; and (2) by inserting after section 303 the following new section: 304. Requirements for vendors of election systems (a) Prohibiting agreements with vendors failing To meet requirements A State, unit of local government, or any component of a State or unit of local government which is responsible for the administration of an election for Federal office may not enter into an agreement with a vendor to provide, support, or maintain any component of the election system unless the vendor meets the criteria described in subsection (b). (b) Criteria for vendors The criteria described in this subsection with respect to a vendor are as follows, as established and published by the Chair of the Commission in coordination with the Secretary of Homeland Security: (1) The vendor shall certify that it is owned and controlled by a citizen, national, or permanent resident of the United States, and that none of its activities are directed, supervised, controlled, subsidized, or financed, and none of its policies are determined by, any foreign principal (as defined in section 1(b) of the Foreign Agents Registration Act of 1938 ( 22 U.S.C. 611(b) ), or by any agent of a foreign principal required to register under such Act. (2) The vendor shall disclose to the Chair and the Secretary, and to the chief State election official of any State in which the vendor provides, supports, or maintains any component of an election system, any sourcing outside the United States for parts of the system. (3) The vendor shall ensure that the election system will be developed and maintained in a manner that is consistent with the cybersecurity best practices established under subsection (c). (4) The vendor shall maintain its information technology infrastructure in a manner that is consistent with the cybersecurity best practices established under subsection (c). (5) The vendor shall report any known or suspected security incidents involving election systems to the chief State election official of the State involved or the official’s designee, the