IIB 
115TH CONGRESS 
1ST SESSION 
H. R. 239 
IN THE SENATE OF THE UNITED STATES 
JANUARY 11, 2017 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To amend the Homeland Security Act of 2002 to provide 
for innovative research and development, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
04:57 Jan 12, 2017
Jkt 069200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H239.RFS
H239
rfrederick on DSKBCBPHB2PROD with BILLS
HR 239 RFS 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Support for Rapid In-
novation Act of 2017’’. 
SEC. 2. CYBERSECURITY RESEARCH AND DEVELOPMENT 
PROJECTS. 
(a) CYBERSECURITY
RESEARCH
AND
DEVELOP-
MENT.— 
(1) IN GENERAL.—Title III of the Homeland 
Security Act of 2002 (6 U.S.C. 181 et seq.) is 
amended by adding at the end the following new sec-
tion: 
‘‘SEC. 321. CYBERSECURITY RESEARCH AND DEVELOP-
MENT. 
‘‘(a) IN GENERAL.—The Under Secretary for Science 
and Technology shall support the research, development, 
testing, evaluation, and transition of cybersecurity tech-
nologies, including fundamental research to improve the 
sharing of information, analytics, and methodologies re-
lated to cybersecurity risks and incidents, consistent with 
current law. 
‘‘(b) ACTIVITIES.—The research and development 
supported under subsection (a) shall serve the components 
of the Department and shall— 
‘‘(1) advance the development and accelerate 
the deployment of more secure information systems; 
VerDate Sep 11 2014 
04:57 Jan 12, 2017
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H239.RFS
H239
rfrederick on DSKBCBPHB2PROD with BILLS
HR 239 RFS 
‘‘(2) improve and create technologies for detect-
ing attacks or intrusions, including real-time contin-
uous diagnostics and real-time analytic technologies; 
‘‘(3) improve and create mitigation and recov-
ery methodologies, including techniques and policies 
for real-time containment of attacks, and develop-
ment of resilient networks and information systems; 
‘‘(4) support, in coordination with non-Federal 
entities, the review of source code that underpins 
critical infrastructure information systems; 
‘‘(5) develop and support infrastructure and 
tools to support cybersecurity research and develop-
ment efforts, including modeling, testbeds, and data 
sets for assessment of new cybersecurity tech-
nologies; 
‘‘(6) assist the development and support of 
technologies to reduce vulnerabilities in industrial 
control systems; and 
‘‘(7) develop and support cyber forensics and 
attack attribution capabilities. 
‘‘(c) COORDINATION.—In carrying out this section, 
the Under Secretary for Science and Technology shall co-
ordinate activities with— 
‘‘(1) the Under Secretary appointed pursuant to 
section 103(a)(1)(H); 
VerDate Sep 11 2014 
04:57 Jan 12, 2017
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H239.RFS
H239
rfrederick on DSKBCBPHB2PROD with BILLS
HR 239 RFS 
‘‘(2) the heads of other relevant Federal depart-
ments and agencies, as appropriate; and 
‘‘(3) industry and academia. 
‘‘(d) TRANSITION TO PRACTICE.—The Under Sec-
retary for Science and Technology shall support projects 
carried out under this title through the full life cycle of 
such projects, including research, development, testing, 
evaluation, pilots, and transitions. The Under Secretary 
shall identify mature technologies that address existing or 
imminent cybersecurity gaps in public or private informa-
tion systems and networks of information systems, iden-
tify and support necessary improvements identified during 
pilot programs and testing and evaluation activities, and 
introduce new cybersecurity technologies throughout the 
homeland security enterprise through partnerships and 
commercialization. The Under Secretary shall target fed-
erally funded cybersecurity research that demonstrates a 
high probability of successful transition to the commercial 
market within two years and that is expected to have a 
notable impact on the public or private information sys-
tems and networks of information systems. 
‘‘(e) DEFINITIONS.—In this section: 
‘‘(1) CYBERSECURITY RISK.—The term ‘cyber-
security risk’ has the meaning given such term in 
section 227. 
VerDate Sep 11 2014 
04:57 Jan 12, 2017
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H239.RFS
H239
rfrederick on DSKBCBPHB2PROD with BILLS