161
Board, established by section 21, regarding stand-
ards and guidelines developed under subsection (a)
and submit such recommendations to the Secretary
of Commerce with such standards submitted to the
Secretary; and
‘‘(10) prepare an annual public report on activi-
ties undertaken in the previous year, and planned
for the coming year, to carry out responsibilities
under this section.
‘‘(e) DEFINITIONS.—As used in this section—
‘‘(1) the term ‘agency’ has the same meaning as
provided in section 3502(1) of title 44, United
States Code;
‘‘(2) the term ‘information security’ has the
same meaning as provided in section 3542(b)(1) of
such title;
‘‘(3) the term ‘information system’ has the
same meaning as provided in section 3502(8) of
such title;
‘‘(4) the term ‘information technology’ has the
same meaning as provided in section 11101 of title
40, United States Code; and
‘‘(5) the term ‘national security system’ has the
same meaning as provided in section 3542(b)(2) of
title 44, United States Code.
162
‘‘(f) AUTHORIZATION OF APPROPRIATIONS.—There
are authorized to be appropriated to the Secretary of Com-
merce $20,000,000 for each of fiscal years 2003, 2004,
2005, 2006, and 2007 to enable the National Institute of
Standards and Technology to carry out the provisions of
this section.’’.
SEC. 304. INFORMATION SECURITY AND PRIVACY ADVI-
SORY BOARD.
Section 21 of the National Institute of Standards and
Technology Act (15 U.S.C. 278g–4), is amended—
(1) in subsection (a), by striking ‘‘Computer
System Security and Privacy Advisory Board’’ and
inserting ‘‘Information Security and Privacy Advi-
sory Board’’;
(2) in subsection (a)(1), by striking ‘‘computer
or telecommunications’’ and inserting ‘‘information
technology’’;
(3) in subsection (a)(2)—
(A) by striking ‘‘computer or telecommuni-
cations technology’’ and inserting ‘‘information
technology’’; and
(B) by striking ‘‘computer or telecommuni-
cations equipment’’ and inserting ‘‘information
technology’’;
(4) in subsection (a)(3)—
163
(A) by striking ‘‘computer systems’’ and
inserting ‘‘information system’’; and
(B) by striking ‘‘computer systems secu-
rity’’ and inserting ‘‘information security’’;
(5) in subsection (b)(1) by striking ‘‘computer
systems security’’ and inserting ‘‘information secu-
rity’’;
(6) in subsection (b) by striking paragraph (2)
and inserting the following:
‘‘(2) to advise the Institute, the Secretary of
Commerce, and the Director of the Office of Man-
agement and Budget on information security and
privacy issues pertaining to Federal Government in-
formation systems, including through review of pro-
posed standards and guidelines developed under sec-
tion 20; and’’;
(7) in subsection (b)(3) by inserting ‘‘annually’’
after ‘‘report’’;
(8) by inserting after subsection (e) the fol-
lowing new subsection:
‘‘(f) The Board shall hold meetings at such locations
and at such time and place as determined by a majority
of the Board.’’;
(9) by redesignating subsections (f) and (g) as
subsections (g) and (h), respectively; and
164
(10) by striking subsection (h), as redesignated
by paragraph (9), and inserting the following:
‘‘(h) As used in this section, the terms ‘information
system’ and ‘information technology’ have the meanings
given in section 20.’’.
SEC. 305. TECHNICAL AND CONFORMING AMENDMENTS.
(a) COMPUTER SECURITY ACT.—Section 11332 of
title 40, United States Code, and the item relating to that
section in the table of sections for chapter 113 of such
title, are repealed.
(b) FLOYD D. SPENCE NATIONAL DEFENSE AU-
THORIZATION ACT FOR FISCAL YEAR 2001.—The Floyd
D. Spence National Defense Authorization Act for Fiscal
Year 2001 (Public Law 106–398) is amended by striking
section 1062 (44 U.S.C. 3531 note).
(c) PAPERWORK
REDUCTION
ACT.—(1) Section
3504(g) of title 44, United States Code, is amended—
(A) by adding ‘‘and’’ at the end of paragraph
(1);
(B) in paragraph (2)—
(i) by striking ‘‘sections 11331 and
11332(b) and (c) of title 40’’ and inserting
‘‘section 11331 of title 40 and subchapter II of
this chapter’’; and