No CRS summary available for this bill.
This section directs the Secretary of Defense to initiate within 180 days a Department-wide audit of covered cellular modules in all DoD-owned, leased, or operated systems and infrastructure, including contractor systems on DoD networks. The audit must cover every military department, combatant command, and defense agency; prioritize systems tied to mobility, logistics, and installation security; identify manufacturer, model, firmware, and host product details; and assess cybersecurity risks such as data flows and remote access potential. It requires the Secretary to submit unclassified reports with classified annexes to the congressional defense committees within one year and biennially thereafter for six years, detailing findings, mitigation options including rip-and-replace and network segmentation, cost estimates, timelines, barriers, and legislative recommendations, followed by a Comptroller General assessment of effectiveness. Covered cellular modules include those produced by entities identified under section 889 of the FY2019 NDAA, owned or controlled by the People’s Republic of China, or otherwise deemed an unacceptable supply-chain risk.