Bill > S5345

This bill mandates that the Department of Defense (DoD) will not enter into, renew, or extend contracts for goods or services involving artificial intelligence (AI) unless the contractor provides an "artificial intelligence functional bill of materials" (AI-FBOM) to the Chief Digital and Artificial Intelligence Officer. This AI-FBOM, which must be machine-readable, needs to detail the software, data, and hardware that underpin the AI system, including specific information about AI models, their dependencies, security and governance, access history, performance metrics, training and inference data, and the physical infrastructure. Contractors must be able to deliver an updated AI-FBOM within 48 hours of a request. The bill also requires the DoD to update its regulations to ensure that existing rules for software bills of materials (SBOMs), which are records identifying every component and dependency in a software application, apply to the software within AI systems, and directs the Secretary of Defense to report on the implementation of these requirements and potential further enhancements to AI procurement processes. Additionally, guidance will be issued on the secure storage of these AI-FBOMs to protect against tampering and unauthorized access.