‘‘SEC. 316. CYBERSECURITY RESEARCH AND DEVELOPMENT. 
‘‘(a) IN GENERAL.—The Under Secretary for Science 
and Technology shall support research and development, in-
cluding fundamental, long-term research, in cybersecurity 
to improve the ability of the United States to prevent, pro-
tect against, detect, respond to, and recover from cyber at-
tacks, with emphasis on research and development relevant 
to large-scale, high-impact attacks. 
‘‘(b) ACTIVITIES.—The research and development sup-
ported under subsection (a) shall include work to— 
‘‘(1) advance the development and accelerate the 
deployment of more secure versions of critical infor-
mation systems, including— 
‘‘(A) fundamental Internet protocols and 
architectures, including for the domain name 
system and routing protocols; and 
‘‘(B) control systems used in critical infra-
structure sectors; 
‘‘(2) improve and create technologies for detect-
ing attacks or intrusions, including monitoring tech-
nologies; 
‘‘(3) improve and create mitigation and recovery 
methodologies, including techniques for containment 
of attacks and development of resilient networks and 
systems that degrade gracefully; and 
VerDate Aug 31 2005 
23:43 Dec 14, 2006
Jkt 059200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6203
E:\BILLS\H4941.RH
H4941
jcorcoran on PRODPC62 with BILLS
‘‘(4) develop and support infrastructure and 
tools to support cybersecurity research and develop-
ment efforts, including modeling, testbeds, and data 
sets for assessment of new cybersecurity technologies. 
‘‘(c) COORDINATION.—In carrying out this section, the 
Under Secretary for Science and Technology shall coordi-
nate activities with— 
‘‘(1) the Assistant Secretary for Cybersecurity 
and Telecommunications; and 
‘‘(2) other Federal agencies, including the Na-
tional Science Foundation, the Defense Advanced Re-
search Projects Agency, the Information Assurance 
Directorate of the National Security Agency, and the 
National Institute of Standards and Technology, to 
identify unmet needs and cooperatively support ac-
tivities, as appropriate. 
‘‘(d) NATURE OF RESEARCH.—Activities under this 
section shall be carried out in accordance with section 
306(a) of this Act. 
‘‘(e) AUTHORIZATION OF APPROPRIATIONS.—There are 
authorized to be appropriated to carry out this section such 
sums as may be necessary for fiscal year 2007.’’. 
(b) TABLE OF CONTENTS AMENDMENT.—The table of 
contents of the Homeland Security Act of 2002 is amended 
VerDate Aug 31 2005 
23:43 Dec 14, 2006
Jkt 059200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6203
E:\BILLS\H4941.RH
H4941
jcorcoran on PRODPC62 with BILLS
by adding after the item relating to section 315 the fol-
lowing new item: 
‘‘Sec. 316. Cybersecurity research and development.’’. 
SEC. 7. STANDARDS FOR CRITICAL INFRASTRUCTURE IN-
FORMATION SYSTEMS. 
(a) AMENDMENT.—Title III of the Homeland Security 
Act of 2002 (6 U.S.C. 181 et. seq.) is amended by adding 
at the end the following new section: 
‘‘SEC. 317. STANDARDS FOR CRITICAL INFRASTRUCTURE 
INFORMATION SYSTEMS. 
‘‘(a) STANDARDS PROGRAM.—The Under Secretary for 
Science and Technology shall establish a program to sup-
port the development and promulgation of national vol-
untary consensus standards for requirements, performance 
testing, and user training with respect to critical infra-
structure information systems. 
‘‘(b) PURPOSE.—The standards developed under sub-
section (a) shall be designed to assist State and local juris-
dictions, including those in urban and other areas at con-
sistently high levels of risk from terrorist attack, and emer-
gency response providers to acquire and implement critical 
infrastructure information systems and to store and access 
information regarding critical infrastructure to be used in 
responding to acts of terrorism or other emergencies. 
‘‘(c) REQUIREMENTS.—The standards developed under 
subsection (a) shall be designed to facilitate— 
VerDate Aug 31 2005 
23:43 Dec 14, 2006
Jkt 059200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6203
E:\BILLS\H4941.RH
H4941
jcorcoran on PRODPC62 with BILLS
‘‘(1) the interoperability of systems to enable 
sharing of information in a variety of formats and 
across stakeholders at the Federal, State, and local 
levels; 
‘‘(2) the ease of deployment of the systems to the 
field; 
‘‘(3) the ability to retrieve situational awareness 
information in real-time; 
‘‘(4) the integrity, security, and accessibility of 
stored information; 
‘‘(5) the application of human factors science in 
the development of the system; 
‘‘(6) the availability and content of training pro-
grams for potential users; and 
‘‘(7) meeting any other requirements determined 
by the Under Secretary to be appropriate. 
‘‘(d) REPORTS.—The Under Secretary for Science and 
Technology shall submit to Congress— 
‘‘(1) 6 months after the date of enactment of this 
section, a report describing the plan for carrying out 
the program under this section, which shall include a 
schedule for the development of national voluntary 
consensus standards for critical infrastructure infor-
mation systems; and 
VerDate Aug 31 2005 
23:43 Dec 14, 2006
Jkt 059200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6203
E:\BILLS\H4941.RH
H4941
jcorcoran on PRODPC62 with BILLS
‘‘(2) 12 months after the date of enactment of 
this section, a report which shall include a descrip-
tion of— 
‘‘(A) the steps taken under this program 
and the funding dedicated to this program; and 
‘‘(B) the steps that have been or will be 
taken to promote the adoption of the standards 
by appropriate standard-setting organizations. 
‘‘(e) DEFINITIONS.—In this section— 
‘‘(1) the term ‘critical infrastructure information 
systems’ means software programs that store, manage, 
and display information about critical infrastructure 
to support situational awareness and real-time deci-
sionmaking of law enforcement, fire services, emer-
gency medical services, emergency management agen-
cies, other emergency response providers, and critical 
infrastructure facility stakeholders. Critical infra-
structure information may include maps and other 
geospatial information, emergency plans, interior and 
exterior imagery, entry and exit points, and any 
other information about infrastructure or facilities 
that may be beneficial to users of critical infrastruc-
ture information systems; and 
‘‘(2) the term ‘critical infrastructure’ has the 
meaning given that term in section 1016(e) of the 
VerDate Aug 31 2005 
23:43 Dec 14, 2006
Jkt 059200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6203
E:\BILLS\H4941.RH
H4941
jcorcoran on PRODPC62 with BILLS