1. Telecommunications security program (a) Program required The Secretary of Defense shall carry out a program to identify and mitigate vulnerabilities in the telecommunications infrastructure of the Department of Defense. (b) Elements In carrying out the program under subsection (a), the Secretary shall— (1) develop a capability to communicate clearly and authoritatively about threats by foreign actors; (2) conduct independent red-team security analysis of Department of Defense systems, subsystems, devices, and components including no-knowledge testing and testing with limited or full knowledge of expected functionalities; (3) verify the integrity of personnel who are tasked with design fabrication, integration, configuration, storage, test, and documentation of noncommercial 5G technology to be used by the Department of Defense; (4) verify the efficacy of the physical security measures used at Department of Defense locations where system design, fabrication, integration, configuration, storage, test, and documentation of 5G technology occurs; (5) direct the Chief Information Officer of the Department of Defense to use the Federal Risk and Authorization Management Program (commonly known as FedRAMP ) moderate or high cloud standard baselines, supplemented with the Department’s FedRAMP cloud standard controls and control enhancements, to assess 5G core service providers whose services will be used by the Department of Defense through the Department’s provisional authorization process