Enhanced security strategy for private fifth generation information and communications capabilities

(a) In general Not later than 90 days after the date of the enactment of this Act, the Secretary of Defense shall require a contractor for a procurement related to fifth-generation wireless technology for private networks on military installations to provide the information described in subsection (b) to promote enhanced wireless network security requirements, including supply chain risk management. (b) Information described The information described in this subsection is as follows: (1) A hardware bill of materials for a procurement described in subsection (a). (2) A description of the implementation and operational use of zero trust principles and capabilities for such procurement. (c) Prioritization With respect to a procurement described in subsection (a), the Secretary shall prioritize the use of private networks that employ Open-RAN approaches, including cloud-native capabilities. (d) Definitions In this section: (1) The term military installation has the meaning given in section 2801 of title 10, United States Code. (2) The term Open-RAN means section 9202 of title XCII of the National Defense Authorization Act for Fiscal Year 2021.