S2871-118

1. Short title This Act may be cited as the Multi-Cloud Innovation and Advancement Act of 2023.

2. Definitions In this Act: The term agency has the meaning given the term in section 3502 of title 44, United States Code. The term cloud computing has the meaning given the term in Special Publication 800–145 of the National Institute of Standards and Technology, or any successor document. The term Comptroller General means the Comptroller General of the United States. The term Director means the Director of the Office of Management and Budget. The term information and communications technology— has the meaning given the term in subpart 2.101 of the Federal Acquisition Regulation, or any successor regulation; and includes associated services. The term multi-cloud technology means architecture and services that allow for data, application, and program portability, usability, and interoperability between infrastructure, platforms, and hosted applications of multiple cloud computing vendors and between public, private, and edge cloud environments in a manner that securely delivers operational and management consistency, comprehensive visibility, and resiliency. The term relevant committees of Congress means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Accountability of the House of Representatives.

3. Use of multi-cloud technology Not later than 1 year after the date of enactment of this Act, the Director, in consultation with the Administrator of General Services, the Director of the National Institute of Standards and Technology, the Secretary of Homeland Security, the Administrator of the United States Digital Service, and the Administrator of the Office of Electronic Government, shall— identify and evaluate any impediments to the adoption of multi-cloud technology by agencies; identify best practices for how agencies can implement multi-cloud technology to allow for data portability and interoperability across multiple cloud computing vendors; evaluate the adoption by agencies of cybersecurity frameworks to support multi-cloud technology; and develop written guidance for agencies based on the results of the identification described in paragraph (2) that— describes how agencies should use multi-cloud technology to allow for applications, data, and programs to be portable and interoperable between public, private, and edge cloud environments; and outlines a roadmap for the implementation of multi-cloud technology across agencies not later than January 1, 2025. Not later than 1 year after the date of enactment of this Act, the Director shall submit to the relevant committees of Congress— a copy of the written guidance developed under subsection (a)(4); a briefing on the implementation of multi-cloud technology by agencies; and any recommendations relating to the expansion or extension of the implementation described in paragraph (2).

4. Workforce development study and technical capabilities assessment Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that— assesses the state of the digital skills and expertise gap within the Federal workforce relating to information and communications technology, with particular attention to the skills and expertise gap relating to cloud computing and multi-cloud technology; assesses the capability of the Federal acquisition workforce to effectively research, solicit, evaluate, acquire, and manage multi-cloud technology from vendors, with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-cloud technology procurement; estimates any costs associated with additional Federal workforce training as a result of the increased adoption of multi-cloud technologies; and includes any recommendations to address any gap identified as a result of the assessment described in paragraph (1) relating to— Federal workforce development activities, including training, certifications, staffing levels, and partnerships; and policies and hiring practices for agencies. Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that— assesses the technical capabilities of existing agency networks to support multi-cloud technology; evaluates any technical capability impediments of agencies that delay the adoption of multi-cloud technology; and includes any recommendations relating to policies and best practices for agencies to address any impediments identified as a result of the assessment described in paragraph (1) and the evaluation described in paragraph (2).

5. Report to Congress Not later than 2 years after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report assessing how agencies have implemented the guidance developed under section 3(a)(4) to deploy and secure multi-cloud technology architecture that includes multiple cloud computing software vendors.