Sec. 509. Computing Enclave Pilot Program
374 words·~2 min read·
/bill/116/hr/5685/ih/section-509A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Director in consultation with the Director of the National Institute of Standards and Technology and the Secretary of Energy, shall award grants to establish a pilot program to ensure the security of federally supported research data and to assist regional institutions of higher education and their researchers in compliance with regulations regarding the safeguarding of sensitive information and other relevant regulations and Federal guidelines. In carrying out the pilot program established pursuant to subsection (a), the Director shall select three institutions of higher education from among institutions classified under the Indiana University Center for Postsecondary Research Carnegie Classification as a doctorate-granting university with a very high level of research activity, and with a history of working with secure information for the development, installation, maintenance, or sustainment of secure computing enclaves.
In selecting universities pursuant to subsection (b), the Director shall give preference to institutions of higher education with the capability of serving other regional universities. The enclaves should be geographically dispersed to better meet the needs of regional interests. The Director shall work with Institutions of Higher Education selected pursuant to subsection
(b)to— develop an approved design blueprint for compliance with Federal data protection protocols; develop a comprehensive and confidential list, or a bill of materials, of each binary component of the software, firmware, or product that is required to deploy additional secure computing enclaves; develop templates for all policies and procedures required to operate the secure computing enclave in a research setting; develop a system security plan template; and develop a process for managing a plan of action and milestones for the secure computing enclave. The pilot program established pursuant to subsection
(a)shall operate for not less than 3 years. The Director shall report to Congress not later than 6 months after the completion of the pilot program under subsection (a). The report required under paragraph
(1)shall include— an assessment of the pilot program under subsection (a), including an assessment of the security benefits provided by such secure computing enclaves; recommendations related to the value of expanding the network of secure computing enclaves; and recommendations on the efficacy of the use of secure computing enclaves by other Federal agencies in a broader effort to expand security of Federal research.