Sec. 4. Cybersecurity
346 words·~2 min read·
/bill/115/hr/6229/rh/section-4·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Secretary, acting through the Director, shall enhance and expand the Institute’s guidance and assistance to Federal agencies to help such agencies effectively use the Framework, including by providing technical guidance and education and training of— agency staff responsible for cybersecurity; and individual inspectors general and staff of such agencies who are responsible for the annual independent evaluation required under section 3555 of title 44, United States Code. Not later than 12 months after the date of the enactment of this Act, the Secretary shall submit to the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate a report describing the implementation of the activities described in this section in as much detail as possible, including the identification of Federal agencies assisted pursuant to subsection
(a)and the types of consultative services, education, guidance, assistance, and training provided to such agencies and inspectors general of such agencies pursuant to such subsection. The Secretary, acting through the Director, shall expand the fundamental and applied research carried out by the Institute to address key questions relating the measurement of privacy, security, and vulnerability of software tools and communications networks, including through— the development of research and engineering capabilities to provide practical solutions, including measurement techniques and engineering toolkits, to solve cybersecurity challenges such as human factors, identity management, network security, privacy, and software; investment in tools to help private and public sector organizations measure their cybersecurity, manage their risks and ensure workforce preparedness for new cybersecurity challenges; and investment in programs to prepare the United States with strong cybersecurity and encryption technologies to apply to emerging technologies such as artificial intelligence, the internet of things, and quantum computing. The Secretary, acting through the Director, shall have the authority to enter into and perform such contracts on such terms as the Secretary considers to be appropriate, including cooperative research and development arrangements, grants, and cooperative agreements or other transactions, as may be necessary in the conduct of the work of the Institute with respect to cybersecurity.