S.Amdt. 3186

SA 3186, submitted by Mr. Wyden and Ms. Lummis, aims to add a new section to the bill regarding Secure and Interoperable Defense Collaboration Technology. Its purpose is to ensure that the Department of Defense (Department) uses collaboration software that is secure, follows open standards, and can work across different systems.

The amendment seeks to change how the Department handles collaboration technology through the following actions:

• Establishing Standards: It requires the Chief Information Officer (CIO) to identify primary collaboration features (such as video calling, text messaging, and file sharing) and create a set of "identified standards" for them. These standards should prioritize end-to-end encryption, open standards, and cybersecurity best practices to protect against foreign surveillance.

• Mandating Compliance: Once these standards are set, the Department generally cannot buy collaboration technology unless it is "standards-compatible." There are exceptions for email, voice services, and national security systems.

• Verification and Testing: The CIO must provide or identify test suites so vendors can prove their software works with the identified standards. The Department will then publish a list of approved, standards-compatible vendors.

• Accountability and Security: The amendment requires the CIO to conduct security reviews of products used within the Department to find vulnerabilities and report those results to congressional defense committees. It also requires a public posting of any waivers granted to use non-compliant technology.