Sec. 3. Authority and functions of the Director of NIST

505 words·~2 min read·/bill/114/hr/6066/ih/section-3

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Section 3553 of title 44, United States Code, is amended— by redesignating subsections

(c)through

(j)as subsections

(d)through (k), respectively; and by inserting after subsection

(b)the following new subsection: The Director of the National Institute of Standards and Technology shall further develop and update as necessary the standards and guidelines under section 20 of the National Institute of Standards and Technology Act ( 15 U.S.C. 278g–3 ) to fulfill the additional objectives and requirements of the Cybersecurity Responsibility and Accountability Act of 2016. Further, the Director of the National Institute of Standards and Technology shall— provide to the Director of the Office of Management and Budget a framework and process for agency implementation of such standards and guidelines; provide support to agency heads for the implementation of such standards and guidelines and their application to information security policies and principles, as well as with the development of information security training and certification for agency heads; conduct cybersecurity research— to identify and address prevalent information security challenges, concerns, and knowledge gaps identified by agencies, including those manifested in any of the reports, evaluations, assessments, and plans described in this subchapter that may undermine agencies’ information security policies and practices; to assess the sufficiency of the current statutory requirements of the Federal Information Security Management Act of 2002 and the Federal Information Security Modernization Act of 2014, and their effectiveness in requiring agencies to implement standards and guidelines developed under section 20 of the National Institute of Standards and Technology Act ( 15 U.S.C. 278g–3 ) and authorized by the Cybersecurity Responsibility and Accountability Act of 2016 regarding information security policies and practices; and that shall require the Director of the Office of Management and Budget, the Secretary of Homeland Security, and the heads of other Federal agencies to provide the Director of the National Institute of Standards and Technology any resources, including reports, evaluations, assessments, and plans, that may be required for such research; and develop, publish, and update as necessary information security standards and guidelines for national security systems based on established standards and guidelines for information systems. . Subchapter II of chapter 35 of title 44, United States Code, is amended— in the item relating to section 3553 in the table of sections, by striking and the Secretary and inserting , the Secretary, and the Director of the National Institute of Standards and Technology ; in the section heading for section 3553, by striking and inserting and the Secretary ; , the Secretary, and the Director of the National Institute of Standards and Technology in section 3553(e), as so redesignated by subsection (a)(1) of this section, by striking subsection

(c)and inserting subsection

(d); in section 3553(i)(1)(B), as so redesignated by subsection (a)(1) of this section— by striking subsection

(d)and inserting subsection

(e); and by striking subsection

(e)and inserting subsection

(f); in section 3554(a)(1)(B)(v), by striking section 3553(h) and inserting section 3553(i) ; and in section 3555(g)(1), by striking section 3553(c) and inserting section 3553(d) .

Connections1 off-index

1 reference not yet in our index

15 USC 278g–3

Citation graph

cites case law

Sec. 3

Authority and functions of the Director of NIST

Cite15 USC 278g–3

Cites 1Cited by 0 across 0 sources