The NDAA is a federal law that addresses cybersecurity risks and sets guidelines to strengthen national security. For example, Section 889 of the NDAA prohibits the government from purchasing certain video surveillance equipment and components from specific Chinese suppliers.