113TH CONGRESS 
2D SESSION 
H. R. 2952 
AN ACT 
To amend the Homeland Security Act of 2002 to make 
certain improvements in the laws relating to the advance-
ment of security technologies for critical infrastructure 
protection, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled,
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Critical Infrastructure 
Research and Development Advancement Act of 2014’’ or 
the ‘‘CIRDA Act of 2014’’. 
SEC. 2. DEFINITIONS. 
Section 2 of the Homeland Security Act of 2002 (6 
U.S.C. 101) is amended by redesignating paragraphs (15) 
through (18) as paragraphs (16) through (19), respec-
tively, and by inserting after paragraph (14) the following: 
‘‘(15) The term ‘Sector Coordinating Council’ 
means a private sector coordinating council that is— 
‘‘(A) recognized by the Secretary as such 
a Council for purposes of this Act; and 
‘‘(B) comprised of representatives of own-
ers and operators of critical infrastructure with-
in a particular sector of critical infrastruc-
ture.’’. 
SEC. 3. CRITICAL INFRASTRUCTURE PROTECTION RE-
SEARCH AND DEVELOPMENT. 
(a) STRATEGIC PLAN; PUBLIC-PRIVATE CONSOR-
TIUMS.— 
(1) IN GENERAL.—Title III of the Homeland 
Security Act of 2002 (6 U.S.C. 181 et seq.) is 
amended by adding at the end the following:
‘‘SEC. 318. RESEARCH AND DEVELOPMENT STRATEGY FOR 
CRITICAL INFRASTRUCTURE PROTECTION. 
‘‘(a) IN GENERAL.—Not later than 180 days after 
the date of enactment of the Critical Infrastructure Re-
search and Development Advancement Act of 2013, the 
Secretary, acting through the Under Secretary for Science 
and Technology, shall transmit to Congress a strategic 
plan to guide the overall direction of Federal physical se-
curity and cybersecurity technology research and develop-
ment efforts for protecting critical infrastructure, includ-
ing against all threats. Once every 2 years after the initial 
strategic plan is transmitted to Congress under this sec-
tion, the Secretary shall transmit to Congress an update 
of the plan. 
‘‘(b) CONTENTS OF PLAN.—The strategic plan shall 
include the following: 
‘‘(1) An identification of critical infrastructure 
security risks and any associated security technology 
gaps, that are developed following— 
‘‘(A) consultation with stakeholders, in-
cluding the Sector Coordinating Councils; and 
‘‘(B) performance by the Department of a 
risk/gap analysis that considers information re-
ceived in such consultations. 
‘‘(2) A set of critical infrastructure security 
technology needs that—
‘‘(A) is prioritized based on risk and gaps 
identified under paragraph (1); 
‘‘(B) emphasizes research and development 
of those technologies that need to be accelerated 
due to rapidly evolving threats or rapidly ad-
vancing infrastructure technology; and 
‘‘(C) includes research, development, and 
acquisition roadmaps with clearly defined objec-
tives, goals, and measures. 
‘‘(3) An identification of laboratories, facilities, 
modeling, and simulation capabilities that will be re-
quired to support the research, development, dem-
onstration, testing, evaluation, and acquisition of the 
security technologies described in paragraph (2). 
‘‘(4) An identification of current and planned 
programmatic initiatives for fostering the rapid ad-
vancement and deployment of security technologies 
for critical infrastructure protection. The initiatives 
shall consider opportunities for public-private part-
nerships, intragovernment collaboration, university 
centers of excellence, and national laboratory tech-
nology transfer. 
‘‘(5) A description of progress made with re-
spect to each critical infrastructure security risk, as-
sociated security technology gap, and critical infra-
structure technology need identified in the preceding 
strategic plan transmitted under this section. 
‘‘(c) COORDINATION.—In carrying out this section, 
the Under Secretary for Science and Technology shall co-
ordinate with the Under Secretary for the National Pro-
tection and Programs Directorate. 
‘‘(d) CONSULTATION.—In carrying out this section, 
the Under Secretary for Science and Technology shall con-
sult with— 
‘‘(1) the critical infrastructure Sector Coordi-
nating Councils; 
‘‘(2) to the extent practicable, subject matter 
experts on critical infrastructure protection from 
universities, colleges, including historically black col-
leges and universities, Hispanic- serving institutions, 
and tribal colleges and universities, national labora-
tories, and private industry; 
‘‘(3) the heads of other relevant Federal depart-
ments and agencies that conduct research and devel-
opment for critical infrastructure protection; and 
‘‘(4) State, local, and tribal governments as ap-
propriate.
‘‘SEC. 319. REPORT ON PUBLIC-PRIVATE RESEARCH AND 
DEVELOPMENT CONSORTIUMS. 
‘‘(a) IN GENERAL.—Not later than 180 days after 
the enactment of the Critical Infrastructure Research and 
Development Advancement Act of 2014, the Secretary, 
acting through the Under Secretary for Science and Tech-
nology, shall transmit to Congress a report on the Depart-
ment’s utilization of public-private research and develop-
ment consortiums for accelerating technology development 
for critical infrastructure protection. Once every 2 years 
after the initial report is transmitted to Congress under 
this section, the Secretary shall transmit to Congress an 
update of the report. The report shall focus on those as-
pects of critical infrastructure protection that are pre-
dominately operated by the private sector and that would 
most benefit from rapid security technology advancement. 
‘‘(b) CONTENTS OF REPORT.—The report shall in-
clude— 
‘‘(1) a summary of the progress and accom-
plishments of on-going consortiums for critical infra-
structure security technologies; 
‘‘(2) in consultation with the Sector Coordi-
nating Councils and, to the extent practicable, in 
consultation with subject-matter experts on critical 
infrastructure protection from universities, colleges, 
including historically black colleges and universities,
Hispanic-serving institutions, and tribal colleges and 
universities, national laboratories, and private indus-
try, a prioritized list of technology development focus 
areas that would most benefit from a public-private 
research and development consortium; and 
‘‘(3) based on the prioritized list developed 
under paragraph (2), a proposal for implementing 
an expanded research and development consortium 
program, including an assessment of feasibility and 
an estimate of cost, schedule, and milestones.’’. 
(2) LIMITATION
ON
PROGRESS
REPORT
RE-
QUIREMENT.—Subsection (b)(5) of section 318 of 
the Homeland Security Act of 2002, as amended by 
paragraph (1) of this subsection, shall not apply 
with respect to the first strategic plan transmitted 
under that section. 
(b) CLERICAL AMENDMENT.—The table of contents 
in section 1(b) of such Act is amended by adding at the 
end of the items relating to such title the following: 
‘‘Sec. 318. Research and development strategy for critical infrastructure protec-
tion. 
‘‘Sec. 319. Report on public-private research and development consortiums.’’. 
(c) CRITICAL INFRASTRUCTURE PROTECTION TECH-
NOLOGY CLEARINGHOUSE.—Section 313 of the Homeland 
Security Act of 2002 (6 U.S.C. 193) is amended by redes-
ignating subsection (c) as subsection (d), and by inserting 
after subsection (b) the following:
‘‘(c) 
CRITICAL
INFRASTRUCTURE
PROTECTION 
TECHNOLOGY CLEARINGHOUSE.— 
‘‘(1) DESIGNATION.—Under the program re-
quired by this section, the Secretary, acting through 
the Under Secretary for Science and Technology, 
and in coordination with the Under Secretary for the 
National Protection and Programs Directorate, shall 
designate a technology clearinghouse for rapidly 
sharing proven technology solutions for protecting 
critical infrastructure. 
‘‘(2) SHARING OF TECHNOLOGY SOLUTIONS.— 
Technology solutions shared through the clearing-
house shall draw from Government-furnished, com-
mercially furnished, and publically available trusted 
sources. 
‘‘(3) TECHNOLOGY METRICS.—All technologies 
shared through the clearinghouse shall include a set 
of performance and readiness metrics to assist end- 
users in deploying effective and timely solutions rel-
evant for their critical infrastructures. 
‘‘(4) REVIEW BY PRIVACY OFFICER.—The Pri-
vacy Officer of the Department appointed under sec-
tion 222 shall annually review the clearinghouse 
process to evaluate its consistency with fair informa-
tion practice principles issued by the Privacy Offi-
cer.’’. 
(d) EVALUATION OF TECHNOLOGY CLEARINGHOUSE 
BY GOVERNMENT ACCOUNTABILITY OFFICE.—Not later 
than 2 years after the date of enactment of this Act, the 
Comptroller General of the United States shall conduct 
an independent evaluation of, and submit to the Com-
mittee on Homeland Security of the House of Representa-
tives and the Committee on Homeland Security and Gov-
ernmental Affairs of the Senate a report on, the effective-
ness of the clearinghouses established and designated, re-
spectively, under section 313 of the Homeland Security 
Act of 2002, as amended by this section. 
SEC. 4. NO ADDITIONAL AUTHORIZATION OF APPROPRIA-
TIONS. 
No additional funds are authorized to be appro-
priated to carry out this Act and the amendments made 
by this Act, and this Act and such amendments shall be 
carried out using amounts otherwise available for such 
purpose. 
Passed the House of Representatives July 28, 2014. 
Attest: 
Clerk.
113TH CONGRESS 
2D SESSION 
H. R. 2952 
AN ACT 
To amend the Homeland Security Act of 2002 to 
make certain improvements in the laws relating 
to the advancement of security technologies for 
critical infrastructure protection, and for other 
purposes.