S.Amdt. 3715

SA 3715, submitted by Mr. Cotton, aims to add a prohibition on certain individuals from accessing Department of Defense cloud-based resources. It intends to change the bill by restricting who can maintain, administer, operate, or access cloud computing systems, cloud-based software, and Department data.

• Access Restrictions: Only individuals with the required security clearance who are either specific persons under title 10, United States Code, citizens of the Five Eyes intelligence-sharing alliance, or citizens of an ally or partner country with a similar agreement may have access.

• Secretary of Defense Responsibilities: The Secretary must establish safeguards and regulations to enforce these restrictions. The Secretary is also required to review and revise Department guidance, directives, and regulations, such as the Cloud Computing Security Requirements Guide, to ensure they comply with these rules.

• Review and Reporting: The amendment requires the Secretary to review all current cloud computing contracts for violations of section 252.225-7058 of the Defense Federal Acquisition Regulation Supplement. The Secretary must report findings to the House and Senate Committees on Armed Services, specifically noting contracts that allowed unauthorized individuals access and how many of those individuals are citizens of foreign countries of concern.