Skip to main content
USTelecom — The Broadband Association
Sample profile — content is illustrative. Verify every name, date, and status against official sources before use.
Back to Agency Atlas
CONGRESSModerate activityReview recommended · 2026-07-10

U.S. Congress

Sets statutory mandates through the NDAA, appropriations, and authorization clocks (e.g., CISA 2015 information-sharing sunset) that drive agency supply-chain rulemaking.

One-minute briefing

Agency snapshot

Congress signed the FY26 NDAA in December 2025, which among other provisions codified and expanded the Outbound Investment Security Program. On cyber, the Consolidated Appropriations Act, 2026 extended the CISA 2015 information-sharing authority — after lapses and short-term extensions — to September 30, 2026, keeping a reauthorization clock running. Confirm at congress.gov.

2
Active initiatives
1
Upcoming deadlines
2
Priority topics
Most important thing right now

Track the September 30, 2026 CISA 2015 sunset and FY27 NDAA supply-chain provisions that will shape next-year agency rulemakings.

Mandate & jurisdiction

What this agency does

Statutory deadlines and mandates set by Congress are the upstream drivers of nearly every agency supply-chain rule members must follow.

NDAA provisions

Enacts supply-chain, semiconductor, and outbound-investment mandates.

Authorization clocks

Controls sunsets like CISA 2015 information-sharing authority.

Oversight

Directs and reviews agency implementation.

Jurisdiction

  • Statutory mandates (NDAA, appropriations)
  • Authorization and sunset clocks
  • Oversight of agency implementation
Who should care

Government affairs, legal, and policy teams.

Operational

Advance signal for statutory obligations.

Compliance

Mandates that become agency rules.

Procurement

Statutory sourcing prohibitions (e.g., semiconductors).

Initiatives & deadlines

What they are working on now

MonitorEffectiveProcurement and contracting 2025-12-01

FY2026 NDAA supply-chain provisions

The FY26 NDAA (signed December 2025) includes supply-chain and investment provisions, notably codifying and expanding the Outbound Investment Security Program.

UpcomingRecently changedCyber incident and software assurance 2026-12-11

CISA 2015 information-sharing reauthorization

The Continuing Appropriations and Extensions Act, 2027 (H.R. 6500), signed September 2, 2026 (Senate 90-6, House 370-48), funds the government through December 11, 2026 and moves the CISA 2015 information-sharing sunset to the same date, alongside extensions of the Technology Modernization Fund and the Federal Cybersecurity Enhancement Act authorization for the National Cybersecurity Protection System. No substantive changes to definitions, liability, FOIA or antitrust protections. The NDAA was never the carrier: Senate cloture on the motion to proceed to S. 4784 failed July 14 (50-46) with no further step recorded; H.R. 8800 passed the House July 22 (219-206). This is the fourth short-term patch since the original September 30, 2025 sunset.

UpcomingEffectiveCyber incident and software assurance 2026-12-11

Continuing Appropriations and Extensions Act, 2027 (H.R. 6500): the December 11 cliff

Enacted September 2, 2026 after the Senate passed it 90-6 and the House 370-48. Funds the federal government through December 11, 2026 and moves the CISA 2015 sunset to December 11 (verify the section citation against the enrolled text). Extends the Technology Modernization Fund, with roughly $5 million authorized for new project approvals, and the Federal Cybersecurity Enhancement Act authorization for the National Cybersecurity Protection System. Also bars OMB from finalizing its proposed federal financial assistance regulation through December 11 (adjacent, not supply chain).

Upcoming dates

  • 2026-12-11CISA 2015 information-sharing authority sunset (extended by CR to December 11)
Key decision-makers

Leadership to know

We focus on the roles whose decisions reach members, and why each one matters — not biographical trivia. Names are intentionally withheld until verified against an official source.

Name pending verification
Relevant committee leadership (Commerce, Armed Services, Homeland Security)

Why it mattersShapes telecom supply-chain statutes and oversight.

Verification required
Working Group analysis

What we are watching

Confidence: ConfirmedSupported by a primary official source on file.

What changed

  • FY26 NDAA enacted (Dec 2025); CISA 2015 extended to Sept 30, 2026.

What we are watching

  • FY27 NDAA supply-chain provisions; long-term CISA 2015 reauthorization.

Member exposure

  • New statutory mandates translating into agency rules.

Recommended preparation

  • Track the Sept 30, 2026 sunset and NDAA cycle.

Open questions

  • Will Congress permanently reauthorize information-sharing?
Primary references

Sources & verification

Agency-level sources

This profile is a sample interface. Leadership names, dates, regulatory status, and figures must be confirmed against current official sources before any member distribution.