649082 https://www.gao.gov/products/b-1649082 https://cloud.cio.gov/strategy/#cloud-smart https://cloud.cio.gov/strategy/#cloud-smart https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2015 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2015 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2015 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2016 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2016 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2016 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2019 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021

XX M-21-31: Improving the Federal Government’s Investigative and Remediation Capabilities Related to Cybersecurity Incidents https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2021

XX M-22-03: Advancing Equity in Federal Procurement https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2022

XX M-22-09: Moving the U.S. Government Toward Zero Trust Cybersecurity Principles https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2022

XX M-22-18: Enhancing the Security of the Software Supply Chain through Secure Software Development Practices https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2022

XX M-23-02: Migrating to Post-Quantum Cryptography https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2023

XX M-23-13: “No TikTok on Government Devices” Implementation Guidance https://www.whitehouse.gov/omb/inf ormation-for-agencies/memoranda/ #memoranda-2023

— Office of the Director of National Intelligence (ODNI)

XX ICD 503: Intelligence Community Information Technology Systems Security Risk Management, Certification, and Accreditation https://www.dni.gov/files/documents/ ICD/ICD_503.pdf

— Public Law

XX Carl Levin and Howard P. `Buck' McKeon National Defense Authorization Act for Fiscal Year 2015, Public Law 113-291, Title VIII Acquisition Policy, Acquisition Management, and Related Matters, Subtitle D - Federal Information Technology Acquisition Reform (FITARA) https://www.govinfo.gov/app/details/ PLAW-113publ291

XX Consolidated Appropriations Act, 2022, Public Law 117-103, Division Y - Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) https://www.govinfo.gov/app/details/ PLAW-117publ103

Consolidated Appropriations Act, 2023, Public Law 117-328, Division R - No TikTok On Government Devices Act https://www.govinfo.gov/app/details/ PLAW-117publ328 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2021 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2022 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.whitehouse.gov/omb/information-for-agencies/memoranda/#memoranda-2023 https://www.dni.gov/files/documents/ICD/ICD_503.pdf https://www.dni.gov/files/documents/ICD/ICD_503.pdf https://www.govinfo.gov/app/details/PLAW-113publ291 https://www.govinfo.gov/app/details/PLAW-113publ291 https://www.govinfo.gov/app/details/PLAW-117publ103 https://www.govinfo.gov/app/details/PLAW-117publ103 https://www.govinfo.gov/app/details/PLAW-117publ328 https://www.govinfo.gov/app/details/PLAW-117publ328

XX Consolidated and Further Continuing Appropriations Act, 2015, Public Law 113-235, Division E Financial Services and General Government Appropriations Act, 2015, Title VII General Provisions - Government-Wide, Sec. 743 https://www.govinfo.gov/app/details/ PLAW-113publ235

XX Critical Infrastructures Protection Act of 2001, Public Law 107-56, Sec. 1016 Critical Infrastructures Protection.

https://www.govinfo.gov/app/details/ PLAW-107publ56

XX E-Government Act of 2002, Public Law 107-347, Sec. 211 Authorization for acquisition of information technology by State and local governments through Federal supply schedules.

https://www.govinfo.gov/app/details/ PLAW-107publ347/summary

XX Elementary and Secondary Education Act of 1965 https://www.govinfo.gov/app/details/

COMPS-748

XX Federal Information Security Modernization Act (FISMA) of 2014, Public Law 113-283 https://www.govinfo.gov/app/details/ PLAW-113publ283

XX Federal Supply Schedules Usage Act of 2010, Public Law 111-263 https://www.govinfo.gov/app/details/ PLAW-111publ263

XX Freedom of Information Act (FOIA), Public Law 89-487 https://www.govinfo.gov/app/details/ STATUTE-80/STATUTE-80-Pg250

XX FOIA Improvement Act of 2016, Public Law 114-185 https://www.govinfo.gov/app/details/ PLAW-114publ185

XX Foreign Assistance Act of 1961, Public Law 87-195, Sec 607 Furnishing of Services and Commodities https://www.govinfo.gov/app/details/ STATUTE-75/STATUTE-75-Pg424-2

XX Homeland Security Act of 2002, Public Law 107-296 https://www.govinfo.gov/app/details/ PLAW-107publ296

XX Intelligence Reform and Terrorism Prevention Act (IRTPA) of 2004, Public Law 108-458, Sec. 3001 Security clearances.

https://www.govinfo.gov/app/details/ PLAW-108publ458

XX James M. Inhofe National Defense Authorization Act for Fiscal Year 2023, Public Law 117-263, Division A Department of Defense Authorizations, Title XV Cyber and Information Operations Matters, Subtitle D Reports

[Waiting for GovInfo to be updated] https://www.govinfo.gov/app/details/PLAW-113publ235 https://www.govinfo.gov/app/details/PLAW-113publ235 https://www.govinfo.gov/app/details/PLAW-107publ56 https://www.govinfo.gov/app/details/PLAW-107publ56 https://www.govinfo.gov/app/details/PLAW-107publ347/summary https://www.govinfo.gov/app/details/PLAW-107publ347/summary https://www.govinfo.gov/app/details/COMPS-748 https://www.govinfo.gov/app/details/COMPS-748 https://www.govinfo.gov/app/details/PLAW-113publ283 https://www.govinfo.gov/app/details/PLAW-113publ283 https://www.govinfo.gov/app/details/PLAW-111publ263 https://www.govinfo.gov/app/details/PLAW-111publ263 https://www.govinfo.gov/app/details/STATUTE-80/STATUTE-80-Pg250 https://www.govinfo.gov/app/details/STATUTE-80/STATUTE-80-Pg250 https://www.govinfo.gov/app/details/PLAW-114publ185 https://www.govinfo.gov/app/details/PLAW-114publ185 https://www.govinfo.gov/app/details/STATUTE-75/STATUTE-75-Pg424-2 https://www.govinfo.gov/app/details/STATUTE-75/STATUTE-75-Pg424-2 https://www.govinfo.gov/app/details/PLAW-107publ296 https://www.govinfo.gov/app/details/PLAW-107publ296 https://www.govinfo.gov/app/details/PLAW-108publ458 https://www.govinfo.gov/app/details/PLAW-108publ458 and Other Matters, Sec. 1553 Plan for Commercial Cloud Test and Evaluation

James M. Inhofe National Defense Authorization Act for Fiscal Year 2023, Public Law 117-263, Division E Non-Department of Defense Matters, Title LIX Other Matters, Subtitle C FedRAMP Authorization Act, Sec. 5921 FedRAMP Authorization Act

[Waiting for GovInfo to be updated]

XX John S. McCain National Defense Authorization Act for Fiscal Year 2019, Public Law 115-232, Sec. 836 Revision of definition of commercial item for purposes of Federal acquisition statutes.

https://www.govinfo.gov/app/details/ PLAW-115publ232

XX John S. McCain National Defense Authorization Act for Fiscal Year 2019, Public Law 115-232, Sec. 889 Prohibition on certain telecommunications and video surveillance services or equipment.

https://www.govinfo.gov/app/details/ PLAW-115publ232

XX John Warner National Defense Authorization Act for Fiscal Year 2007, Public Law 109-364, Sec. 833 Use of Federal supply schedules by State and local governments for goods and services for recovery from natural disasters, terrorism, or nuclear, biological, chemical, or radiological attack.

https://www.govinfo.gov/app/details/ PLAW-109publ364

XX Local Preparedness Acquisition Act, Public Law 110-248 https://www.govinfo.gov/app/details/ PLAW-110publ248

XX Paperwork Reduction Act of 1995, Public Law 104-13 https://www.govinfo.gov/app/details/ PLAW-104publ13

XX Privacy Act of 1974 https://www.govinfo.gov/app/details/ STATUTE-88/STATUTE-88-Pg1896

XX Public Health Services Act, Public Law 117-58, Sec. 319 Public health emergencies https://www.govinfo.gov/app/details/

COMPS-8773

XX REAL ID Act of 2005, Public Law 109-13, Division B REAL ID Act of 2005 https://www.govinfo.gov/app/details/ PLAW-109publ13

XX Rehabilitation Act of 1973, Public Law 105-220, Sec. 508 Electronic and information technology regulations https://www.govinfo.gov/app/details/ PLAW-105publ220 https://www.govinfo.gov/app/details/PLAW-115publ232 https://www.govinfo.gov/app/details/PLAW-115publ232 https://www.govinfo.gov/app/details/PLAW-115publ232 https://www.govinfo.gov/app/details/PLAW-115publ232 https://www.govinfo.gov/app/details/PLAW-109publ364 https://www.govinfo.gov/app/details/PLAW-109publ364 https://www.govinfo.gov/app/details/PLAW-110publ248 https://www.govinfo.gov/app/details/PLAW-110publ248 https://www.govinfo.gov/app/details/PLAW-104publ13 https://www.govinfo.gov/app/details/PLAW-104publ13 https://www.govinfo.gov/app/details/STATUTE-88/STATUTE-88-Pg1896 https://www.govinfo.gov/app/details/STATUTE-88/STATUTE-88-Pg1896 https://www.govinfo.gov/app/details/COMPS-8773 https://www.govinfo.gov/app/details/COMPS-8773 https://www.govinfo.gov/app/details/PLAW-109publ13 https://www.govinfo.gov/app/details/PLAW-109publ13 https://www.govinfo.gov/app/details/PLAW-105publ220 https://www.govinfo.gov/app/details/PLAW-105publ220

XX Robert T. Stafford Disaster Relief and Emergency Assistance Act, Public Law 117-58 https://www.govinfo.gov/app/details/

COMPS-2977

XX Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act’’ (SECURE Technology Act), Public Law 115-390 https://www.govinfo.gov/app/details/ PLAW-115publ390

XX Telecommunications Act of 1996, Public Law 104-104, Sec 255 Access by persons with disabilities https://www.govinfo.gov/app/details/ PLAW-104publ104

XX William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021, Public Law 116 - 283, Division A Department of Defense Authorizations, Title VIII Acquisition Policy, Acquisition Management, and Related Matters, Subtitle F Other Matters, Sec. 883 Prohibition on awarding of contracts to contractors that require nondisclosure agreements relating to waste, fraud, or abuse https://www.govinfo.gov/app/details/ PLAW-116publ283

— Securities and Exchange Commission (SEC)

XX 83 FR 8166 Commission Statement and Guidance on Public Company Cybersecurity Disclosures https://www.govinfo.gov/app/details/ FR-2018-02-26/2018-03858/summa ry

— United States Code (U.S.C.)

XX 5 U.S.C. 552 GOVERNMENT

ORGANIZATION AND…