H. R. 2810—469 
SEC. 1647. BRIEFING ON TRAINING INFRASTRUCTURE FOR CYBER MIS-
SION FORCES. 
Not later than 180 days after the date of the enactment of 
this Act, the Secretary of Defense shall provide to the congressional 
defense committees a briefing on the Department of Defense 
training infrastructure for cyber mission forces. Such briefing shall 
include the following: 
(1) A strategic plan for the growth and expansion of the 
training infrastructure for cyber mission forces across the 
Department of Defense commensurate with the projected 
growth of the cyber mission force. 
(2) Identification of the shortcomings in such training infra-
structure. 
(3) A plan for the management and oversight of such 
training infrastructure, including management and oversight 
of the implementation of the strategic plan described in para-
graph (1). 
(4) Commercial applications that may potentially be used 
to address the needs identified in the strategic plan described 
in paragraph (1). 
SEC. 1648. REPORT ON TERMINATION OF DUAL-HAT ARRANGEMENT 
FOR COMMANDER OF THE UNITED STATES CYBER COM-
MAND. 
(a) REPORT.—Not later than May 1, 2018, the Secretary of 
Defense shall submit to the appropriate congressional committees 
a report on the progress of the Department of Defense in meeting 
the requirements of section 1642 of the National Defense Authoriza-
tion Act for Fiscal Year 2017 (Public Law 114–328; 130 Stat. 2601). 
(b) ELEMENTS.—The report under subsection (a) shall include, 
with respect to any decision to terminate the dual-hat arrangement 
as described in section 1642 of the National Defense Authorization 
Act for Fiscal Year 2017 (Public Law 114–328; 130 Stat. 2601), 
the following: 
(1) Metrics and milestones for meeting the conditions 
described in subsection (b)(2)(C) of such section 1642. 
(2) Identification of any challenges to meeting such condi-
tions. 
(3) Using data and support from the Director of Cost 
Assessment and Program Evaluation, in consultation with the 
Commander of the United States Cyber Command and the 
Director of the National Security Agency, identification of the 
costs that may be incurred in the effort to meet such conditions. 
(4) Identification of entities or persons requiring additional 
resources as a result of any decision to terminate the dual- 
hat arrangement. 
(5) Identification of any updates to statutory authorities 
needed as a result of any decision to terminate the dual-hat 
arrangement. 
(c) APPROPRIATE CONGRESSIONAL COMMITTEES DEFINED.—In 
this section, the term ‘‘appropriate congressional committees’’ 
means— 
(1) the congressional defense committees; 
(2) the Select Committee on Intelligence of the Senate; 
and 
(3) the Permanent Select Committee on Intelligence of the 
House of Representatives.
H. R. 2810—470 
PART II—CYBERSECURITY EDUCATION 
SEC. 1649. CYBER SCHOLARSHIP PROGRAM. 
(a) NAME OF PROGRAM.—Section 2200 of title 10, Unites States 
Code, is amended by adding at the end the following: 
‘‘(c) NAME OF PROGRAM.—The programs authorized under this 
chapter shall be known as the ‘Cyber Scholarship Program’.’’. 
(b) MODIFICATION
TO ALLOCATION
OF FUNDING
FOR CYBER 
SCHOLARSHIP PROGRAM.—Section 2200a(f) of title 10, Unites States 
Code, is amended— 
(1) by inserting ‘‘(1)’’ before ‘‘Not less’’; and 
(2) by adding at the end the following new paragraph: 
‘‘(2) Not less than five percent of the amount available 
for financial assistance under this section for a fiscal year 
shall be available for providing financial assistance for the 
pursuit of an associate degree at an institution described in 
paragraph (1).’’. 
(c) CYBER DEFINITION.—Section 2200e of title 10, Unites States 
Code, is amended to read as follows: 
‘‘§ 2200e. Definitions 
‘‘In this chapter: 
‘‘(1) The term ‘cyber’ includes the following: 
‘‘(A) Offensive cyber operations. 
‘‘(B) Defensive cyber operations. 
‘‘(C) Department of Defense information network oper-
ations and defense. 
‘‘(D) Any other information technology that the Sec-
retary of Defense considers to be related to the cyber activi-
ties of the Department of Defense. 
‘‘(2) The term ‘institution of higher education’ has the 
meaning given the term in section 101 of the Higher Education 
Act of 1965 (20 U.S.C. 1001). 
‘‘(3) The term ‘Center of Academic Excellence in Cyber 
Education’ means an institution of higher education that is 
designated by the Director of the National Security Agency 
as a Center of Academic Excellence in Cyber Education.’’. 
(d) CONFORMING AMENDMENTS.— 
(1) Chapter 112 of title 10, United States Code, is further 
amended— 
(A) in the chapter heading, by striking ‘‘INFORMA-
TION SECURITY’’ and inserting ‘‘CYBER’’; 
(B) in section 2200 (as amended by subsection (a))— 
(i) in subsection (a), by striking ‘‘Department of 
Defense information assurance requirements’’ and 
inserting ‘‘the cyber requirements of the Department 
of Defense’’; and 
(ii) in subsection (b)(1), by striking ‘‘information 
assurance’’ and inserting ‘‘cyber disciplines’’; 
(C) in section 2200a (as amended by subsection (b))— 
(i) in subsection (a)(1), by striking ‘‘an information 
assurance discipline’’ and inserting ‘‘a cyber discipline’’; 
(ii) in subsection (f)(1), by striking ‘‘information 
assurance’’ and inserting ‘‘cyber disciplines’’; and 
(iii) in subsection (g)(1), by striking ‘‘an informa-
tion technology position’’ and inserting ‘‘a cyber posi-
tion’’;
H. R. 2810—471 
(D) in section 2200b, by striking ‘‘information assur-
ance disciplines’’ and inserting ‘‘cyber disciplines’’; 
(E) in the heading of section 2200c, by striking 
‘‘Information Assurance’’ and inserting ‘‘Cyber’’; and 
(F) in section 2200c, by striking ‘‘Information Assur-
ance’’ each place it appears and inserting ‘‘Cyber’’. 
(2) The table of sections at the beginning of chapter 112 
of title 10, United States Code, is amended by striking the 
item relating to section 2200c and inserting the following: 
‘‘2200c. Centers of Academic Excellence in Cyber Education.’’. 
(3) Section 7045 of title 10, United States Code, is 
amended— 
(A) by striking ‘‘Information Security Scholarship pro-
gram’’ each place it appears and inserting ‘‘Cyber Scholar-
ship program’’; and 
(B) in subsection (a)(2)(B), by striking ‘‘information 
assurance’’ and inserting ‘‘a cyber discipline’’. 
(4) Section 7904(4) of title 38, United States Code, is 
amended by striking ‘‘Information Assurance’’ and inserting 
‘‘Cyber’’. 
(e) REDESIGNATIONS.— 
(1) SCHOLARSHIP
PROGRAM.—The Information Security 
Scholarship program under chapter 112 of title 10, United 
States Code, is redesignated as the ‘‘Cyber Scholarship pro-
gram’’. Any reference in a law (other than this section), map, 
regulation, document, paper, or other record of the United 
States to the Information Security Scholarship program shall 
be deemed to be a reference to the Cyber Scholarship Program. 
(2) CENTERS OF ACADEMIC EXCELLENCE.—Any institution 
of higher education designated by the Director of the National 
Security Agency as a Center of Academic Excellence in Informa-
tion Assurance Education is redesignated as a Center of Aca-
demic Excellence in Cyber Education. Any reference in a law 
(other than this section), map, regulation, document, paper, 
or other record of the United States to a Center of Academic 
Excellence in Information Assurance Education shall be deemed 
to be a reference to a Center of Academic Excellence in Cyber 
Education. 
(f) AUTHORIZATION OF APPROPRIATIONS.—There is authorized 
to be appropriated to the Secretary of Defense to provide financial 
assistance under section 2200a of title 10, United States Code 
(as amended by this section), and grants under section 2200b of 
such title (as so amended), $10,000,000 for fiscal year 2018. 
SEC. 1649A. COMMUNITY COLLEGE CYBER PILOT PROGRAM AND 
ASSESSMENT. 
(a) PILOT PROGRAM.—Not later than 1 year after the date 
of enactment of this subtitle, as part of the Federal Cyber Scholar-
ship-for-Service program established under section 302 of the Cyber-
security Enhancement Act of 2014 (15 U.S.C. 7442), the Director 
of the National Science Foundation, in coordination with the 
Director of the Office of Personnel Management, shall develop and 
implement a pilot program at not more than 10, but at least 
5, community colleges to provide scholarships to eligible students 
who—
H. R. 2810—472 
(1) are pursuing associate degrees or specialized program 
certifications in the field of cybersecurity; and 
(2)(A) have bachelor’s degrees; or 
(B) are veterans of the Armed Forces. 
(b) ASSESSMENT.—Not later than 1 year after the date of enact-
ment of this subtitle, as part of the Federal Cyber Scholarship- 
for-Service program established under section 302 of the Cybersecu-
rity Enhancement Act of 2014 (15 U.S.C. 7442), the Director of 
the National Science Foundation, in coordination with the Director 
of the Office of Personnel Management, shall assess the potential 
benefits and feasibility of providing scholarships through community 
colleges to eligible students who are pursuing associate degrees, 
but do not have bachelor’s degrees. 
SEC. 1649B. FEDERAL CYBER SCHOLARSHIP-FOR-SERVICE PROGRAM 
UPDATES. 
(a) IN GENERAL.—Section 302 of the Cybersecurity Enhance-
ment Act of 2014 (15 U.S.C. 7442) is amended— 
(1) in subsection (b)— 
(A) in paragraph (2), by striking ‘‘and’’ at the end; 
and 
(B) by striking paragraph (3) and inserting the fol-
lowing: 
‘‘(3) prioritize the employment placement of at least 80 
percent of scholarship recipients in an executive agency (as 
defined in section 105 of title 5, United States Code); and 
‘‘(4) provide awards to improve cybersecurity education at 
the kindergarten through grade 12 level— 
‘‘(A) to increase interest in cybersecurity careers; 
‘‘(B) to help students practice correct and safe online 
behavior and understand the foundational principles of 
cybersecurity; 
‘‘(C) to improve teaching methods for delivering cyber-
security content for kindergarten through grade 12 com-
puter science curricula; and 
‘‘(D) to promote teacher recruitment in the field of 
cybersecurity.’’; 
(2) by amending subsection (d) to read as follows: 
‘‘(d) POST-AWARD EMPLOYMENT OBLIGATIONS.—Each scholarship 
recipient, as a condition of receiving a scholarship under the pro-
gram, shall enter into an agreement under which the recipient 
agrees to work for a period equal to the length of the scholarship, 
following receipt of the student’s degree, in the cybersecurity mis-
sion of— 
‘‘(1) an executive agency (as defined in section 105 of title 
5, United States Code); 
‘‘(2) Congress, including any agency, entity, office, or 
commission established in the legislative branch; 
‘‘(3) an interstate agency; 
‘‘(4) a State, local, or Tribal government; or 
‘‘(5) a State, local, or Tribal government-affiliated non- 
profit that is considered to be critical infrastructure (as defined 
in section 1016(e) of the USA Patriot Act (42 U.S.C. 5195c(e)).’’; 
(3) in subsection (f)— 
(A) by amending paragraph (3) to read as follows: 
‘‘(3) have demonstrated a high level of competency in rel-
evant knowledge, skills, and abilities, as defined by the national
H. R. 2810—473 
cybersecurity awareness and education program under section 
401;’’; and 
(B) by amending paragraph (4) to read as follows: 
‘‘(4) be a full-time student in an eligible degree program 
at a qualified institution of higher education, as determined 
by the Director of the National Science Foundation, except 
that in the case of a student who is enrolled in a community 
college, be a student pursuing a degree on a less than full- 
time basis, but not less than half-time basis; and’’; and 
(4) by amending subsection (m) to read as follows: 
‘‘(m) PUBLIC INFORMATION.— 
‘‘(1) EVALUATION.—The Director of the National Science 
Foundation, in coordination with the Director of the Office 
of Personnel Management, shall periodically evaluate and make 
public, in a manner that protects the personally identifiable 
information of scholarship recipients, information on the success 
of recruiting individuals for scholarships under this section 
and on hiring and retaining those individuals in the public 
sector cyber workforce, including information on— 
‘‘(A) placement rates; 
‘‘(B) where students are placed, including job titles 
and descriptions; 
‘‘(C) salary ranges for students not released from 
obligations under this section; 
‘‘(D) how long after graduation students are placed; 
‘‘(E) how long students stay in the positions they enter 
upon graduation; 
‘‘(F) how many students are released from obligations; 
and 
‘‘(G) what, if any, remedial training is required. 
‘‘(2) REPORTS.—The Director of the National Science 
Foundation, in coordination with the Office of Personnel 
Management, shall submit, not less frequently than once every 
3 years, to the Committee on Commerce, Science, and Transpor-
tation of the Senate and the Committee on Science, Space, 
and Technology of the House of Representatives a report, 
including the results of the evaluation under paragraph (1) 
and any recent statistics regarding the size, composition, and 
educational requirements of the Federal cyber workforce. 
‘‘(3) RESOURCES.—The Director of the National Science 
Foundation, in coordination with the Director of the Office 
of Personnel Management, shall provide consolidated and user- 
friendly online resources for prospective scholarship recipients, 
including, to the extent practicable— 
‘‘(A) searchable, up-to-date, and accurate information 
about participating institutions of higher education and 
job opportunities related to the field of cybersecurity; and 
‘‘(B) 
a 
modernized 
description 
of 
cybersecurity 
careers.’’. 
(b) SAVINGS PROVISION.—Nothing in this section, or an amend-
ment made by this section, shall affect any agreement, scholarship, 
loan, or repayment, under section 302 of the Cybersecurity Enhance-
ment Act of 2014 (15 U.S.C. 7442), in effect on the day before 
the date of enactment of this subtitle.
H. R. 2810—474 
SEC. 1649C. CYBERSECURITY TEACHING. 
Section 10(i) of the National Science Foundation Authorization 
Act of 2002 (42 U.S.C. 1862n–1(i)) is amended— 
(1) by amending paragraph (5) to read as follows: 
‘‘(5) the term ‘mathematics and science teacher’ means 
a science, technology, engineering, mathematics, or computer 
science, including cybersecurity, teacher at the elementary 
school or secondary school level;’’; and 
(2) by amending paragraph (7) to read as follows: 
‘‘(7) the term ‘science, technology, engineering, or mathe-
matics professional’ means an individual who holds a bacca-
laureate, master’s, or doctoral degree in science, technology, 
engineering, mathematics, or computer science, including cyber-
security, and is working in or had a career in such field or 
a related area; and’’. 
Subtitle D—Nuclear Forces 
SEC. 1651. ANNUAL ASSESSMENT OF CYBER RESILIENCY OF NUCLEAR 
COMMAND AND CONTROL SYSTEM. 
(a) IN GENERAL.—Chapter 24 of title 10, United States Code, 
is amended by adding at the end the following new section: 
‘‘§ 499. Annual assessment of cyber resiliency of nuclear com-
mand and control system 
‘‘(a) IN GENERAL.—Not less frequently than annually, the Com-
mander of the United States Strategic Command and the Com-
mander of the United States Cyber Command (in this section 
referred to collectively as the ‘Commanders’) shall jointly conduct 
an assessment of the cyber resiliency of the nuclear command 
and control system. 
‘‘(b) ELEMENTS.—In conducting the assessment required by sub-
section (a), the Commanders shall— 
‘‘(1) conduct an assessment of the sufficiency and resiliency 
of the nuclear command and control system to operate through 
a cyber attack from the Russian Federation, the People’s 
Republic of China, or any other country or entity the Com-
manders identify as a potential threat; and 
‘‘(2) develop recommendations for mitigating any concerns 
of the Commanders resulting from the assessment. 
‘‘(c) REPORT REQUIRED.—(1) The Commanders shall jointly 
submit to the Chairman of the Joint Chiefs of Staff, for submission 
to the Council on Oversight of the National Leadership Command, 
Control, and Communications System established under section 
171a of this title, a report on the assessment required by subsection 
(a) that includes the following: 
‘‘(A) The recommendations developed under subsection 
(b)(2). 
‘‘(B) A statement of the degree of confidence of each of 
the Commanders in the mission assurance of the nuclear deter-
rent against a top tier cyber threat. 
‘‘(C) A detailed description of the approach used to conduct 
the assessment required by subsection (a) and the technical 
basis of conclusions reached in conducting that assessment. 
‘‘(D) Any other comments of the Commanders.
H. R. 2810—475 
‘‘(2) The Council shall submit to the Secretary of Defense the 
report required by paragraph (1) and any comments of the Council 
on the report. 
‘‘(3) The Secretary of Defense shall submit to the congressional 
defense committees the report required by paragraph (1), any com-
ments of the Council on the report under paragraph (2), and any 
comments of the Secretary on the report. 
‘‘(d) QUARTERLY BRIEFINGS.—Not less than once every quarter, 
the Deputy Secretary of Defense and the Vice Chairman of the 
Joint Chiefs of Staff shall jointly provide to the Committees on 
Armed Services of the House of Representatives and the Senate 
a briefing on any known or suspected critical intelligence parameter 
breaches that were identified during the previous quarter, including 
an assessment of any known or suspected impacts of such breaches 
to the mission effectiveness of military capabilities as of the date 
of the briefing or thereafter. 
‘‘(e) TERMINATION.—The requirements of this section shall 
terminate on December 31, 2027.’’. 
(b) CLERICAL AMENDMENT.—The table of sections for chapter 
24 of such title is amended by inserting after the item relating 
to section 498 the following new item: 
‘‘499. Annual assessment of cyber resiliency of nuclear command and control sys-
tem.’’. 
SEC. 1652. COLLECTION, STORAGE, AND SHARING OF DATA RELATING 
TO NUCLEAR SECURITY ENTERPRISE. 
(a) IN GENERAL.—Chapter 24 of title 10, United States Code, 
as amended by section 1651, is further amended by adding at 
the end the following new section: 
‘‘§ 499a. Collection, storage, and sharing of data relating to 
nuclear security enterprise and nuclear forces 
‘‘(a) IN GENERAL.—The Secretary of Defense, acting through 
the Director of Cost Assessment and Program Evaluation, and 
the Administrator for Nuclear Security, acting through the Director 
for Cost Estimating and Program Evaluation, shall collect and 
store cost, programmatic, and technical data relating to programs 
and projects of the nuclear security enterprise and nuclear forces. 
‘‘(b) SHARING OF DATA.—If the Director of Cost Assessment 
and Program Evaluation or the Director for Cost Estimating and 
Program Evaluation requests data relating to programs or projects 
from any element of the Department of Defense or from any element 
of the nuclear security enterprise of the National Nuclear Security 
Administration, that element shall provide that data in a timely 
manner. 
‘‘(c) STORAGE OF DATA.—(1) Data collected by the Director of 
Cost Assessment and Program Evaluation and the Director for 
Cost Estimating and Program Evaluation under this section shall 
be— 
‘‘(A) stored in the data storage system of the Defense Cost 
and Resource Center, or successor center, or in a data storage 
system of the National Nuclear Security Administration that 
is comparable to the data storage system of the Defense Cost 
and Resource Center; and 
‘‘(B) made accessible to other Federal agencies as such 
Directors consider appropriate.
H. R. 2810—476 
‘‘(2) The Secretary and the Administrator shall ensure that 
the Director of Cost Assessment and Program Evaluation and the 
Director for Cost Estimating and Program Evaluation have suffi-
cient information system support, as determined by such Directors, 
to facilitate the timely hosting, handling, and sharing of data 
relating to programs and projects of the nuclear security enterprise 
under this section at the appropriate level of classification. 
‘‘(3) The Deputy Administrator for Naval Reactors of the 
National Nuclear Security Administration may coordinate with the 
Director of Cost Assessment and Program Evaluation and the 
Director for Cost Estimating and Program Evaluation to ensure 
that, at the discretion of the Deputy Administrator, data relating 
to programs and projects of the Office of Naval Reactors are cor-
rectly represented in the data storage system pursuant to paragraph 
(1)(A). 
‘‘(d) 
CONTRACT
REQUIREMENTS.—The 
Secretary 
and 
the 
Administrator shall ensure that any relevant contract relating to 
a program or project of the nuclear security enterprise and nuclear 
forces that is entered into on or after the date of the enactment 
of this section appropriately includes— 
‘‘(1) requirements and standards for data collection; and 
‘‘(2) requirements for reporting on cost, programmatic, and 
technical data using procedures, standards, and formats 
approved by the Director of Cost Assessment and Program 
Evaluation and the Director for Cost Estimating and Program 
Evaluation. 
‘‘(e) NUCLEAR SECURITY ENTERPRISE DEFINED.—In this section, 
the term ‘nuclear security enterprise’ has the meaning given that 
term in section 4002 of the Atomic Energy Defense Act (50 U.S.C. 
2501).’’. 
(b) CLERICAL AMENDMENT.—The table of sections for chapter 
24 of such title is amended by inserting after the item relating 
to section 499, as added by section 1651, the following new item: 
‘‘499a. Collection, storage, and sharing of data relating to nuclear security enterprise 
and nuclear forces.’’. 
SEC. 1653. NOTIFICATIONS REGARDING DUAL-CAPABLE F–35A AIR-
CRAFT. 
Section 179(f) of title 10, United States Code, is amended— 
(1) by redesignating paragraph (6) as paragraph (7); and 
(2) by inserting after paragraph (5) the following new para-
graph (6): 
‘‘(6) If a House of Congress adopts a bill authorizing or appro-
priating funds for the Department of Defense that, as determined 
by the Council, provides funds in an amount that will result in 
a delay in the nuclear certification or delivery of F–35A dual- 
capable aircraft, the Council shall notify the congressional defense 
committees of the determination.’’. 
SEC. 1654. OVERSIGHT OF DELAYED ACQUISITION PROGRAMS BY 
COUNCIL ON OVERSIGHT OF THE NATIONAL LEADERSHIP 
COMMAND, CONTROL, AND COMMUNICATIONS SYSTEM. 
(a) STATUS UPDATES.— 
(1) IN GENERAL.—Section 171a of title 10, United States 
Code, is amended— 
(A) by redesignating subsection (k) as subsection (l); 
and
H. R. 2810—477 
(B) by inserting after subsection (j) the following new 
subsection (k): 
‘‘(k) STATUS OF ACQUISITION PROGRAMS.—(1) On a quarterly 
basis, each program manager of a covered acquisition program 
shall transmit to the co-chairs of the Council, acting through the 
senior steering group of the Council, a report that identifies— 
‘‘(A) the covered acquisition program; 
‘‘(B) the requirements of the program; 
‘‘(C) the development timeline of the program; and 
‘‘(D) the status of the program, including whether the pro-
gram is delayed and, if so, whether such delay will result 
in a program schedule delay. 
‘‘(2) Not later than seven days after the end of each semiannual 
period, the co-chairs of the Council shall submit to the congressional 
defense committees a report that identifies, with respect to the 
reports transmitted to the Council under paragraph (1) for the 
two quarters in such period— 
‘‘(A) each covered acquisition program that is delayed more 
than 180 days; and 
‘‘(B) any covered acquisition program that should have 
been included in such reports but was excluded, and the reasons 
for such exclusion. 
‘‘(3) In this subsection, the term ‘covered acquisition program’ 
means each acquisition program of the Department of Defense 
that materially contributes to— 
‘‘(A) the nuclear command, control, and communications 
systems of the United States; or 
‘‘(B) the continuity of government systems of the United 
States.’’. 
(2) INSTRUCTIONS.—The Secretary of Defense shall issue 
a Department of Defense Instruction, or revise such an Instruc-
tion, to ensure that program managers carry out subsection 
(k)(1) of section 171a of title 10, United States Code, as added 
by paragraph (1). 
(b) EXECUTION AND PROGRAMMATIC OVERSIGHT.— 
(1) DATABASE.—Not later than one year after the date 
of the enactment of this Act, the Chief Information Officer 
of the Department of Defense, as Executive Secretary of the 
Council on Oversight of the National Leadership Command, 
Control, and Communications System established under section 
171a of title 10, United States Code (or a successor to the 
Chief Information Officer assigned responsibility for policy, 
oversight, guidance, and coordination for nuclear command and 
control systems), shall, in coordination with the Under Sec-
retary of Defense for Acquisition and Sustainment, develop 
a database relating to the execution of all nuclear command, 
control, and communications acquisition programs of the 
Department of Defense with an approved Materiel Development 
Decision. The database shall be updated not less frequently 
than annually and upon completion of a major program element 
of such a program. 
(2) DATABASE ELEMENTS.—The database required by para-
graph (1) shall include, at a minimum, the following elements 
for each program described in that paragraph, consistent with 
Department of Defense Instruction 5000.02: