Client Alert: Key Developments in the FY 2021 National Defense Authorization Act

Cybersecurity / IT Development

Perhaps more than any other subject area, the NDAA contains a vast number of cybersecurity provisions. The legislation adopts numerous recommendations from the reauthorized Cyberspace Solarium Commission, which described the FY 21 NDAA as “the most comprehensive and forward-looking piece of national cybersecurity legislation in the nation’s history.” Key recommendations include developing cyber leadership roles reporting to the White House and better coordination of cybersecurity between federal, state, the private sector, and international stakeholders. Below we highlight other cyber provisions of interest.

Sec. 835: Balancing Security and Innovation in Software Development and Acquisition

• Directs DoD to create a “software pathway” to allow software to be delivered in a timely and secure manner.

Sec. 837: Safeguarding Defense-Sensitive United States Intellectual Property, Technology, and Other Data and Information

• Requires DoD to establish, enforce, and track actions to protect defense-sensitive US intellectual property, including hardware and software, from acquisition by China.
• Requires DoD to generate a list of critical national security technology and provide for mechanisms to restrict employees or former employees of the defense industrial base from working directly for companies owned or directed by China.

Section 1712: Modification of Requirements Relating to the Strategic Cybersecurity Program and the Evaluation of Cyber Vulnerability of Major Weapons Systems of the Department of Defense (DoD)

• Requires DoD to develop a plan for each major weapon system to undergo an annual cyber-vulnerabilities assessment and to share lessons learned and best practices from the annual assessment of cyber resiliency of nuclear command and control system.

Section 1716: Subpoena Authority

• Authorizes DHS’s Cybersecurity and Infrastructure Security Agency (CISA) to issue administrative subpoenas upon detection of security vulnerabilities and to notify public and private system owners.

Section 1722: Assessing Risk to National Security of Quantum Computing

• Requires DoD to complete an assessment of the current and potential threats and risks posed by quantum computing technologies to critical national security systems, including an assessment of NIST standards.

Section 9005: Government Accountability Office (GAO) Study of Cybersecurity Insurance 

• Requires GAO to study methods to improve the market for cybersecurity insurance.

Foreign Influence

Sec. 819: Modifications to Mitigating Risks Related to Foreign Ownership, Control, or Influence (FOCI) of Department of Defense Contractors and Subcontractors

• Adjusts the analytical framework to mitigate FOCI by adding an additional proactive, government-driven assessment.
• Requires reports and examinations on a “periodic basis” of covered contractors or subcontractors to assess compliance with FOCI reporting and mitigation obligations.

Domestic Sourcing of Strategic and Critical Materials

Sec. 848: Supply of Strategic and Critical Materials for the Department of Defense

• Requires, to maximum extent practicable, acquisition of strategic and critical materials from US sources, then from sources within the national technology and industrial base, then other sources.

Sec. 849: Analyses of Certain Activities for Action to Address Sourcing and Industrial Capacity

• Requires DoD to assess national security industry sectors, including microelectronics and pharmaceutical ingredients, to determine how to increase domestic industrial capacity.
• Contractors can expect DoD to explore ways to entice critical technology industries to move production to the United States, with recommendations likely in future NDAAs.

Sec. 851: Report on Strategic and Critical Materials

• Directs DoD to issue a report on supply chain vulnerabilities related to the acquisition of rare earth minerals and metals.

Sec. 852: Report on Aluminum Refining, Processing, and Manufacturing

• Rejects a proposal for required domestic sourcing of aluminum.
• Requires DoD to report to Congress on how to increase incentives for domestic aluminum production.

Data Rights 

Sec. 804: Implementation of Modular Open Systems Approaches

• Increases emphasis on modular open systems for weapons systems, including for cybersecurity systems, to more easily enable competition for upgrades and sustainment.
• Continues DoD’s interest in obtaining data rights that will facilitate the replacement, enhancement, and maintainence of parts over the life cycle of products and systems.

Space Force

Sec. 807: Space System Acquisition and the Adaptive Acquisition Framework

• Describes, in detail, expedited acquisition processes and responsibilities affecting major defense acquisition programs for the United States Space Force.
• Sets goal of quickly and effectively acquiring end-to-end space warfighting capabilities to address requirements of national defense strategy.

Other Transaction Authority

Sec. 831: Contract Authority for Development and Demonstration of Initial or Additional Prototype Units

• Directs DoD to assess authorities designed to streamline the process for moving prototype technologies into production under the same contract as the technology is matured.
• Requires DoD to issue a report on this topic by March 31, 2021, potentially enabling regulatory action later this year depending upon that report’s findings.

Sec. 833: Listing of Other Transaction Authority Consortia

• Ensures greater scrutiny of OTAs issued by consortia.
• Requires a report to Congress by December 1, 2021 that assesses:
  
  • The number and dollar value of other transaction awards through consortia;
  • The benefits and challenges of using consortia;
  • A comparison of DoD’s use of consortia compared to other Federal agencies; and
  • Any other matters the Comptroller General determines to be appropriate.

Contractor Business Systems 

Sec. 806: Definition of Material Weakness for Contractor Business Systems

• Revises and defines terminology for the evaluation of contractor business systems to better align with generally accepted auditing standards.
• “Significant deficiencies” will be deemed “material weaknesses,” and defined as one or more deficiencies that causes a reasonable possibility of material misstatement.
• “Reasonable possibility” will mean “probable” or “more than remote but less than likely.”

Commercial Contracting

Sec. 816: Documentation Pertaining to Commercial Item Determinations

• Ensures better documentation of prior commercial item determinations, which may be relied upon for future contracts.
• Allows the contracting officer to request assistance in commercial determinations, including from DoD’s Commercial Items Group within DCMA, and requires the contracting officer to document determinations.

Ethics Provisions

Sec. 883: Prohibition on Awarding of Contracts to Contractors that Require Nondisclosure Agreements Relating to Waste, Fraud, or Abuse

• Requires representations that nondisclosure agreements relating to fraud, waste, and abuse are not used.
• Similar to FAR 52.203-19, prohibits award of contracts to contractors that require such agreements.

Sec. 885: Disclosure of Beneficial Owners in Database for Federal Agency Contract and Grant Officers

• Requires disclosure of beneficial ownership of contractors and grant recipients.

Small Business 

Sec. 815: Prompt Payment of Contractors 

• Strengthens DoD’s goal to pay small business contractors within 15 days of receipt of an invoice.
• Intends to improve small businesses' ability to continue to do business in the federal marketplace, especially during economic downturns.

Sec. 862: Transfer of Verification of Small Business Concerns Owned and Controlled by Veterans or Service-Disabled Veterans to the Small Business Administration (SBA)

• Transfers the function of certifying Service Disabled Veteran Owned Small Businesses (SDVOSBs) and Veteran Owned Small Businesses (VOSBs) from the Department of Veterans Affairs to the SBA.
• Phases out self-certification of SDVOSBs.
• Seeks to harmonize within 2 years the SDVOSB and VOSB contracting programs with other small business contracting programs administered by SBA.

Section 863: Employment Size Standard Requirements for Small Business Concerns

• Extends from 12 months to 24 months the time period to which an agency must refer when categorizing a manufacturer as a small business based on its average employment.

Section 868: Past Performance Ratings of Certain Small Business Concerns

• Requires contracting officers to consider a small business concern’s past performance in a joint venture or as a first-tier subcontractor when evaluating the small business concern’s offer for a prime contract.
• Once implemented, a prime contractor will be required to provide a small business first tier subcontractor a “record of past performance” upon request by the small business.

Section 869: Extension of Participation in 8(a) Program

• Allows small businesses participating in the section 8(a) business development program (on or before September 9, 2020) to extend their participation in the 8(a) program for an additional year.

Bid Protests

Section 886: Repeal of Pilot Program on Payment of Costs for Denied Government Accountability Office Bid Protests

• Repeals the pilot program established in the FY 2018 NDAA that explored the effectiveness of requiring contractors with revenues in excess of $250 million to reimburse DoD for costs incurred in defending against bid protests denied by GAO.

Contract Types / Other Matters

Sec. 888: Revision to Requirement to Use Firm Fixed-Price Contracts for Foreign Military Sales (FMS)

• Repeals default requirement for firm fixed-price contracts for FMS sales established by FY 2017 NDAA.

Sec. 890: Identification of Certain Contracts Relating to Construction or Maintenance of a Border Wall

• Requires disclosure of any contracts (including task orders) more than $7 million relating to construction or maintenance of the US / Mexico border wall.

Section 891: Waivers of Certain Conditions for Progress Payments Under Certain Contracts During the COVID-19 National Emergency

• To support increased cash flow, DoD may temporarily increase the progress payment rate for undefinitized contract actions during the COVID-19 national emergency.
• Institutes conditions to the waiver pertaining to companies’ receipt of progress payments under contracts.
• Directs a report by September 30, 2021 on how increasing rate of progress payments from 80 percent to 95 percent has benefitted subcontractors and suppliers.