S.Amdt. 6337

This amendment, proposed by Mr. Wyden and Ms. Lummis, aims to add a section to the bill regarding Secure and Interoperable Defense Collaboration Technology. Its purpose is to ensure that the Department of Defense (Department) uses collaboration software that is secure, follows open standards, and can work across different systems.

The amendment seeks to change how the Department handles collaboration technology by adding the following:

• Standard Identification: The Chief Information Officer (CIO) must identify primary collaboration features (such as voice/video calling, text messaging, file sharing, document editing, and scheduling) and establish specific standards for them. These standards should prioritize end-to-end encryption and open standards to protect against foreign surveillance and ensure security even if a third-party server is compromised.

• Procurement Requirements: After the standards are set, the Department may only buy collaboration technology that is "standards-compatible." There are exceptions for email, voice services, and national security systems.

• Accountability and Testing: The CIO must provide a way to test if technology meets these standards through interoperability test suites. Vendors must provide an attestation and test results to prove compliance before their technology is listed as compatible on the Department's website.

• Security Oversight: The CIO is required to conduct security reviews of collaboration products to find vulnerabilities and report the results to congressional defense committees.

• Waiver Process: If the Department cannot find a compatible technology that meets its needs, the CIO can issue a waiver. This waiver must provide a specific reason (not a general national security claim) and must be submitted to congressional defense committees and posted publicly, unless the Secretary of Defense certifies that doing so would harm national security.