2871 IntroducedReported in Senate (IS)](RS)] <DOC> 118thCalendar CONGRESSNo. 1st Session S.

2871731 To118th advanceCONGRESS Federal2d GovernmentSession innovationS. through the implementation and use of multi-cloud computing software technology, and for other purposes.

2871 [Report No.

118-311] To advance Federal Government innovation through the implementation and use of multi-cloud computing software technology, and for other purposes.

Daines (for himselfhimself, and Ms.

Rosen)Rosen, introducedand theMr. following bill;

whichPeters) wasintroduced read twice and referred to the Committeefollowing onbill; Homeland Security and Governmental Affairs _______________________________________________________________________ A BILL To advance Federal Government innovation through the implementation and use of multi-cloud computing software technology, and for other purposes.

Bewhich itwas enactedread bytwice and referred to the SenateCommittee andon HouseHomeland ofSecurity Representativesand ofGovernmental theAffairs UnitedDecember States19 of(legislative Americaday, inDecember Congress16), assembled,2024 SECTIONReported 1.by Mr.

Peters, with an amendment [Strike out all after the enacting clause and insert the part printed in italic] _______________________________________________________________________ A BILL To advance Federal Government innovation through the implementation and use of multi-cloud computing software technology, and for other purposes.

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, <DELETED>SECTION 1.

SHORT TITLE.</DELETED> <DELETED> This Act may be cited as the ``Multi-Cloud Innovation and Advancement Act of 2023''.</DELETED> <DELETED>SEC.

2.

DEFINITIONS.</DELETED> <DELETED> In this Act:</DELETED> <DELETED> (1) Agency.--The term ``agency'' has the meaning given the term in section 3502 of title 44, United States Code.</DELETED> <DELETED> (2) Cloud computing.--The term ``cloud computing'' has the meaning given the term in Special Publication 800-145 of the National Institute of Standards and Technology, or any successor document.</DELETED> <DELETED> (3) Comptroller general.--The term ``Comptroller General'' means the Comptroller General of the United States.</DELETED> <DELETED> (4) Director.--The term ``Director'' means the Director of the Office of Management and Budget.</DELETED> <DELETED> (5) Information and communications technology.-- The term ``information and communications technology''-- </DELETED> <DELETED> (A) has the meaning given the term in subpart 2.101 of the Federal Acquisition Regulation, or any successor regulation;

and</DELETED> <DELETED> (B) includes associated services.</DELETED> <DELETED> (6) Multi-cloud technology.--The term ``multi- cloud technology'' means architecture and services that allow for data, application, and program portability, usability, and interoperability between infrastructure, platforms, and hosted applications of multiple cloud computing vendors and between public, private, and edge cloud environments in a manner that securely delivers operational and management consistency, comprehensive visibility, and resiliency.</DELETED> <DELETED> (7) Relevant committees of congress.--The term ``relevant committees of Congress'' means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Accountability of the House of Representatives.</DELETED> <DELETED>SEC.

3.

USE OF MULTI-CLOUD TECHNOLOGY.</DELETED> <DELETED> (a) In General.--Not later than 1 year after the date of enactment of this Act, the Director, in consultation with the Administrator of General Services, the Director of the National Institute of Standards and Technology, the Secretary of Homeland Security, the Administrator of the United States Digital Service, and the Administrator of the Office of Electronic Government, shall-- </DELETED> <DELETED> (1) identify and evaluate any impediments to the adoption of multi-cloud technology by agencies;</DELETED> <DELETED> (2) identify best practices for how agencies can implement multi-cloud technology to allow for data portability and interoperability across multiple cloud computing vendors;</DELETED> <DELETED> (3) evaluate the adoption by agencies of cybersecurity frameworks to support multi-cloud technology;

and</DELETED> <DELETED> (4) develop written guidance for agencies based on the results of the identification described in paragraph (2) that--</DELETED> <DELETED> (A) describes how agencies should use multi-cloud technology to allow for applications, data, and programs to be portable and interoperable between public, private, and edge cloud environments;

and</DELETED> <DELETED> (B) outlines a roadmap for the implementation of multi-cloud technology across agencies not later than January 1, 2025.</DELETED> <DELETED> (b) Briefing.--Not later than 1 year after the date of enactment of this Act, the Director shall submit to the relevant committees of Congress--</DELETED> <DELETED> (1) a copy of the written guidance developed under subsection (a)(4);</DELETED> <DELETED> (2) a briefing on the implementation of multi- cloud technology by agencies;

and</DELETED> <DELETED> (3) any recommendations relating to the expansion or extension of the implementation described in paragraph (2).</DELETED> <DELETED>SEC.

4.

WORKFORCE DEVELOPMENT STUDY AND TECHNICAL CAPABILITIES ASSESSMENT.</DELETED> <DELETED> (a) In General.--Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that--</DELETED> <DELETED> (1) assesses the state of the digital skills and expertise gap within the Federal workforce relating to information and communications technology, with particular attention to the skills and expertise gap relating to cloud computing and multi-cloud technology;</DELETED> <DELETED> (2) assesses the capability of the Federal acquisition workforce to effectively research, solicit, evaluate, acquire, and manage multi-cloud technology from vendors, with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-cloud technology procurement;</DELETED> <DELETED> (3) estimates any costs associated with additional Federal workforce training as a result of the increased adoption of multi-cloud technologies;

and</DELETED> <DELETED> (4) includes any recommendations to address any gap identified as a result of the assessment described in paragraph (1) relating to--</DELETED> <DELETED> (A) Federal workforce development activities, including training, certifications, staffing levels, and partnerships;

and</DELETED> <DELETED> (B) policies and hiring practices for agencies.</DELETED> <DELETED> (b) Technical Assessment.--Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that--</DELETED> <DELETED> (1) assesses the technical capabilities of existing agency networks to support multi-cloud technology;</DELETED> <DELETED> (2) evaluates any technical capability impediments of agencies that delay the adoption of multi-cloud technology;

and</DELETED> <DELETED> (3) includes any recommendations relating to policies and best practices for agencies to address any impediments identified as a result of the assessment described in paragraph (1) and the evaluation described in paragraph (2).</DELETED> <DELETED>SEC.

5.

REPORT TO CONGRESS.</DELETED> <DELETED> Not later than 2 years after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report assessing how agencies have implemented the guidance developed under section 3(a)(4) to deploy and secure multi-cloud technology architecture that includes multiple cloud computing software vendors.</DELETED> SECTION 1.

(6) Multi-cloud technology.--The term ``multi-cloud technology'' meanshas architecturethe andmeaning servicesgiven thatthe allowterm forby data,the application,Director andof programthe portability,National usability,Institute and interoperability between infrastructure, platforms, and hosted applications of multipleStandards cloud computing vendors and betweenTechnology public,pursuant private,to andsection edge6(a). cloud environments in a manner that securely delivers operational and management consistency, comprehensive visibility, and resiliency.

STUDY AND GUIDELINES FOR VOLUNTARY AGENCY USE OF MULTI-CLOUD TECHNOLOGY.

(a) In General.--Not later than 1 year after the date of enactment of this Act, the Director, in consultation with the Administrator of General Services, the Director of the National Institute of Standards and Technology, the Secretary of Homeland Security, the Administrator of the United States Digital Service, and the Administrator of the Office of Electronic Government, shall-- (1) identifystudy and evaluate any impediments to the adoptionuse of multi-cloud technology by agencies;

(2) identify bestthe practicesextent forto howwhich agencies canuse implement multi-cloud technology to allow for data portability and interoperability across multiple cloud computing vendors;technology;

(3) evaluateidentify, theamong adoptionagencies bythat agenciesuse ofmulti-cloud cybersecuritytechnology-- frameworks(A) tobest supportpractices, multi-cloudincluding technology;for security, portability, and interoperability across multiple cloud computing vendors;

and(B) (4)best developcybersecurity writtenpractices guidanceand forframeworks, agenciesincluding basedcloud onnative thesecurity resultssolutions, ofto thesupport identification described in paragraph (2) that-- (A) describes how agencies should use multi-cloud technologytechnology; to allow for applications, data, and programs to be portable and interoperable between public, private, and edge cloud environments;

and(C) (B)lessons outlineslearned afrom roadmapadoption for the implementation of multi-cloud technologytechnologies acrossby agenciesagencies; not later than January 1, 2025.

(b)and Briefing.--Not(D) lateruse thancases 1 year after the date of enactmentmulti-cloud oftechnology thisby Act,agencies; the Director shall submit to the relevant committees of Congress-- (1) a copy of the written guidance developed under subsection (a)(4);

(2)(4) develop a briefingcost-benefit onanalysis theof implementationagencies oftransitioning to multi-cloud technology bycompared to the existing cloud computing systems of those agencies;

and (3)(5) anyprovide recommendationsto relatingthe torelevant committees of Congress a briefing on the expansionplans orand extensionmethodologies of the implementationDirector describedfor incarrying paragraphout (2).this subsection and subsection (b).

(b) Best Practices.--Not later than 1 year after the date of the completion of the study required under subsection (a)(1), the Director shall compile and make available to agencies the information identified under subsection (a)(3) to assist agencies that consider adopting or choose to adopt multi-cloud technology.

(c) Briefing.--Not later than 540 days after the date of enactment of this Act, the Director shall submit to the relevant committees of Congress the findings of the study required under subsection (a)(1), including any legislative recommendations to ensure the safe and secure voluntary adoption of multi-cloud technology by agencies.

(a)Not In General.--Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that-- (1) assesses the state of the digital skills and expertise gap within the Federal workforce relating to information and communications technology, withincluding particular attention to the skills and expertise gap relating to cloud computing and multi- cloud technology;

(2) assessesassesses-- (A) the capability of the Federal acquisition workforce to effectively research, solicit, evaluate, acquire, and securely procure and manage multi-cloud technology from vendors, with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-multi-cloud cloud technology procurement;