Cyber Leap Act of 2020

To require the Secretary of Commerce to establish national cybersecurity grand challenges, and for other purposes. 1. Short title This Act may be cited as the Cybersecurity Competitions to Yield Better Efforts to Research the Latest Exceptionally Advanced Problems Act of 2020 Cyber Leap Act of 2020 2. National Cybersecurity Grand Challenges (a) In general Title II of the Cybersecurity Enhancement Act of 2014 ( 15 U.S.C. 7431 205. National Cybersecurity Grand Challenges (a) Establishment of national cybersecurity grand challenges (1) In general To achieve high-priority breakthroughs in cybersecurity by 2028, the Secretary of Commerce shall establish the following national cybersecurity grand challenges: (A) Economics of a cyber attack Building more resilient systems that measurably and exponentially raise adversary costs of carrying out common cyber attacks. (B) Cyber training (i) Empowering the people of the United States with an appropriate and measurably sufficient level of digital literacy to make safe and secure decisions online. (ii) Developing a cybersecurity workforce with measurable skills to protect and maintain information systems. (C) Emerging technology Advancing cybersecurity efforts in response to emerging technology, such as artificial intelligence, quantum science, and next generation communications technologies. (D) Reimagining digital identity Maintaining a high sense of usability while improving the security and safety of online activity of individuals in the United States. (E) Federal agency resilience Reducing cybersecurity risks to Federal networks and systems, and improving the response of Federal agencies to cybersecurity incidents on such networks and systems. (F) Other challenges Such other challenges as the Secretary of Commerce considers appropriate to achieve high-priority breakthroughs in cybersecurity. (2) Considerations In carrying out paragraph (1), the Secretary shall consider the recommendations set forth in the report of the National Security Telecommunications Advisory Committee entitled NSTAC Report to the President on a Cybersecurity Moonshot (b) Pursuit of national cybersecurity grand challenges (1) In general Not later than 180 days after the date of the enactment of the Cybersecurity Competitions to Yield Better Efforts to Research the Latest Exceptionally Advanced Problems Act of 2020 (2) Competitions The efforts required by paragraph (1) shall include carrying out programs to award prizes, including cash and noncash prizes, competitively pursuant to the authorities and processes established under section 24 of the Stevenson-Wydler Technology Innovation Act of 1980 ( 15 U.S.C. 3719 (3) Additional authorities In carrying out paragraph (1), the Secretary may enter into and perform such other transactions as the Secretary considers necessary and on such terms as the Secretary considers appropriate. (4) Coordination In pursuing national cybersecurity grand challenges under paragraph (1), the Secretary shall coordinate with the following: (A) The Director of the National Science Foundation. (B) The Director of the Cybersecurity and Infrastructure Security Agency. (C) The Director of the Defense Advanced Research Projects Agency. (D) The Director of the Office of Science and Technology Policy. (E) The Director of the Office of Management and Budget. (F) The Administrator of the General Services Administration. (G) The Federal Trade Commission. (H) The heads of such other Federal agencies as the Secretary of Commerce considers appropriate for purposes of this section. (5) Solicitation of acceptance of funds Pursuant to section 24 of the Stevenson-Wydler Technology Innovation Act of 1980 ( 15 U.S.C. 3719 (c) Recommendations (1) In general In carrying out this section, the Secretary of Commerce shall designate an advisory council to seek recommendations. (2) Elements The recommendations required by paragraph (1) shall include the following: (A) A scope for efforts carried out under subsection (b). (B) Metrics to assess submissions for prizes under competitions carried out under subsection (b) as the submissions pertain to the national cybersecurity grand challenges established under subsection (a). . (b) Conforming amendments Section 201(a)(1) of such Act is amended— (1) in subparagraph (J), by striking ; and (2) by redesignating subparagraph (K) as subparagraph (L); and (3) by inserting after subparagraph (J) the following: (K) implementation of section 205 through research and development on the topics identified under subsection (a) of such section; and . (c) Clerical amendment The table of contents in section 1(b) of such Act is amended by inserting after the item relating to section 204 the following: Sec. 205. National Cybersecurity Grand Challenges. .

Summary: Cybersecurity Competitions to Yield Better Efforts to Research the Latest Exceptionally Advanced Problems Act of 2020 or the Cyber Leap Act of 2020 This bill requires the Department of Commerce to establish national cybersecurity grand challenges to achieve high-priority breakthroughs in cybersecurity. These challenges will offer cash and noncash prizes to winners and shall include competitions that encompass building more resilient systems that raise adversary costs of carrying out common cyberattacks, empowering people with a sufficient level of digital literacy to make safe and secure decisions online and developing a cybersecurity workforce to protect and maintain information systems, advancing cybersecurity efforts in response to emerging technologies, maintaining usability while improving the security and safety of individuals' online activity, and reducing cybersecurity risks to federal networks and systems and improving the response of federal agencies to cybersecurity incidents. Commerce must designate an advisory council to seek recommendations for the scope of the challenges and for metrics to assess submissions for prizes.