Sec. 1644. Assistance for small manufacturers in the defense industrial supply chain and universities on matters relating to cybersecurity
620 words·~3 min read·
/bill/115/hr/5515/enr/section-1644·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Secretary of Defense, in consultation with the Director of the National Institute of Standards and Technology, shall take such actions as may be necessary to enhance awareness of cybersecurity threats among small manufacturers and universities working on Department of Defense programs and activities. The Secretary of Defense shall prioritize efforts to increase awareness to help reduce cybersecurity risks faced by small manufacturers and universities referred to in paragraph (1).
The Secretary of Defense shall carry out this subsection with a focus on such small manufacturers and universities as the Secretary considers critical. Under paragraph (1), the Secretary of Defense shall conduct outreach to support activities consistent with this section. Such outreach may include live events with a physical presence and outreach conducted through Internet websites. Such outreach may include training, including via courses and classes, to help small manufacturers and universities improve their cybersecurity.
The Secretary of Defense shall ensure that cybersecurity for defense industrial base manufacturing is included in appropriate research and development roadmaps and threat assessments. The Secretary of Defense shall develop mechanisms to provide assistance to help small manufacturers and universities conduct voluntary self-assessments in order to understand operating environments, cybersecurity requirements, and existing vulnerabilities, including through the Mentor Protégé Program, small business programs, and engagements with defense laboratories and test ranges.
The Secretary of Defense shall promote the transfer of appropriate technology, threat information, and cybersecurity techniques developed in the Department of Defense to small manufacturers and universities throughout the United States to implement security measures that are adequate to protect covered defense information, including controlled unclassified information. The Secretary of Defense shall coordinate efforts, when appropriate, with the expertise and capabilities that exist in Federal agencies and federally sponsored laboratories.
In carrying out this subsection, the Secretary of Defense may enter into agreements with private industry, institutes of higher education, or a State, United States territory, local, or tribal government to ensure breadth and depth of coverage to the United States defense industrial base and to leverage resources. The Secretary of Defense shall establish a cyber counseling certification program, or approve a similar existing program, to certify small business professionals and other relevant acquisition staff within the Department of Defense to provide cyber planning assistance to small manufacturers and universities.
The Secretary of Defense may establish an activity to assess and strengthen the cybersecurity resiliency of the defense industrial base, if the Secretary determines such is appropriate. The activity described in paragraph (1), if established, shall be known as the Cybersecurity for Defense Industrial Base Manufacturing Activity . The Cybersecurity for Defense Industrial Base Manufacturing Activity, if established, shall implement the requirements specified in subsections
(a)through (c). In carrying out this section, the Secretary may use the following authorities: The Manufacturing Technology Program established under section 2521 of title 10, United States Code. The Centers for Science, Technology, and Engineering Partnership program under section 2368 of title 10, United States Code. The Manufacturing Engineering Education Program established under section 2196 of title 10, United States Code. The Small Business Innovation Research program. The mentor-protégé program. Other legal authorities as the Secretary determines necessary to effectively and efficiently carry out this section. In this section: The term resources means guidelines, tools, best practices, standards, methodologies, and other ways of providing information. The term small business concern means a small business concern as that term is used in section 3 of the Small Business Act ( 15 U.S.C. 632 ). The term small manufacturer means a small business concern that is a manufacturer in the defense industrial supply chain. The term State means each of the several States, Territories, and possessions of the United States, the District of Columbia, and the Commonwealth of Puerto Rico.
Connectionstraces to 1
Traces to 1 document
U.S. Code
Citation graph
cites case law
Sec. 1644
Assistance for small manufacturers in the defense industrial supply chain and universities on matters relating to cybersecurity
Cites 1Cited by 0 across 0 sources