; (2) complete a risk assessment of information technology products identified under paragraph (1); (3) in each case in which the head of the executive agency identifies a significant supply chain risk posed by information technology— (A) make the risk assessment with respect to that information technology available to all executive agencies through the Federal Acquisition Security Council established under subchapter III of chapter 13 of title 41, United States Code, as added by section 2; and (B) develop a plan to mitigate that risk; and (4) develop a vetting process for conducting supply chain risk assessments with respect to prospective providers of information technology and make the process available to all executive agencies. (b) Assistance The Secretary of Homeland Security may— (1) assist executive agencies in conducting risk assessments described in subsection (a) and implementing mitigation requirements for information technology; and (2) provide such additional guidance or tools as are necessary to support actions taken by executive agencies under subsection (a). (c) Definitions In this section: (1) Executive agency The term executive agency has the meaning given that term in section 133 of title 41, United States Code. (2) Information technology The term information technology has the meaning given that term in section 11101 of title 40, United States Code. (3) Supply chain risk The term supply chain risk has the meaning given that term in section 4713 of title 41, United States Code, as added by section 4. 4. Authorities of executive agencies relating to mitigating supply chain risks in the procurement of information technology (a) In general Chapter 47 of title 41, United States Code, is amended by adding at the end the following new section: 4713. Authorities relating to mitigating supply chain risks in the procurement of information technology (a) Authority Subject to subsection (b), the head of an executive agency may— (1) carry out a covered procurement action