In general
The Administrator shall plan, develop, and implement a program, in coordination with other Federal agencies, to detect, track, catalog, and reduce the number of counterfeit electronic parts in the NASA supply chain.
Requirements
In carrying out the program, the Administrator shall establish—
counterfeit part identification training for all employees that procure, process, distribute, and install electronic parts that will—
teach employees how to identify counterfeit parts;
educate employees on procedures to follow if they suspect a part is counterfeit;
regularly update employees on new threats, identification techniques, and reporting requirements; and
integrate industry associations, manufacturers, suppliers, and other Federal agencies, as appropriate;
an internal database to track all suspected and confirmed counterfeit electronic parts that will maintain, at a minimum—
companies and individuals known and suspected of selling counterfeit parts;
parts known and suspected of being counterfeit, including lot and date codes, part numbers, and part images;
countries of origin;
sources of reporting;
United States Customs seizures; and
Government-Industry Data Exchange Program reports and other public or private sector database notifications; and
a mechanism to report all information on suspected and confirmed counterfeit electronic parts to law enforcement agencies, industry associations, and other databases, and to issue bulletins to industry on counterfeit electronic parts and related counterfeit activity.
Review of procurement and acquisition policy
In general
In establishing the program, the Administrator shall amend existing acquisition and procurement policy to purchase electronic parts from trusted or approved manufacturers. To determine trusted or approved manufacturers, the Administrator shall establish a list, assessed and adjusted at least annually, and create criteria for manufacturers to meet in order to be placed onto the list.
Criteria
The criteria may include—
authentication or encryption codes;
embedded security markings in parts;
unique, harder to copy labels and markings;
identifying distinct lot and serial codes on external packaging;
radio frequency identification embedded into high-value parts;
physical destruction of all defective, damaged, and sub-standard parts that are by-products of the manufacturing process;
testing certifications;
maintenance of procedures for handling any counterfeit parts that slip through;
maintenance of secure facilities to prevent unauthorized access to proprietary information; and
maintenance of product return, buy back, and inventory control practices that limit counterfeiting.
Report to Congress
Within one year after , the Administrator shall report on the progress of implementing this section to the appropriate committees of Congress.