(a) In general

(1) Convening the Security Review Committee

In any case of a serious security incident involving loss of life, serious injury, or significant destruction of property at, or related to, a United States Government diplomatic mission abroad (referred to in this subchapter as a “Serious Security Incident”), and in any case of a serious breach of security involving intelligence activities of a foreign government directed at a United States Government mission abroad, the Secretary of State shall convene a Security Review Committee, which shall issue a report providing a full account of what occurred, consistent with section 4834 of this title.

(2) Committee composition

The Secretary shall designate a Chairperson and may designate additional personnel of commensurate seniority to serve on the Security Review Committee, which shall include—

(A) the Director of the Office of Management Strategy and Solutions;

(B) the Assistant Secretary responsible for the region where the incident occurred;

(C) the Assistant Secretary of State for Diplomatic Security;

(D) the Assistant Secretary of State for Intelligence and Research;

(E) an Assistant Secretary-level representative from any involved United States Government department or agency; and

(F) other personnel determined to be necessary or appropriate.

(3) Exceptions to convening a Security Review Committee

(A) In general

The Secretary of State is not required to convene a Security Review Committee—

(i) if the Secretary determines that the incident involves only causes unrelated to security, such as when the security at issue is outside of the scope of the Secretary of State’s security responsibilities under section 4802 of this title;

(ii) if operational control of overseas security functions has been delegated to another agency in accordance with section 4805 of this title;

(iii) if the incident is a cybersecurity incident and is covered by other review mechanisms; or

(iv) in the case of an incident described in paragraph (1) that involves any facility, installation, or personnel of the Department of Defense with respect to which the Secretary has delegated operational control of overseas security functions to the Secretary of Defense pursuant to section 4805 of this title.

(B) Department of Defense investigations

In the case of an incident described in subparagraph (A)(iv), the Secretary of Defense shall conduct an appropriate inquiry. The Secretary of Defense shall report the findings and recommendations of such inquiry, and the action taken with respect to such recommendations, to the Secretary of State and Congress.

(4) Facilities in Afghanistan, Yemen, Syria, and Iraq

(A) Limited exemptions from requirement to convene Board

The Secretary of State is not required to convene a Board in the case of an incident that—

(i) involves serious injury, loss of life, or significant destruction of property at, or related to, a United States Government mission in Afghanistan, Yemen, Syria, or Iraq; and

(ii) occurs during the period beginning on October 1, 2020, and ending on September 30, 2022.

(B) Reporting requirements

In the case of an incident described in subparagraph (A), the Secretary shall—

(i) promptly notify the Committee on International Relations of the House of Representatives and the Committee on Foreign Relations of the Senate of the incident;

(ii) conduct an inquiry of the incident; and

(iii) upon completion of the inquiry required by clause (ii), submit to each such Committee a report on the findings and recommendations related to such inquiry and the actions taken with respect to such recommendations.

(5) Rulemaking

The Secretary of State shall promulgate regulations defining the membership and operating procedures for the Security Review Committee and provide such guidance to the Chair and ranking members of the Committee on Foreign Relations of the Senate and the Committee on Foreign Affairs of the House of Representatives.

(b) Deadlines for convening Security Review Committees

(1) In general

The Secretary of State shall convene a Security Review Committee not later than 60 days after the occurrence of an incident described in subsection (a)(1), or 60 days after the Department first becomes aware of such an incident, whichever is earlier, except that the 60-day period for convening a Security Review Committee may be extended for one additional 60-day period if the Secretary determines that the additional period is necessary.

(2) Delay in cases involving intelligence activities

With respect to breaches of security involving intelligence activities, the Secretary of State may delay the establishment of a Board if, after consultation with the chairman of the Select Committee on Intelligence of the Senate and the chairman of the Permanent Select Committee on Intelligence of the House of Representatives, the Secretary determines that the establishment of a Board would compromise intelligence sources or methods. The Secretary shall promptly advise the chairmen of such committees of each determination pursuant to this paragraph to delay the establishment of a Board.

(c) Congressional notification

Whenever the Secretary of State convenes a Security Review Committee, the Secretary shall promptly inform the chair and ranking member of—

(1) the Committee on Foreign Relations of the Senate;

(2) the Select Committee on Intelligence of the Senate;

(3) the Committee on Appropriations of the Senate;

(4) the Committee on Foreign Affairs of the House of Representatives;

(5) the Permanent Select Committee on Intelligence of the House of Representatives; and

(6) the Committee on Appropriations of the House of Representatives.