IIB 
114TH CONGRESS 
2D SESSION 
H. R. 5388 
IN THE SENATE OF THE UNITED STATES 
JUNE 22, 2016 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To amend the Homeland Security Act of 2002 to provide 
for innovative research and development, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
00:18 Jun 23, 2016
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5388.RFS
H5388
smartinez on DSK3GLQ082PROD with BILLS
HR 5388 RFS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Support for Rapid In-
novation Act of 2016’’. 
SEC. 2. CYBERSECURITY RESEARCH AND DEVELOPMENT 
PROJECTS. 
(a) CYBERSECURITY
RESEARCH
AND
DEVELOP-
MENT.— 
(1) IN GENERAL.—Title III of the Homeland 
Security Act of 2002 (6 U.S.C. 181 et seq.) is 
amended by adding at the end the following new sec-
tion: 
‘‘SEC. 319. CYBERSECURITY RESEARCH AND DEVELOP-
MENT. 
‘‘(a) IN GENERAL.—The Under Secretary for Science 
and Technology shall support the research, development, 
testing, evaluation, and transition of cybersecurity tech-
nologies, including fundamental research to improve the 
sharing of information, analytics, and methodologies re-
lated to cybersecurity risks and incidents, consistent with 
current law. 
‘‘(b) ACTIVITIES.—The research and development 
supported under subsection (a) shall serve the components 
of the Department and shall— 
‘‘(1) advance the development and accelerate 
the deployment of more secure information systems; 
VerDate Sep 11 2014 
00:18 Jun 23, 2016
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5388.RFS
H5388
smartinez on DSK3GLQ082PROD with BILLS
HR 5388 RFS
‘‘(2) improve and create technologies for detect-
ing attacks or intrusions, including real-time contin-
uous diagnostics and real-time analytic technologies; 
‘‘(3) improve and create mitigation and recov-
ery methodologies, including techniques and policies 
for real-time containment of attacks, and develop-
ment of resilient networks and information systems; 
‘‘(4) support, in coordination with non-Federal 
entities, the review of source code that underpins 
critical infrastructure information systems; 
‘‘(5) develop and support infrastructure and 
tools to support cybersecurity research and develop-
ment efforts, including modeling, testbeds, and data 
sets for assessment of new cybersecurity tech-
nologies; 
‘‘(6) assist the development and support of 
technologies to reduce vulnerabilities in industrial 
control systems; and 
‘‘(7) develop and support cyber forensics and 
attack attribution capabilities. 
‘‘(c) COORDINATION.—In carrying out this section, 
the Under Secretary for Science and Technology shall co-
ordinate activities with— 
‘‘(1) the Under Secretary appointed pursuant to 
section 103(a)(1)(H); 
VerDate Sep 11 2014 
00:18 Jun 23, 2016
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5388.RFS
H5388
smartinez on DSK3GLQ082PROD with BILLS
HR 5388 RFS
‘‘(2) the heads of other relevant Federal depart-
ments and agencies, as appropriate; and 
‘‘(3) industry and academia. 
‘‘(d) TRANSITION TO PRACTICE.—The Under Sec-
retary for Science and Technology shall support projects 
carried out under this title through the full life cycle of 
such projects, including research, development, testing, 
evaluation, pilots, and transitions. The Under Secretary 
shall identify mature technologies that address existing or 
imminent cybersecurity gaps in public or private informa-
tion systems and networks of information systems, iden-
tify and support necessary improvements identified during 
pilot programs and testing and evaluation activities, and 
introduce new cybersecurity technologies throughout the 
homeland security enterprise through partnerships and 
commercialization. The Under Secretary shall target fed-
erally funded cybersecurity research that demonstrates a 
high probability of successful transition to the commercial 
market within 2 years and that is expected to have a nota-
ble impact on the public or private information systems 
and networks of information systems. 
‘‘(e) DEFINITIONS.—In this section: 
‘‘(1) CYBERSECURITY RISK.—The term ‘cyber-
security risk’ has the meaning given such term in 
section 227. 
VerDate Sep 11 2014 
00:18 Jun 23, 2016
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5388.RFS
H5388
smartinez on DSK3GLQ082PROD with BILLS
HR 5388 RFS
‘‘(2) HOMELAND SECURITY ENTERPRISE.—The 
term ‘homeland security enterprise’ means relevant 
governmental and nongovernmental entities involved 
in homeland security, including Federal, State, local, 
and tribal government officials, private sector rep-
resentatives, academics, and other policy experts. 
‘‘(3) INCIDENT.—The term ‘incident’ has the 
meaning given such term in section 227. 
‘‘(4) INFORMATION SYSTEM.—The term ‘infor-
mation system’ has the meaning given such term in 
section 3502(8) of title 44, United States Code.’’. 
(2) CLERICAL AMENDMENT.—The table of con-
tents in section 1(b) of the Homeland Security Act 
of 2002 is amended by inserting after the item relat-
ing to section 318 the following new item: 
‘‘Sec. 319. Cybersecurity research and development.’’. 
(b) RESEARCH
AND DEVELOPMENT PROJECTS.— 
Section 831 of the Homeland Security Act of 2002 (6 
U.S.C. 391) is amended— 
(1) in subsection (a)— 
(A) in the matter preceding paragraph (1), 
by striking ‘‘2016’’ and inserting ‘‘2020’’; 
(B) in paragraph (1), by striking the last 
sentence; and 
(C) by adding at the end the following new 
paragraph: 
VerDate Sep 11 2014 
00:18 Jun 23, 2016
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H5388.RFS
H5388
smartinez on DSK3GLQ082PROD with BILLS