shall, using the authorities of the Director under 
subsections (c)(15) and (e)(1)(A)(ix) of section 2 of 
the National Institute of Standards and Technology 
Act (15 U.S.C. 272), as amended by subsection (a), 
disseminate and make publicly available resources to 
help research institutions and institutions of higher 
education identify, assess, manage, and reduce their 
cybersecurity risk related to conducting research. 
(2) REQUIREMENTS.—The Director shall en-
sure that the resources disseminated pursuant to 
paragraph (1)— 
(A) are generally applicable and usable by 
a wide range of research institutions and insti-
tutions of higher education; 
(B) vary with the nature and size of the 
implementing research institutions or institu-
tions of higher education, and the nature and 
sensitivity of the data collected or stored on the 
information systems or devices of the imple-
menting research institutions or institutions of 
higher education; 
(C) include elements that promote aware-
ness of simple, basic controls, a workplace cy-
bersecurity culture, and third-party stakeholder 
relationships, to assist research institutions or 
VerDate Sep 11 2014 
23:02 May 19, 2021
Jkt 019200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H2153.IH
H2153
pbinns on DSKJLVW7X2PROD with BILLS
institutions of higher education in mitigating 
common cybersecurity risks; 
(D) include case studies of practical appli-
cation; 
(E) are technology-neutral and can be im-
plemented using technologies that are commer-
cial and off-the-shelf; and 
(F) to the extent practicable, are based on 
international standards. 
(3) NATIONAL
CYBERSECURITY
AWARENESS 
AND EDUCATION PROGRAM.—The Director shall en-
sure that the resources disseminated under para-
graph (1) are consistent with the efforts of the Di-
rector under section 401 of the Cybersecurity En-
hancement Act of 2014 (15 U.S.C. 7451). 
(4) UPDATES.—The Director shall review peri-
odically and update the resources under paragraph 
(1) as the Director determines appropriate. 
(5) VOLUNTARY RESOURCES.—The use of the 
resources disseminated under paragraph (1) shall be 
considered voluntary. 
(6) OTHER
FEDERAL
CYBERSECURITY
RE-
QUIREMENTS.—Nothing in this section may be con-
strued to supersede, alter, or otherwise affect any 
VerDate Sep 11 2014 
23:02 May 19, 2021
Jkt 019200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H2153.IH
H2153
pbinns on DSKJLVW7X2PROD with BILLS
cybersecurity requirements applicable to Federal 
agencies. 
(c) DEFINITIONS.—In this section: 
(1) DIRECTOR.—The term ‘‘Director’’ means 
the Director of the National Institute of Standards 
and Technology. 
(2) INSTITUTION OF HIGHER EDUCATION.—The 
term ‘‘institution of higher education’’ has the 
meaning given such term in section 101 of the High-
er Education Act of 1965 (20 U.S.C. 1001). 
(3) RESOURCES.—The term ‘‘resources’’ means 
guidelines, tools, best practices, standards, meth-
odologies, and other ways of providing information. 
(4) RESEARCH
INSTITUTION.—The term ‘‘re-
search institution’’— 
(A) means a nonprofit institution (as de-
fined in section 4(3) of the Stevenson-Wydler 
Technology Innovation Act of 1980 (15 U.S.C. 
3703(3))); and 
(B) includes federally funded research and 
development centers, as identified by the Na-
tional Science Foundation in accordance with 
the Federal Acquisition Regulation issued in ac-
cordance with section 1303(a)(1) of title 41 (or 
any successor regulation). 
VerDate Sep 11 2014 
23:02 May 19, 2021
Jkt 019200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H2153.IH
H2153
pbinns on DSKJLVW7X2PROD with BILLS
SEC. 204. CHINESE RESEARCH FUNDS ACCOUNTING ACT. 
(a) STUDY.—The Comptroller General of the United 
States shall conduct a study on Federal funding made 
available to covered entities for research during the study 
period. 
(b) MATTERS TO BE INCLUDED.—The study con-
ducted under subsection (a) shall include, to the extent 
practicable with respect to the study period, an assessment 
of— 
(1) the total amount of Federal funding made 
available to covered entities for research; 
(2) the total number and types of covered enti-
ties to whom such funding was made available; 
(3) the requirements relating to the awarding, 
tracking, and monitoring of such funding; 
(4) any other data available with respect to 
Federal funding made available to covered entities 
for research; and 
(5) other matters the Comptroller General de-
termines appropriate. 
(c) BRIEFING ON AVAILABLE DATA.—Not later than 
120 days after the date of enactment of this Act, the 
Comptroller General shall brief the Committee on Science, 
Space, and Technology and the Committee on Foreign Af-
fairs of the House of Representatives and the Committee 
on Commerce, Science, and Transportation and the Com-
VerDate Sep 11 2014 
23:02 May 19, 2021
Jkt 019200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H2153.IH
H2153
pbinns on DSKJLVW7X2PROD with BILLS
mittee on Foreign Relations of the Senate on the data that 
is available with respect to Federal funding made available 
to covered entities for research. 
(d) REPORT.—Not later than 240 days after the date 
of enactment of this Act, the Comptroller General shall 
submit to the congressional committees specified in sub-
section (c) a report on the findings of the study conducted 
under subsection (a). 
(e) DEFINITIONS.—In this section: 
(1) COVERED ENTITY.—The term ‘‘covered en-
tity’’ means an entity— 
(A) located in the People’s Republic of 
China; or 
(B) majority owned or controlled by the 
Chinese Communist Party. 
(2) STUDY PERIOD.—The term ‘‘study period’’ 
means the 5-year period ending on the date of enact-
ment of this Act. 
TITLE III—SUPPLY CHAIN AND 
CRITICAL MATERIALS SECURITY 
SEC. 301. NATIONAL SUPPLY CHAIN DATABASE. 
(a) ESTABLISHMENT OF NATIONAL SUPPLY CHAIN 
DATABASE.—The Director of the National Institute of 
Standards and Technology (referred to in this section as 
VerDate Sep 11 2014 
23:02 May 19, 2021
Jkt 019200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H2153.IH
H2153
pbinns on DSKJLVW7X2PROD with BILLS