Report on national security risks posed by foreign adversary-controlled applications with the capability of controlling high-wattage IoT devices

(a) In general Not later than 270 days after the date of enactment of this Act, the Secretary of Commerce, in coordination with other relevant Federal officials, shall submit to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Energy and Commerce of the House of Representatives a report assessing the national security risks associated with foreign adversary-controlled applications with the ability to attack or undermine critical infrastructure in the United States. (b) Considerations In preparing the report under subsection (a), the Secretary of Commerce shall consider, at a minimum— (1) the extent of deployment of high-wattage IoT devices across the United States; (2) risks relating to foreign adversary-controlled applications, especially those incorporated into consumer products that could be used to attack or otherwise destabilize the electric grid; (3) potential impacts of those risks and any other relevant vulnerabilities on national security, including the risks of frequency imbalances, cascading failures, and other disruptions to critical infrastructure; and (4) public comments and input from industry experts, domestic producers, importers, consumer groups, and other stakeholders regarding the security of, and the extent of foreign influence over, foreign adversary-controlled applications and high-wattage IoT devices. (c) Recommendations The report submitted under subsection (a) shall include recommendations for mitigation measures to address any identified national security risks, which may include— (1) an assessment of how Executive Order 13873 (84 Fed. Reg. 22689; relating to securing the information and communications technology and services supply chain) (as in effect on the date of enactment of this Act) may be applied to IoT devices, as such devices apply to the electric grid, to include restrictions or conditions on transactions directly involving foreign adversary-controlled applications in high-wattage IoT devices; (2) specifically restricting the procurement by the Federal Government of consumer products with a foreign adversary-controlled application; (3) certification or labeling requirements for high-wattage IoT devices; and (4) any other proposal, as determined necessary by the Secretary of Commerce, in consultation with other relevant Federal officials.