; and (B) the solutions of the Defense Health Agency for remediating any deficiencies of managed care support contractors. (3) The extent to which the Defense Health Agency has reviewed any lessons learned from prior transitions and incorporated those lessons into the current transition. (c) Ongoing requirement The Comptroller General shall review any transition of managed care support contractors for the TRICARE program occurring after the date of the review under subsection (a) and submit to the congressional defense committees a similar review for each such transition. (d) TRICARE program defined In this section, the term TRICARE program has the meaning given that term in section 1072 of title 10, United States Code. VIII Acquisition policy, acquisition management, and related matters A Acquisition policy and management 801. Permanent Supply Chain Risk Management Authority (a) Permanent extension of authority (1) In general Chapter 137 of title 10, United States Code, is amended by adding at the end the following new section: 2339a. Requirements for information relating to supply chain risk (a) Authority Subject to subsection (b), the head of a covered agency may— (1) carry out a covered procurement action; and (2) limit, notwithstanding any other provision of law, in whole or in part, the disclosure of information relating to the basis for carrying out a covered procurement action. (b) Determination and notification The head of a covered agency may exercise the authority provided in subsection (a) only after— (1) obtaining a joint recommendation by the Under Secretary of Defense for Acquisition and Sustainment and the Chief Information Officer of the Department of Defense, on the basis of a risk assessment by the Under Secretary of Defense for Intelligence, that there is a significant supply chain risk to a covered system