Authorization to use commercial cloud enclaves overseas

(a) In general Not later than 180 days after the date of the enactment of this Act, the Department of State shall issue internal guidelines that authorize and track the use of enclaves deployed in overseas commercial cloud regions for OCONUS systems categorized at the Federal Information Security Modernization Act (FISMA) high baseline. (b) Consistency with Federal cybersecurity regulations The enclave deployments shall be consistent with existing Federal cybersecurity regulations as well as best practices established across National Institute of Standards and Technology standards and ISO 27000 security controls. (c) Briefing Not later than 90 days after the enactment of the Act, and before issuing the new internal guidelines required under subsection (a), the Secretary shall brief the appropriate committees of Congress on the proposed new guidelines, including— (1) relevant risk assessments; and (2) any security challenges regarding implementation. (d) Appropriate committees of Congress defined In this section, the term appropriate committees of Congress means— (1) the Committee on Foreign Relations and the Select Committee on Intelligence of the Senate; (2) and the Committee on Foreign Affairs and the Permanent Select Committee on Intelligence of the House of Representatives.