(a) Authority.—If the senior management official of a covered company does not have a security clearance, the Secretary of Defense may grant a security clearance to a facility of such company only if the following criteria are met:
The company has appointed a senior officer, director, or employee of the company who has a security clearance at the level of the security clearance of the facility to act as the senior management official of the company with respect to such facility.
Any senior management official, senior officer, or director of the company who does not have such a security clearance will not have access to any classified information, including with respect to such facility.
The company has certified to the Secretary that the senior officer, director, or employee appointed under paragraph (1) has the authority to act on behalf of the company with respect to such facility independent of any senior management official, senior officer, or director described in paragraph (2).
(b) Covered Company.—
In this section, the term “covered company” means a company that has entered into a contract or agreement with the Department of Defense, assists the Department, or requires a facility to process classified information.
(Added Pub. L. 115–91, div. A, title XVI, § 1621(a), Dec. 12, 2017, 131 Stat. 1732, § 2410s; amended Pub. L. 115–232, div. A, title X, § 1081(a)(23), Aug. 13, 2018, 132 Stat. 1984; renumbered § 2388, Pub. L. 116–283, div. A, title XVIII, § 1882(b), Jan. 1, 2021, 134 Stat. 4293.)