SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Cybersecurity En-
hancement Act of 2012’’. 
TITLE I—RESEARCH AND 
DEVELOPMENT 
SEC. 101. DEFINITIONS. 
In this title: 
(1) NATIONAL
COORDINATION
OFFICE.—The 
term National Coordination Office means the Na-
tional Coordination Office for the Networking and 
Information Technology Research and Development 
program. 
(2) PROGRAM.—The term Program means the 
Networking and Information Technology Research 
and Development program which has been estab-
lished under section 101 of the High-Performance 
Computing Act of 1991 (15 U.S.C. 5511). 
SEC. 102. FINDINGS. 
Section 2 of the Cyber Security Research and Devel-
opment Act (15 U.S.C. 7401) is amended— 
(1) by amending paragraph (1) to read as fol-
lows: 
‘‘(1) Advancements in information and commu-
nications technology have resulted in a globally 
interconnected network of government, commercial, 
scientific, and education infrastructures, including
critical infrastructures for electric power, natural 
gas and petroleum production and distribution, tele-
communications, transportation, water supply, bank-
ing and finance, and emergency and government 
services.’’; 
(2) in paragraph (2), by striking ‘‘Exponential 
increases in interconnectivity have facilitated en-
hanced communications, economic growth,’’ and in-
serting ‘‘These advancements have significantly con-
tributed to the growth of the United States econ-
omy’’; 
(3) by amending paragraph (3) to read as fol-
lows: 
‘‘(3) The Cyberspace Policy Review published 
by the President in May, 2009, concluded that our 
information technology and communications infra-
structure is vulnerable and has ‘suffered intrusions 
that have allowed criminals to steal hundreds of mil-
lions of dollars and nation-states and other entities 
to steal intellectual property and sensitive military 
information’.’’; and 
(4) by amending paragraph (6) to read as fol-
lows: 
‘‘(6) While African-Americans, Hispanics, and 
Native Americans constitute 33 percent of the col-
lege-age population, members of these minorities 
comprise less than 20 percent of bachelor degree re-
cipients in the field of computer sciences.’’. 
SEC. 103. CYBERSECURITY STRATEGIC RESEARCH AND DE-
VELOPMENT PLAN. 
(a) IN GENERAL.—Not later than 12 months after 
the date of enactment of this Act, the agencies identified 
in subsection 101(a)(3)(B)(i) through (x) of the High-Per-
formance 
Computing 
Act 
of 
1991 
(15 
U.S.C. 
5511(a)(3)(B)(i) through (x)) or designated under section 
101(a)(3)(B)(xi) of such Act, working through the Na-
tional Science and Technology Council and with the assist-
ance of the National Coordination Office, shall transmit 
to Congress a strategic plan based on an assessment of 
cybersecurity risk to guide the overall direction of Federal 
cybersecurity and information assurance research and de-
velopment for information technology and networking sys-
tems. Once every 3 years after the initial strategic plan 
is transmitted to Congress under this section, such agen-
cies shall prepare and transmit to Congress an update of 
such plan. 
(b) CONTENTS OF PLAN.—The strategic plan re-
quired under subsection (a) shall— 
(1) specify and prioritize near-term, mid-term 
and long-term research objectives, including objec-
tives associated with the research areas identified in 
section 4(a)(1) of the Cyber Security Research and 
Development Act (15 U.S.C. 7403(a)(1)) and how 
the near-term objectives complement research and 
development areas in which the private sector is ac-
tively engaged; 
(2) describe how the Program will focus on in-
novative, transformational technologies with the po-
tential to enhance the security, reliability, resilience, 
and trustworthiness of the digital infrastructure, and 
to protect consumer privacy; 
(3) describe how the Program will foster the 
rapid transfer of research and development results 
into new cybersecurity technologies and applications 
for the timely benefit of society and the national in-
terest, including through the dissemination of best 
practices and other outreach activities; 
(4) describe how the Program will establish and 
maintain a national research infrastructure for cre-
ating, testing, and evaluating the next generation of 
secure networking and information technology sys-
tems; 
(5) describe how the Program will facilitate ac-
cess by academic researchers to the infrastructure
described in paragraph (4), as well as to relevant 
data, including event data; and 
(6) describe how the Program will engage fe-
males and individuals identified in section 33 or 34 
of the Science and Engineering Equal Opportunities 
Act (42 U.S.C. 1885a or 1885b) to foster a more di-
verse workforce in this area. 
(c) DEVELOPMENT OF ROADMAP.—The agencies de-
scribed in subsection (a) shall develop and annually update 
an implementation roadmap for the strategic plan re-
quired in this section. Such roadmap shall— 
(1) specify the role of each Federal agency in 
carrying out or sponsoring research and development 
to meet the research objectives of the strategic plan, 
including a description of how progress toward the 
research objectives will be evaluated; 
(2) specify the funding allocated to each major 
research objective of the strategic plan and the 
source of funding by agency for the current fiscal 
year; and 
(3) estimate the funding required for each 
major research objective of the strategic plan for the 
following 3 fiscal years.
(d) RECOMMENDATIONS.—In developing and updat-
ing the strategic plan under subsection (a), the agencies 
involved shall solicit recommendations and advice from— 
(1) the advisory committee established under 
section 101(b)(1) of the High-Performance Com-
puting Act of 1991 (15 U.S.C. 5511(b)(1)); and 
(2) a wide range of stakeholders, including in-
dustry, academia, including representatives of mi-
nority serving institutions and community colleges, 
National Laboratories, and other relevant organiza-
tions and institutions. 
(e) APPENDING TO REPORT.—The implementation 
roadmap required under subsection (c), and its annual up-
dates, shall be appended to the report required under sec-
tion 101(a)(2)(D) of the High-Performance Computing 
Act of 1991 (15 U.S.C. 5511(a)(2)(D)). 
SEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-
SECURITY. 
Section 4(a)(1) of the Cyber Security Research and 
Development Act (15 U.S.C. 7403(a)(1)) is amended— 
(1) by inserting ‘‘and usability’’ after ‘‘to the 
structure’’; 
(2) in subparagraph (H), by striking ‘‘and’’ 
after the semicolon;
‘‘(B) $90,000,000 for fiscal year 2014; and 
‘‘(C) $90,000,000 for fiscal year 2015.’’. 
(c) COMPUTER AND NETWORK SECURITY RESEARCH 
CENTERS.—Section 4(b) of such Act (15 U.S.C. 7403(b)) 
is amended— 
(1) in paragraph (4)— 
(A) in subparagraph (C), by striking 
‘‘and’’ after the semicolon; 
(B) in subparagraph (D), by striking the 
period and inserting ‘‘; and’’; and 
(C) by adding at the end the following new 
subparagraph: 
‘‘(E) how the center will partner with gov-
ernment laboratories, for-profit entities, other 
institutions of higher education, or nonprofit re-
search institutions.’’; and 
(2) in paragraph (7) by striking subparagraphs 
(A) through (E) and inserting the following new 
subparagraphs: 
‘‘(A) $4,500,000 for fiscal year 2013; 
‘‘(B) $4,500,000 for fiscal year 2014; and 
‘‘(C) $4,500,000 for fiscal year 2015.’’. 
(d) COMPUTER AND NETWORK SECURITY CAPACITY 
BUILDING GRANTS.—Section 5(a)(6) of such Act (15 
U.S.C. 7404(a)(6)) is amended by striking subparagraphs
(A) through (E) and inserting the following new subpara-
graphs: 
‘‘(A) $19,000,000 for fiscal year 2013; 
‘‘(B) $19,000,000 for fiscal year 2014; and 
‘‘(C) $19,000,000 for fiscal year 2015.’’. 
(e) SCIENTIFIC AND ADVANCED TECHNOLOGY ACT 
GRANTS.—Section 5(b)(2) of such Act (15 U.S.C. 
7404(b)(2)) is amended by striking subparagraphs (A) 
through (E) and inserting the following new subpara-
graphs: 
‘‘(A) $2,500,000 for fiscal year 2013; 
‘‘(B) $2,500,000 for fiscal year 2014; and 
‘‘(C) $2,500,000 for fiscal year 2015.’’. 
(f) GRADUATE TRAINEESHIPS IN COMPUTER AND 
NETWORK SECURITY.—Section 5(c)(7) of such Act (15 
U.S.C. 7404(c)(7)) is amended by striking subparagraphs 
(A) through (E) and inserting the following new subpara-
graphs: 
‘‘(A) $24,000,000 for fiscal year 2013; 
‘‘(B) $24,000,000 for fiscal year 2014; and 
‘‘(C) $24,000,000 for fiscal year 2015.’’. 
(g) CYBER
SECURITY
FACULTY
DEVELOPMENT 
TRAINEESHIP PROGRAM.—Section 5(e) of such Act (15 
U.S.C. 7404(e)) is repealed.
SEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE 
PROGRAM. 
(a) IN GENERAL.—The Director of the National 
Science Foundation shall continue a Scholarship for Serv-
ice program under section 5(a) of the Cyber Security Re-
search and Development Act (15 U.S.C. 7404(a)) to re-
cruit and train the next generation of Federal cybersecu-
rity professionals and to increase the capacity of the high-
er education system to produce an information technology 
workforce with the skills necessary to enhance the security 
of the Nation’s communications and information infra-
structure. 
(b) CHARACTERISTICS OF PROGRAM.—The program 
under this section shall— 
(1) provide, through qualified institutions of 
higher education, scholarships that provide tuition, 
fees, and a competitive stipend for up to 2 years to 
students pursing a bachelor’s or master’s degree and 
up to 3 years to students pursuing a doctoral degree 
in a cybersecurity field; 
(2) provide the scholarship recipients with sum-
mer internship opportunities or other meaningful 
temporary appointments in the Federal information 
technology workforce; and 
(3) increase the capacity of institutions of high-
er education throughout all regions of the United
States to produce highly qualified cybersecurity pro-
fessionals, through the award of competitive, merit- 
reviewed grants that support such activities as— 
(A) faculty professional development, in-
cluding technical, hands-on experiences in the 
private sector or government, workshops, semi-
nars, conferences, and other professional devel-
opment opportunities that will result in im-
proved instructional capabilities; 
(B) institutional partnerships, including 
minority serving institutions and community 
colleges; and 
(C) development of cybersecurity-related 
courses and curricula. 
(c) SCHOLARSHIP REQUIREMENTS.— 
(1) ELIGIBILITY.—Scholarships under this sec-
tion shall be available only to students who— 
(A) are citizens or permanent residents of 
the United States; 
(B) are full-time students in an eligible de-
gree program, as determined by the Director, 
that is focused on computer security or infor-
mation assurance at an awardee institution; 
and
(C) accept the terms of a scholarship pur-
suant to this section. 
(2) SELECTION.—Individuals shall be selected 
to receive scholarships primarily on the basis of aca-
demic merit, with consideration given to financial 
need, to the goal of promoting the participation of 
individuals identified in section 33 or 34 of the 
Science and Engineering Equal Opportunities Act 
(42 U.S.C. 1885a or 1885b), and to veterans. For 
purposes of this paragraph, the term ‘‘veteran’’ 
means a person who— 
(A) served on active duty (other than ac-
tive duty for training) in the Armed Forces of 
the United States for a period of more than 
180 consecutive days, and who was discharged 
or released therefrom under conditions other 
than dishonorable; or 
(B) served on active duty (other than ac-
tive duty for training) in the Armed Forces of 
the United States and was discharged or re-
leased from such service for a service-connected 
disability before serving 180 consecutive days. 
For purposes of subparagraph (B), the term ‘‘serv-
ice-connected’’ has the meaning given such term 
under section 101 of title 38, United States Code.