Establishment of the Supply Chain Risk Management Integration Cell

(a) Establishment Not later than March 1, 2027, the Secretary of Defense shall establish a Supply Chain Risk Management Integration Cell (in this section referred to as the Cell) within the Office of the Assistant Secretary of Defense for Industrial Base Policy. (b) Duties described For the purposes of operating the Cell described in subsection (a), the Secretary shall delegate or otherwise assign to the Assistant Secretary of Defense for Industrial Base Policy the authorities and duties to— (1) direct and conduct oversight of all Department of Defense Supply Chain Risk Management activities, programs, tools, and datasets; (2) manage and make determinations regarding lists and other restrictions relating to Department of Defense Supply Chain Risk Management, including those authorized in— (A) section 889 of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Public Law 115–232; 41 U.S.C. 3901 note prec.); (B) section 1260H of the William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021 (Public Law 116–283; 10 U.S.C. 113 note); and (C) section 805 of the National Defense Authorization Act for Fiscal Year 2024 (Public Law 118–31; 10 U.S.C. 4651 note prec.); (3) manage and make determinations regarding supply chain transparency programs, incentives, and other activities, including those authorized in— (A) section 849 of the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025 (Public Law 118–159; 10 U.S.C. 3241 note prec.); (B) section 856 of the National Defense Authorization Act for Fiscal Year 2024 (Public Law 118–31; 10 U.S.C. 3241 note prec.); and (C) subsection (a)(3) of section 857 of the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023 (Public Law 117–263; 10 U.S.C. 4811 note); (4) oversee data and databases related to Department of Defense Supply Chain Risk Management and the integration of such data and databases across the Department of Defense, to include integration with commercial data sources; (5) select and assign a sufficient number of dedicated staff necessary for the Cell to effectively manage the duties described in paragraphs (1) through (4); (6) consult with the Supply Chain Risk Management Threat Analysis Center at the Defense Intelligence Agency; and (7) any other authorities or duties necessary to manage, direct, or otherwise coordinate Supply Chain Risk Management activities and programs. (c) Exceptions The Secretary of Defense shall not delegate or assign to the Assistant Secretary of Defense for Industrial Base Policy authorities or duties that explicitly relate to cybersecurity. (d) Implementation Not later than 90 days after the date on which the Cell described in subsection (a) is established, the Secretary shall amend the Defense Federal Acquisition Regulation Supplement to support the establishment of the Cell and to implement the changes in authorities and duties described in subsection (b). (e) Briefing required Not later than 90 days after the date of the enactment of this Act, the Secretary shall provide a briefing to the congressional defense committees describing— (1) estimated staffing and resources requirements to establish and operate the Cell; (2) plans to reorganize existing offices and functions throughout the Department to ensure the Cell can carry out the authorities and duties described in subsection (b); (3) plans to provide resources to the Office of the Assistant Secretary of Defense for Industrial Base Policy for the purposes of establishing and operating the Cell; and (4) estimated timelines to consolidate in the Cell the various authorities and duties described in subsection (b).