Cybersecurity Enhancement Act of 2012

Bill: 112-hr-2096
Sponsor: Rep. McCaul, Michael T. [R-TX-10]
Introduced: 2011-06-02 in the House
Policy area: Science, Technology, Communications
Subjects: Advanced technology and technological innovations
Advisory bodies
Computer security and identity theft
Computers and information technology
Crime prevention
Crimes against children
Education programs funding
Employment and training programs
Fraud offenses and financial crimes
Government employee pay, benefits, personnel management
Higher education
Organized crime
Research administration and funding
Research and development
Right of privacy
Science and engineering education
Student aid and college costs
Veterans' education, employment, rehabilitation

Summary:
action_date: 2011-06-02
text: 
Cybersecurity Enhancement Act of 2011 - Directs specified federal agencies participating in the National High-Performance Computing Program to: (1) transmit to Congress a cybersecurity strategic research and development plan and triennial updates, and (2) develop and annually update an implementation roadmap for such plan. 
 
 Expands permitted National Science Foundation (NSF) grants for basic research on innovative approaches to the structure of computer and network hardware and software that are aimed at enhancing computer security to include research into identity management, crimes against children, and organized crime.
 
Requires applications for the establishment of Computer and Network Security Research Centers to include a description of how such Centers will partner with government laboratories, for-profit entities, other institutions of higher education, or nonprofit research institutions. 
 
Repeals the Cyber Security Faculty Development Traineeship Program. 
 
 Requires the NSF Director to continue carrying out a Scholarship for Service program under the Cyber Security Research and Development Act. 
 
 Directs the President to transmit a report to Congress addressing the cybersecurity workforce needs of the federal government. 
 
 Requires the Office of Science and Technology Policy (OSTP) Director to convene a cybersecurity university-industry task force to explore mechanisms for carrying out collaborative R&D activities. 
 
 Revises provisions concerning the development and dissemination by the National Institute of Standards and Technology (NIST) of security risk checklists associated with computer systems that are, or are likely to become, widely used within the federal government.
 
 Requires conducting intramural security research activities under NIST's computing standards program. 
 
 Requires the NIST Director to: (1) ensure coordination of U.S. government representation in the international development of technical standards related to cybersecurity; (2) maintain a cybersecurity awareness and education program through the Hollings Manufacturing Extension Partnership program; and (3) continue a program to support development of technical standards, metrology, testbeds, and conformance criteria with regard to identity management research and development. 

action_date: 2011-10-31
text: 
Cybersecurity Enhancement Act of 2011 - 
Title I: Research and Development 
 - (Sec. 103) Directs specified federal agencies participating in the National High-Performance Computing Program to: (1) transmit to Congress a cybersecurity strategic research and development plan and triennial updates, and (2) develop and annually update an implementation roadmap for such plan. 
 
Instructs the participating agencies, in developing and updating the strategic plan, to solicit recommendations and advice from the advisory committee on high-performance computing and a wide range of specified stakeholders. 
 
 (Sec. 104) Provides for the award of computer and network security research grants by the National Science Foundation (NSF) in the research areas of social and behavioral factors, including human-computer interactions, identity management, as well as the detection, investigation, and prosecution of cyber-crimes involving organized crime and crimes against children. Authorizes appropriations for FY2012-FY2014 for such grants. 
 
(Sec. 105) Requires applications for the establishment of Computer and Network Security Research Centers to include a description of how such Centers will partner with government laboratories, for-profit entities, other institutions of higher education, or nonprofit research institutions. Authorizes appropriations for such Centers FY2012-FY2014. 
 
Authorizes appropriations to NSF for FY2012-FY2014 for: (1) computer and network security capacity building grants, (2) grants under the Scientific and Advanced Technology Act for the national advanced scientific and technical education program and national centers of scientific and technical education, and (3) grants for graduate traineeships programs in computer and network security research. 
 
Repeals the Cyber Security Faculty Development Traineeship Program. 
 
 (Sec. 106) Requires the NSF Director to continue carrying out a Scholarship for Service program under the Cyber Security Research and Development Act to recruit and train the next generation of federal cybersecurity professionals and to increase the capacity of the higher education system to produce an information technology workforce with the skills necessary to enhance the security of the nation's communications and information infrastructure. 
 
Requires the program to: (1) provide scholarships for tuition, fees, and a stipend for up to two years to students pursuing a bachelor's or master's degree and up to three years to students pursuing a doctoral degree in a cybersecurity field upon condition that a scholarship recipient, upon the completion of the degree, serves as a cybersecurity professional within the federal workforce (or in another specified cybersecurity capacity) for a specified period of time; (2) provide scholarship recipients with summer internships or other temporary appointments in the federal information technology workforce; and (3) increase, through competitive grants, the capacity of U.S. higher education institutions to produce highly qualified cybersecurity professionals. 
 
(Sec. 107) Directs the President to transmit a report to Congress addressing the cybersecurity workforce needs of the federal government. 
 
 (Sec. 108) Requires the Director of the Office of Science and Technology Policy to convene a cybersecurity university-industry task force to explore mechanisms for carrying out collaborative R&D activities through a consortium or other appropriate entity. Terminates the task force upon transmittal of a report to Congress. 
 
 (Sec. 109) Revises provisions under the Cyber Security Research and Development Act concerning the development and dissemination by the National Institute of Standards and Technology (NIST) of security risk checklists associated with computer systems that are, or are likely to become, widely used within the federal government. 
 
Requires the NIST Director to establish priorities for the development, and revision as necessary, of security automation standards, associated reference materials (including protocols), and checklists associated with such systems in order to enable standardized and interoperable technologies, architectures, and frameworks to continuously monitor information security within the federal government. 
 
Instructs the NIST Director to ensure that federal agencies are informed of the availability of any standard, reference material, checklist, or other item developed pursuant to this section. 
 
 (Sec. 110) Requires NIST to conduct intramural security research activities under its computing standards program. 
 

Title II: Advancement of Cybersecurity Technical Standards 
- (Sec. 202) Requires the NIST Director to ensure the coordination of federal agencies engaged in the development of international technical standards related to information system security. Requires the development and transmittal to Congress of a plan to ensure coordination by such federal agencies. Instructs the Director to ensure consultation with appropriate private sector stakeholders. 
 
(Sec. 203) Requires the NIST Director, in collaboration with the federal Chief Information Officers Council, to continue development and implementation of a comprehensive strategy for the use and adoption of cloud computing services by the federal government. 
 
Requires consideration to be given to activities that: (1) accelerate the development of standards that address the interoperability and portability of cloud computing services, (2) support the development of conformance test systems, and (3) address the appropriate security frameworks and reference materials for federal agencies to use in addressing their security and privacy requirements. 
 
(Sec. 204) Requires the NIST Director to continue the coordination of a cybersecurity awareness and education program for increasing the knowledge, skills, and awareness of cybersecurity risks, consequences, and best practices through: (1) the widespread dissemination of cybersecurity technical standards and best practices identified by NIST; and (2) efforts to make such standards and practices usable by individuals, small to medium-sized businesses, state, local, and tribal governments, and educational institutions. Requires the NIST Director to implement and transmit a strategic plan to Congress to guide federal programs and activities in support of a specified comprehensive cybersecurity awareness and education program. 
 
(Sec. 205) Requires the NIST Director to continue a program to support the development of technical standards, metrology, testbeds, and conformance criteria with regard to identity management research and development. 
 
(Sec. 206) Prohibits the authorization of any additional funds to carry out this title, the amendments made by this title, or to carry out amendments made by sections 109 and 110 of this Act. Requires this title and the amendments made by this title and such sections to be carried out using otherwise authorized or appropriated amounts. 

action_date: 2012-04-27
text: 
Cybersecurity Enhancement Act of 2012 - 
Title I: Research and Development 
 - (Sec. 103) Directs specified federal agencies participating in the National High-Performance Computing Program to: (1) transmit to Congress a cybersecurity strategic research and development plan and triennial updates, and (2) develop and annually update an implementation roadmap for such plan. 
 
Instructs the participating agencies, in developing and updating the strategic plan, to solicit recommendations and advice from the advisory committee on high-performance computing and a wide range of specified stakeholders. 
 
 (Sec. 104) Provides for the award of computer and network security research grants by the National Science Foundation (NSF) in the research areas of social and behavioral factors, including human-computer interactions, identity management, as well as the detection, investigation, and prosecution of cyber-crimes involving organized crime and crimes against children. Authorizes appropriations for FY2013-FY2015 for such grants. 
 
(Sec. 105) Requires applications for the establishment of Computer and Network Security Research Centers to include a description of how such Centers will partner with government laboratories, for-profit entities, other institutions of higher education, or nonprofit research institutions. Authorizes appropriations for FY2013-FY2015 for such Centers. 
 
Authorizes appropriations to NSF for FY2013-FY2015 for: (1) computer and network security capacity building grants, (2) grants under the Scientific and Advanced Technology Act for the national advanced scientific and technical education program and national centers of scientific and technical education, and (3) grants for graduate traineeships programs in computer and network security research. 
 
Repeals the Cyber Security Faculty Development Traineeship Program. 
 
 (Sec. 106) Requires the NSF Director to continue carrying out a Scholarship for Service program under the Cyber Security Research and Development Act to recruit and train the next generation of federal cybersecurity professionals and to increase the capacity of the higher education system to produce an information technology workforce with the skills necessary to enhance the security of the nation's communications and information infrastructure. 
 
Requires the program to: (1) provide scholarships for tuition, fees, and a stipend for up to two years to students pursuing a bachelor's or master's degree and up to three years to students pursuing a doctoral degree in a cybersecurity field upon condition that a scholarship recipient, upon the completion of the degree, serves as a cybersecurity professional within the federal workforce (or in another specified cybersecurity capacity) for a specified period of time; (2) provide scholarship recipients with summer internships or other temporary appointments in the federal information technology workforce; and (3) increase, through competitive grants, the capacity of U.S. higher education institutions to produce highly qualified cybersecurity professionals. 
 
(Sec. 107) Directs the President to transmit a report to Congress addressing the cybersecurity workforce needs of the federal government. 
 
 (Sec. 108) Requires the Director of the Office of Science and Technology Policy to convene a cybersecurity university-industry task force to explore mechanisms for carrying out collaborative R&D activities through a consortium or other appropriate entity. Terminates the task force upon transmittal of a report to Congress. 
 
 (Sec. 109) Revises provisions under the Cyber Security Research and Development Act concerning the development and dissemination by the National Institute of Standards and Technology (NIST) of security risk checklists associated with computer systems that are, or are likely to become, widely used within the federal government. 
 
Requires the NIST Director to establish priorities for the development, and revision as necessary, of security automation standards, associated reference materials (including protocols), and checklists associated with such systems in order to enable standardized and interoperable technologies, architectures, and frameworks to continuously monitor information security within the federal government. 
 
Instructs the NIST Director to ensure that federal agencies are informed of the availability of any standard, reference material, checklist, or other item developed pursuant to this section. 
 
 (Sec. 110) Requires NIST to conduct intramural security research activities under its computing standards program. 
 

Title II: Advancement of Cybersecurity Technical Standards 
- (Sec. 202) Requires the NIST Director to ensure the coordination of federal agencies engaged in the development of international technical standards related to information system security. Requires the development and transmittal to Congress of a plan to ensure coordination by such federal agencies. Instructs the Director to ensure consultation with appropriate private sector stakeholders. 
 
(Sec. 203) Requires the NIST Director, in collaboration with the federal Chief Information Officers Council, to continue to develop and encourage implementation of a comprehensive strategy for the use and adoption of cloud computing services by the federal government. 
 
Requires consideration to be given to activities that: (1) accelerate the development, in collaboration with the private sector, of standards that address the interoperability and portability of cloud computing services; (2) advance the development of conformance testing performed by the private sector in support of cloud computing standardization; and (3) support, in consultation with the private sector, the development of appropriate security frameworks and reference materials, and the identification of best practices, for federal agencies to use in addresssing security and privacy requirements. 
 
(Sec. 204) Requires the NIST Director, in collaboration with the National Coordination Office of the Networking and Information Technology Research and Development program, to continue the coordination of a cybersecurity awareness and education program for increasing the knowledge, skills, and awareness of cybersecurity risks, consequences, and best practices through: (1) the widespread dissemination of cybersecurity technical standards and best practices identified by NIST; (2) efforts to make cybersecurity best practices usable by individuals, small to medium-sized businesses, state, local, and tribal governments, and educational institutions; and (3) efforts to attract, recruit, and retain qualified professionals to the federal cybersecurity workforce. Requires the NIST Director to implement and transmit a strategic plan to Congress to guide federal programs and activities in support of a specified comprehensive cybersecurity awareness and education program. 
 
(Sec. 205) Requires the NIST Director to continue a program to support the development of technical standards, metrology, testbeds, and conformance criteria with regard to identity management research and development. 
 
(Sec. 206) Prohibits the authorization of any additional funds to carry out this title, the amendments made by this title, or to carry out amendments made by sections 109 and 110 of this Act. Requires this title and the amendments made by this title and such sections to be carried out using otherwise authorized or appropriated amounts. 


Legislative actions:
action_date: 2012-05-07
text: Received in the Senate and Read twice and referred to the Committee on Commerce, Science, and Transportation.
action_date: 2012-04-27
text: On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 395 - 10 (Roll no. 193). (text: CR H2215-2218)
action_date: 2012-04-27
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2012-04-27
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 395 - 10 (Roll no. 193).(text: CR H2215-2218)
action_date: 2012-04-27
text: Considered as unfinished business. (consideration: CR H2246)
action_date: 2012-04-27
text: At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.
action_date: 2012-04-27
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 2096.
action_date: 2012-04-27
text: Considered under suspension of the rules. (consideration: CR H2215-2222)
action_date: 2012-04-27
text: Mr. McCaul moved to suspend the rules and pass the bill, as amended.
action_date: 2011-10-31
text: Placed on the Union Calendar, Calendar No. 177.
action_date: 2011-10-31
text: Reported (Amended) by the Committee on Science, Space, and Technology. H. Rept. 112-264.
action_date: 2011-10-31
text: Reported (Amended) by the Committee on Science, Space, and Technology. H. Rept. 112-264.
action_date: 2011-07-21
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2011-07-21
text: Committee Consideration and Mark-up Session Held.
action_date: 2011-06-02
text: Referred to the House Committee on Science, Space, and Technology.
action_date: 2011-06-02
text: Introduced in House
action_date: 2011-06-02
text: Introduced in House