Contractor compliance with coordinated disclosure of security vulnerabilities relating to agency Internet of Things devices

15 U.S. Code § 278g-3e. Contractor compliance with coordinated disclosure of security vulnerabilities relating to agency Internet of Things devices

(a) Prohibition on procurement and use
(1) In general
The head of an agency is prohibited from procuring or obtaining, renewing a contract to procure or obtain, or using an Internet of Things device, if the Chief Information Officer of that agency determines during a review required by section 11319(b)(1)(C) of title 40 of a contract for such device that the use of such device prevents compliance with the standards and guidelines developed under section 278g–3b of this title or the guidelines published under section 278g–3c of this title with respect to such device.
(2) Simplified acquisition threshold
Notwithstanding section 1905 of title 41, the requirements under paragraph (1) shall apply to a contract or subcontract in amounts not greater than the simplified acquisition threshold.
This document is only available to subscribers. Please log in or purchase access.