; (3) by amending subsection (b) to read as follows: (b) Authority (1) Identification (A) In general Under the program established under subsection (a), the commander of the combatant command concerned shall evaluate covered persons and entities within the area of responsibility of such command to identify such covered persons and entities that are engaging in covered activities. (B) Notification Upon identification of a covered person or entity who is engaging in covered activities pursuant to an evaluation under subparagraph (A), the commander of the combatant command concerned, or the designated deputies of such commander, shall submit to the Under Secretary of Defense for Acquisition and Sustainment, the Under Secretary of Defense for Intelligence and Security, and the Under Secretary of Defense for Policy a notice of such identification and the rationale for such identification. (2) Covered procurement actions The head of a contracting activity may take a covered procurement action with respect to a person or entity identified as engaging in a covered activity under the program established under subsection (a) if such head receives a notification from the Under Secretary of Defense for Acquisition and Sustainment stating that, based on a risk assessment conducted by the commander of a combatant command who made such identification— (A) such person or entity is a covered person or entity; (B) such person or entity is or was engaging in one or more covered activities; and (C) less intrusive measures are not reasonably available to manage the risk posed by such person or entity.