Sec. 311. Cybersecurity research and development projects

1,113 words·~5 min read·/bill/116/hr/8309/ih/section-311

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Title III of the Homeland Security Act of 2002 ( 6 U.S.C. 181 et seq.), as amended by title I of this Act, is further amended by adding at the end the following new section: The Under Secretary for Science and Technology shall support the research, development, testing, evaluation, and transition of cybersecurity technologies, including fundamental research to improve the sharing of information, information security, analytics, and methodologies related to cybersecurity risks and incidents, consistent with current law. The research and development supported under subsection

(a)shall serve the components of the Department and shall— advance the development and accelerate the deployment of more secure information systems; improve and create technologies for detecting and preventing attacks or intrusions, including real-time continuous diagnostics, real-time analytic technologies, and full life cycle information protection; improve and create mitigation and recovery methodologies, including techniques and policies for real-time containment of attacks and development of resilient networks and information systems; assist the development and support infrastructure and tools to support cybersecurity research and development efforts, including modeling, testbeds, and data sets for assessment of new cybersecurity technologies; assist the development and support of technologies to reduce vulnerabilities in industrial control systems; assist the development and support cyber forensics and attack attribution capabilities; assist the development and accelerate the deployment of full information life cycle security technologies to enhance protection, control, and privacy of information to detect and prevent cybersecurity risks and incidents; assist the development and accelerate the deployment of information security measures, in addition to perimeter-based protections; assist the development and accelerate the deployment of technologies to detect improper information access by authorized users; assist the development and accelerate the deployment of cryptographic technologies to protect information at rest, in transit, and in use; assist the development and accelerate the deployment of methods to promote greater software assurance; assist the development and accelerate the deployment of tools to securely and automatically update software and firmware in use, with limited or no necessary intervention by users and limited impact on concurrently operating systems and processes; and assist in identifying and addressing unidentified or future cybersecurity threats. In carrying out this section, the Under Secretary for Science and Technology shall coordinate activities with— the Director of Cybersecurity and Infrastructure Security; the heads of other relevant Federal departments and agencies, as appropriate; and industry and academia. The Under Secretary for Science and Technology shall— support projects carried out under this title through the full life cycle of such projects, including research, development, testing, evaluation, pilots, and transitions; identify mature technologies that address existing or imminent cybersecurity gaps in public or private information systems and networks of information systems, protect sensitive information within and outside networks of information systems, identify and support necessary improvements identified during pilot programs and testing and evaluation activities, and introduce new cybersecurity technologies throughout the homeland security enterprise through partnerships and commercialization; and target federally funded cybersecurity research that demonstrates a high probability of successful transition to the commercial market within 2 years and that is expected to have a notable impact on the public or private information systems and networks of information systems. In this section: The term cybersecurity risk has the meaning given the term in section 2209. The term homeland security enterprise means relevant governmental and nongovernmental entities involved in homeland security, including Federal, State, local, and Tribal government officials, private sector representatives, academics, and other policy experts. The term incident has the meaning given the term in section 2209. The term information system has the meaning given the term in section 3502 of title 44, United States Code. The term software assurance means confidence that software— is free from vulnerabilities, either intentionally designed into the software or accidentally inserted at any time during the life cycle of the software; and functioning in the intended manner. . The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 321, as added by title I of this Act, the following new item: Sec. 322. Cybersecurity research and development. . Section 831 of the Homeland Security Act of 2002 ( 6 U.S.C. 391 ) is amended— in subsection (a)— in the matter preceding paragraph (1), by striking 2017 and inserting 2022 ; and in paragraph (2), by striking under section 845 of the National Defense Authorization Act for Fiscal Year 1994 ( and inserting Public Law 103–160 ). In applying the authorities of that section 845, subsection

(c)of that section shall apply with respect to prototype projects under this paragraph, and the Secretary shall perform the functions of the Secretary of Defense under subsection

(d)thereof under section 2371b of title 10, United States Code, and the Secretary shall perform the functions of the Secretary of Defense as prescribed. ; in subsection (c)— in paragraph (1), in the matter preceding subparagraph (A), by striking 2017 and inserting 2022 ; and by amending paragraph

(2)to read as follows: The Secretary shall annually submit to the Committee on Homeland Security and the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report detailing the projects for which the authority granted by subsection

(a)was utilized, the rationale for such utilizations, the funds spent utilizing such authority, the extent of cost-sharing for such projects among Federal and non-Federal sources, the extent to which utilization of such authority has addressed a homeland security capability gap or threat to the homeland identified by the Department, the total amount of payments, if any, that were received by the Federal Government as a result of the utilization of such authority during the period covered by each such report, the outcome of each project for which such authority was utilized, and the results of any audits of such projects. ; in subsection (d), by striking as defined in section 845(e) of the National Defense Authorization Act for Fiscal Year 1994 ( and inserting Public Law 103–160 ; 10 U.S.C. 2371 note) as defined in section 2371b(e) of title 10, United States Code. ; and by adding at the end the following: The Secretary shall develop a training program for acquisitions staff on the utilization of the authority provided under subsection

(a)to ensure accountability and effective management of projects consistent with the Program Management Improvement Accountability Act ( Public Law 114–264 ; 130 Stat. 1371) and the amendments made by such Act. . No additional funds are authorized to carry out the requirements of this section and the amendments made by this section. Such requirements shall be carried out using amounts otherwise authorized.

Connectionstraces to 4

Traces to 4 documents

U.S. Code

public-private-law