H. R. 6395—1418 
(A) a copy of the report, without change, in both classi-
fied and unclassified form; and 
(B) such comments as the Director, in coordination 
with the Secretary of the Treasury and the heads of other 
relevant departments and agencies of the Federal Govern-
ment, may have with respect to the report. 
(2) APPROPRIATE
CONGRESSIONAL
COMMITTEES.—In this 
subsection, the term ‘‘appropriate congressional committees’’ 
means— 
(A) the Committee on Armed Services, the Select Com-
mittee on Intelligence, the Committee on Banking, 
Housing, and Urban Affairs, the Committee on Foreign 
Relations, and the Committee on Appropriations of the 
Senate; and 
(B) the Committee on Armed Services, the Permanent 
Select Committee on Intelligence, the Committee on Finan-
cial Services, the Committee on Foreign Affairs, and the 
Committee on Appropriations of the House of Representa-
tives. 
TITLE XCIV—SCIENCE, SPACE, AND 
TECHNOLOGY MATTERS 
Subtitle A—Cybersecurity Matters 
Sec. 9401. Improving national initiative for cybersecurity education. 
Sec. 9402. Development of standards and guidelines for improving cybersecurity 
workforce of Federal agencies. 
Sec. 9403. Modifications to Federal cyber scholarship-for-service program. 
Sec. 9404. Additional modifications to Federal cyber scholarship-for-service pro-
gram. 
Sec. 9405. Cybersecurity in programs of the National Science Foundation. 
Sec. 9406. Cybersecurity in STEM programs of the National Aeronautics and Space 
Administration. 
Sec. 9407. National cybersecurity challenges. 
Subtitle B—Other Matters 
Sec. 9411. Established Program to Stimulate Competitive Research. 
Sec. 9412. Industries of the future. 
Sec. 9413. National Institute of Standards and Technology Manufacturing Exten-
sion Partnership program supply chain database. 
Sec. 9414. Study on Chinese policies and influence in the development of inter-
national standards for emerging technologies. 
Sec. 9415. Coordination with Hollings Manufacturing Extension Partnership Cen-
ters. 
Subtitle A—Cybersecurity Matters 
SEC. 9401. IMPROVING NATIONAL INITIATIVE FOR CYBERSECURITY 
EDUCATION. 
(a) PROGRAM IMPROVEMENTS GENERALLY.—Subsection (a) of 
section 401 of the Cybersecurity Enhancement Act of 2014 (15 
U.S.C. 7451) is amended— 
(1) in paragraph (5), by striking ‘‘; and’’ and inserting 
a semicolon; 
(2) by redesignating paragraph (6) as paragraph (10); and 
(3) by inserting after paragraph (5) the following: 
‘‘(6) supporting efforts to identify cybersecurity workforce 
skill gaps in public and private sectors;
H. R. 6395—1419 
‘‘(7) facilitating Federal programs to advance cybersecurity 
education, training, and workforce development; 
‘‘(8) in coordination with the Department of Defense, the 
Department of Homeland Security, and other appropriate agen-
cies, considering any specific needs of the cybersecurity 
workforce of critical infrastructure, including cyber physical 
systems and control systems; 
‘‘(9) advising the Director of the Office of Management 
and Budget, as needed, in developing metrics to measure the 
effectiveness and effect of programs and initiatives to advance 
the cybersecurity workforce; and’’. 
(b) STRATEGIC
PLAN.—Subsection (c) of such section is 
amended— 
(1) by striking ‘‘The Director’’ and inserting the following: 
‘‘(1) IN GENERAL.—The Director’’; and 
(2) by adding at the end the following: 
‘‘(2) REQUIREMENT.—The strategic plan developed and 
implemented under paragraph (1) shall include an indication 
of how the Director will carry out this section.’’. 
(c) CYBERSECURITY CAREER PATHWAYS.— 
(1) IDENTIFICATION OF MULTIPLE CYBERSECURITY CAREER 
PATHWAYS.—In carrying out subsection (a) of such section and 
not later than 540 days after the date of the enactment of 
this Act, the Director of the National Institute of Standards 
and Technology shall, in coordination with the Secretary of 
Defense, the Secretary of Homeland Security, the Director of 
the Office of Personnel Management, and the heads of other 
appropriate agencies, use a consultative process with other 
Federal agencies, academia, and industry to identify multiple 
career pathways for cybersecurity work roles that can be used 
in the private and public sectors. 
(2) REQUIREMENTS.—The Director shall ensure that the 
multiple cybersecurity career pathways identified under para-
graph (1) indicate the knowledge, skills, and abilities, including 
relevant education, training, internships, apprenticeships, cer-
tifications, and other experiences, that— 
(A) align with employers’ cybersecurity skill needs, 
including proficiency level requirements, for its workforce; 
and 
(B) prepare an individual to be successful in entering 
or advancing in a cybersecurity career. 
(3) EXCHANGE
PROGRAM.—Consistent with requirements 
under chapter 37 of title 5, United States Code, the Director 
of the National Institute of Standards and Technology, in 
coordination with the Director of the Office of Personnel 
Management, may establish a voluntary program for the 
exchange of employees engaged in one of the cybersecurity 
work roles identified in the National Initiative for Cybersecurity 
Education (NICE) Cybersecurity Workforce Framework (NIST 
Special Publication 800–181), or successor framework, between 
the National Institute of Standards and Technology and private 
sector 
institutions, 
including 
nonpublic 
or 
commercial 
businesses, research institutions, or institutions of higher edu-
cation, as the Director of the National Institute of Standards 
and Technology considers feasible. 
(d) PROFICIENCY TO PERFORM CYBERSECURITY TASKS.—Not later 
than 540 days after the date of the enactment of this Act, the
H. R. 6395—1420 
Director of the National Institute of Standards and Technology 
shall, in coordination with the Secretary of Defense, the Secretary 
of Homeland Security, and the heads of other appropriate agencies— 
(1) in carrying out subsection (a) of such section, assess 
the scope and sufficiency of efforts to measure an individual’s 
capability to perform specific tasks found in the National Initia-
tive 
for 
Cybersecurity 
Education 
(NICE) 
Cybersecurity 
Workforce Framework (NIST Special Publication 800–181) at 
all proficiency levels; and 
(2) submit to Congress a report— 
(A) on the findings of the Director with respect to 
the assessment carried out under paragraph (1); and 
(B) with recommendations for effective methods for 
measuring the cybersecurity proficiency of learners. 
(e) CYBERSECURITY METRICS.—Such section is further amended 
by adding at the end the following: 
‘‘(e) CYBERSECURITY METRICS.—In carrying out subsection (a), 
the Director of the Office of Management and Budget may seek 
input from the Director of the National Institute of Standards 
and Technology, in coordination with the Department of Homeland 
Security, the Department of Defense, the Office of Personnel 
Management, and such agencies as the Director of the National 
Institute of Standards and Technology considers relevant, to develop 
quantifiable metrics for evaluating Federally funded cybersecurity 
workforce programs and initiatives based on the outcomes of such 
programs and initiatives.’’. 
(f) REGIONAL ALLIANCES
AND MULTISTAKEHOLDER PARTNER-
SHIPS.—Such section is further amended by adding at the end 
the following: 
‘‘(f) REGIONAL ALLIANCES AND MULTISTAKEHOLDER PARTNER-
SHIPS.— 
‘‘(1) IN
GENERAL.—Pursuant to section 2(b)(4) of the 
National Institute of Standards and Technology Act (15 U.S.C. 
272(b)(4)), the Director shall establish cooperative agreements 
between the National Initiative for Cybersecurity Education 
(NICE) of the Institute and regional alliances or partnerships 
for cybersecurity education and workforce. 
‘‘(2) AGREEMENTS.—The cooperative agreements established 
under paragraph (1) shall advance the goals of the National 
Initiative for Cybersecurity Education Cybersecurity Workforce 
Framework (NIST Special Publication 800–181), or successor 
framework, by facilitating local and regional partnerships to— 
‘‘(A) identify the workforce needs of the local economy 
and classify such workforce in accordance with such frame-
work; 
‘‘(B) identify the education, training, apprenticeship, 
and other opportunities available in the local economy; 
and 
‘‘(C) support opportunities to meet the needs of the 
local economy. 
‘‘(3) FINANCIAL ASSISTANCE.— 
‘‘(A) FINANCIAL ASSISTANCE AUTHORIZED.—The Director 
may award financial assistance to a regional alliance or 
partnership with whom the Director enters into a coopera-
tive agreement under paragraph (1) in order to assist the 
regional alliance or partnership in carrying out the terms 
of the cooperative agreement.
H. R. 6395—1421 
‘‘(B) AMOUNT OF ASSISTANCE.—The aggregate amount 
of financial assistance awarded under subparagraph (A) 
per cooperative agreement shall not exceed $200,000. 
‘‘(C) MATCHING REQUIREMENT.—The Director may not 
award financial assistance to a regional alliance or partner-
ship under subparagraph (A) unless the regional alliance 
or partnership agrees that, with respect to the costs to 
be incurred by the regional alliance or partnership in car-
rying out the cooperative agreement for which the assist-
ance was awarded, the regional alliance or partnership 
will make available (directly or through donations from 
public or private entities) non-Federal contributions, 
including in-kind contributions, in an amount equal to 
50 percent of Federal funds provided under the award. 
‘‘(4) APPLICATION.— 
‘‘(A) IN GENERAL.—A regional alliance or partnership 
seeking to enter into a cooperative agreement under para-
graph (1) and receive financial assistance under paragraph 
(3) shall submit to the Director an application therefore 
at such time, in such manner, and containing such informa-
tion as the Director may require. 
‘‘(B) 
REQUIREMENTS.—Each 
application 
submitted 
under subparagraph (A) shall include the following: 
‘‘(i)(I) A plan to establish (or identification of, if 
it already exists) a multistakeholder workforce partner-
ship that includes— 
‘‘(aa) at least one institution of higher edu-
cation or nonprofit training organization; and 
‘‘(bb) at least one local employer or owner 
or operator of critical infrastructure. 
‘‘(II) Participation from academic institutions 
in the Federal Cyber Scholarships for Service Pro-
gram, the National Centers of Academic Excellence 
in Cybersecurity Program, or advanced techno-
logical education programs, as well as elementary 
and secondary schools, training and certification 
providers, State and local governments, economic 
development organizations, or other community 
organizations is encouraged. 
‘‘(ii) A description of how the workforce partnership 
would identify the workforce needs of the local 
economy. 
‘‘(iii) A description of how the multistakeholder 
workforce partnership would leverage the programs 
and objectives of the National Initiative for Cybersecu-
rity Education, such as the Cybersecurity Workforce 
Framework and the strategic plan of such initiative. 
‘‘(iv) A description of how employers in the commu-
nity 
will 
be 
recruited 
to 
support 
internships, 
externships, apprenticeships, or cooperative education 
programs in conjunction with providers of education 
and training. Inclusion of programs that seek to include 
veterans, Indian Tribes, and underrepresented groups, 
including women, minorities, persons from rural and 
underserved areas, and persons with disabilities is 
encouraged.