MIKE POMPEO 
4TH DISTRICT, KANSAS 
<!Congress of tbe mlntteb ~tates 
J!)ouse of l\epresentatibes 
8nsblngton, il<ll: 20515-1604 
The Honorable Tom Wheeler 
Chairman 
Federal Communications Commission 
445 12th Street, SW 
Washington, DC 20554 
Dear Chairman Wheeler: 
May 2, 2016 
436 CANNON HOUSE OFFICE BUILOING 
(202) 225-6216 
As you may recall, in August of 2014, I wrote to you regarding a serious concern I had 
regarding the inadequate and weak security requirements contained in the Local Number 
Portability Administrator (LNPA) RFP. This critical infrastructure is used by our nation's 
2,000 telecommunications carriers for the proper routing of nearly 10 billion calls and text 
messages a day, and law enforcement submits 4 million lawful requests every year to 
access some of this information. A recent article in the Washington Post, suggested very lax 
treatment of security requirements imposed on the new LNPA vendor. 
It is my belief that it would have been more productive for the FCC to have written stronger 
security requirements into the RFP and then competed and judged the bidders with those 
terms in mind. Instead, we are all now waiting to see how DHS, DOJ, and the Intelligence 
agencies' requests will be treated under the final agreement with the new LNPA vendor. 
Since the terms of the final agreement have not yet been disclosed, I can only inquire 
whether the security requirements match the promises made by the new vendor during the 
proceedings on some of the specific security terms that should be included in the contract. 
I presume that if any of these commitments are not being met, you would not go forward 
with this process. I am further troubled that the Master Services Agreement, which 
presumably contains the commitments made by the parties to the contract, has now been 
filed under a protective order, so not only can the public not see them, but neither can I. 
And yet, strangely, the security documents are available, not at the FCC, but by going to the 
offices of the parties' attorneys. So I guess this means that you do not consider them 
classified but just not available to those who consider this a vital part of the LNPA 
responsibility. 
For that reason, I am writing today to inquire what processes and procedures you have put 
in place to ensure that the new LNPA vendor lives up to the commitments that are outlined 
in the March 2015 order. Specifically, I would like your assurance that the Master Services 
Agreement now filed at the Commission contains the following provisions: 
PRINTED ON RECYCLED PAPER 
337
1. Telcordia and its subsidiaries will use a U.S- based supply chain. 
2. There will be no administrator "write" privileges outside of the U.S. 
3. Data will be stored only within the U.S. 
4. There is a rigorous, independent audit program backed by robust enforcement 
tools throughout the term of the contract. 
5. The U.S. NPAC will be built in America by U.S. citizens. 
6. U.S. coders will be pre-screened, vetted, trained and supervised, preferably by 
cleared personnel. 
7. All code for the U.S. NPAC will be original and will not contain code deployed in any 
foreign systems. 
8. U.S. code will not be later deployed in any foreign system. 
9. The security requests made by the FBI, DEA, US Secret Service and US Immigration 
and Customs Enforcement in their reply comments dated August 11, 2014 will be 
granted and included in the contract. Please enumerate these and describe any 
security requirements requested by the executive branch that were not 
incorporated into the LNPA contract. 
With respect to recent press reports concerning the new LNPA vendor's practice of 
permitting foreign nationals to write computer code for the new software, I find this most 
troubling. I am eager to learn what steps the agency is taking to investigate these 
allegations to determine if they are true. Additionally, I would like to know how the 
national security and law enforcement requirements are being addressed during the 
transition to the new vendor and how they will be addressed once the transition is 
complete. Requirements that are not properly enforced are essentially meaningless. 
Thank you in advance for your commitment to ensuring that the needed public safety and 
national security requirements are in place with proper enforcement mechanisms before 
the order implementing the Master Services Agreement is approved by the Commission. 
Ccs: Admiral David Simpson 
FCC Commissioner Pai 
FCC Commissioner Rosenworcel 
FCC Commissioner Clyburn 
FCC Commissioner O'Rielly