In this task, you are given text for US Congressional and California state bills, your task is to generate a summary for this bill.
One example: SECTION 1. LIABILITY OF BUSINESS ENTITIES PROVIDING USE OF FACILITIES
TO NONPROFIT ORGANIZATIONS.

(a) Definitions.--In this section:
(1) Business entity.--The term ''business entity'' means a
firm, corporation, association, partnership, consortium, joint
venture, or other form of enterprise.
(2) Facility.--The term ''facility'' means any real
property, including any building, improvement, or appurtenance.
(3) Gross negligence.--The term ''gross negligence'' means
voluntary and conscious conduct by a person with knowledge (at
the time of the conduct) that the conduct is likely to be
harmful to the health or well-being of another person.
(4) Intentional misconduct.--The term ''intentional
misconduct'' means conduct by a person with knowledge (at the
time of the conduct) that the conduct is harmful to the health
or well-being of another person.
(5) Nonprofit organization.--The term ''nonprofit
organization'' means--
(A) any organization described in section 501(c)(3)
of the Internal Revenue Code of 1986 and exempt from
tax under section 501(a) of such Code; or
(B) any not-for-profit organization organized and
conducted for public benefit and operated primarily for
charitable, civic, educational, religious, welfare, or
health purposes.
(6) State.--The term ''State'' means each of the several
States, the District of Columbia, the Commonwealth of Puerto
Rico, the Virgin Islands, Guam, American Samoa, the Northern
Mariana Islands, any other territory or possession of the
United States, or any political subdivision of any such State,
territory, or possession.
(b) Limitation on Liability.--
(1) In general.--Subject to subsection (c), a business
entity shall not be subject to civil liability relating to any
injury or death occurring at a facility of the business entity
in connection with a use of such facility by a nonprofit
organization if--
(A) the use occurs outside of the scope of business
of the business entity;
(B) such injury or death occurs during a period
that such facility is used by the nonprofit
organization; and
(C) the business entity authorized the use of such
facility by the nonprofit organization.
(2) Application.--This subsection shall apply--
(A) with respect to civil liability under Federal
and State law; and
(B) regardless of whether a nonprofit organization
pays for the use of a facility.
(c) Exception for Liability.--Subsection (b) shall not apply to an
injury or death that results from an act or omission of a business
entity that constitutes gross negligence or intentional misconduct,
including any misconduct that--
(1) constitutes a crime of violence (as that term is
defined in section 16 of title 18, United States Code) or act
of international terrorism (as that term is defined in section
2331 of title 18) for which the defendant has been convicted in
any court;
(2) constitutes a hate crime (as that term is used in the
Hate Crime Statistics Act (28 U.S.C. 534 note));
(3) involves a sexual offense, as defined by applicable
State law, for which the defendant has been convicted in any
court; or
(4) involves misconduct for which the defendant has been
found to have violated a Federal or State civil rights law.
(d) Superseding Provision.--
(1) In general.--Subject to paragraph (2) and subsection
(e), this Act preempts the laws of any State to the extent that
such laws are inconsistent with this Act, except that this Act
shall not preempt any State law that provides additional
protection from liability for a business entity for an injury
or death with respect to which conditions under subparagraphs
(A) through (C) of subsection (b)(1) apply.
(2) Limitation.--Nothing in this Act shall be construed to
supersede any Federal or State health or safety law.
(e) Election of State Regarding Nonapplicability.--This Act shall
not apply to any civil action in a State court against a business
entity in which all parties are citizens of the State if such State
enacts a statute--
(1) citing the authority of this subsection;
(2) declaring the election of such State that this Act
shall not apply to such civil action in the State; and
(3) containing no other provision.
Solution is here: Shields a business entity from civil liability relating to any injury or death occurring at a facility of that entity in connection with a use of such facility by a nonprofit organization if: (1) the use occurs outside the scope of business of the business entity; (2) such injury or death occurs during a period that such facility is used by such organization; and (3) the business entity authorized the use of such facility by the organization.
Makes this Act inapplicable to an injury or death that results from an act or omission of a business entity that constitutes gross negligence or intentional misconduct, including misconduct that: (1) constitutes a hate crime or a crime of violence or act of international terrorism for which the defendant has been convicted in any court; or (2) involves a sexual offense for which the defendant has been convicted in any court or misconduct for which the defendant has been found to have violated a Federal or State civil rights law.
Preempts State laws to the extent that such laws are inconsistent with this Act, except State law that provides additional protection from liability. Specifies that this Act shall not be construed to supersede any Federal or State health or safety law.
Makes this Act inapplicable to any civil action in a State court against a business entity in which all parties are citizens of the State if such State, citing this Act's authority and containing no other provision, enacts a statute declaring the State's election that this Act shall not apply to such action in the State.
Explanation: This Bill focuses on shielding business entities from civil liability relating to an injury or death depending on the conditions of injury, hence the generated summary is correct.

Now, solve this: SECTION 1. SHORT TITLE.

This Act may be cited as the ''National Cyber Security Leadership
Act of 2003''.

SEC. 2. FINDINGS.

Congress makes the following findings:
(1) Federal agencies rely on networked computer systems to
deliver critical services and information to the American
people, including operations related to national defense,
emergency services, tax collection, and the payment of
benefits.
(2) There has been an astonishing increase in cyber threats
to government and industry in recent years. The number of cyber
attacks on Federal Government systems in 2001 was 71 percent
greater than the number of such attacks on such systems in
2000.
(3) Cyber attacks can cause irreparable harm in network
systems, including the loss or dissemination of sensitive and
important data. Cyber attacks can also reduce the confidence of
the American people in the integrity and security of the
Internet.
(4) There is mounting evidence to suggest that terrorists
view the Internet as a tool to achieve their goals. Government
investigators found that al Qaeda operatives browsed Internet
sites that offered software describing the digital switches
that control power, water, transport, and communications grids.
(5) The Bush Administration has recognized in its draft
National Strategy to Secure Cyberspace ''the pressing need to
make federal cyberspace security a model for the nation''.
(6) All but a few Federal agencies continue to receive
failing grades for their cyber security programs.
(7) Federal agencies must take significant steps to better
protect themselves against cyber attacks, including--
(A) identifying significant vulnerabilities in
their computer networks and the tools needed to detect
such vulnerabilities;
(B) monitoring for new vulnerabilities in their
computer networks, and assessing risks of cyber
attacks;
(C) testing computers against identified
vulnerabilities; and
(D) ensuring that computers and networks are
adequately protected against such vulnerabilities.

SEC. 3. DEFINITIONS.

In this Act:
(1) Chief information officer.--The term ''Chief
Information Officer'', with respect to an agency, means the
official designated as the Chief Information Officer of the
agency pursuant to section 3506(a)(2) of title 44, United
States Code.
(2) Vulnerability.--The term ''vulnerability'', in the case
of information technology, means an error or defect in coding,
configuration, or installation of such information technology
that increases its susceptibility to a cyber threat.
(3) Other definitions.--Except as otherwise provided in
this section, any term used in this Act which is defined in
section 3502 of title 44, United States Code, shall have the
meaning given that term in such section 3502.

SEC. 4. ELIMINATION OF SIGNIFICANT VULNERABILITIES OF FEDERAL
GOVERNMENT INFORMATION TECHNOLOGY.

(a) In General.--The Chief Information Officer of each agency
shall--
(1) identify the significant vulnerabilities of the
information technology of such agency, including--
(A) vulnerabilities of such classes of information
technology of such agency as the Chief Information
Officer shall designate for purposes of this section;
and
(B) vulnerabilities of the information technology
of such agency as a whole;
(2) establish performance goals for eliminating the
significant vulnerabilities of the information technology of
such agency identified under paragraph (1), with such
performance goals--
(A) to be established utilizing the current state
of the information technology of such agency as a
baseline;
(B) to be stated both for particular classes of
information technology of such agency (as determined
under paragraph (1)(A)) and for the information
technology of such agency as a whole; and
(C) to be expressed as target ratios of
vulnerabilities per information technology;
(3) procure or develop tools to identify and eliminate the
vulnerabilities identified under paragraph (1) in order to
achieve the performance goals established under paragraph (2);
(4) train personnel of such agency in the utilization of
tools procured or developed under paragraph (3);
(5) not less often than once each quarter, test the
information technology of such agency to determine the extent
of the compliance of the information technology with the
performance goals established under paragraph (3); and
(6) to the extent that the information technology of such
agency does not comply with the performance goals established
under paragraph (3), promptly develop and implement a plan to
eliminate significant vulnerabilities in the information
technology in order to achieve compliance with such performance
goals.
(b) Annual Report on Activities.--
(1) Requirement.--The Chief Information Officer of each
agency shall include information on its activities under
subsection (a) in each annual report submitted to the Director
of the Office of Management and Budget under section 3545(e) of
title 44, United States Code (as amended by section 301(b) of
the Federal Information Security Management Act of 2002 (title
III of Public Law 107-347)).
(2) Form.--The form of information submitted under
paragraph (1) shall be specified by the Director of the Office
of Management and Budget.
(c) Governmentwide Standards.--
(1) Review by nist.--The Director of the Office of
Management and Budget shall ensure the review by the Director
of the National Institute of Standards and Technology of the
annual reports submitted under subsection (b) in the first year
after the date of the enactment of this Act.
(2) Guidelines.--Not later than 180 days after receiving
annual reports for review under paragraph (1), the Director of
the National Institute of Standards and Technology shall
develop and make available to the Chief Information Officers of
the agencies governmentwide guidelines for use in complying
with subsection (a). The guidelines shall--
(A) identify vulnerabilities of information
technology common to the agencies; and
(B) describe means of eliminating such
vulnerabilities, including the use of checklists
pursuant to section 8(c) of the Cyber Security Research
and Development Act (Public Law 107-305).
(3) Mandatory use.--
(A) Designation of vulnerabilities.--The Director
of the National Institute of Standards and Technology
shall designate as a result of the review under
paragraph (1) any significant vulnerabilities of
information technology of such broad applicability and
severity so as to warrant the mandatory use of the
guidelines developed under paragraph (2) with respect
to such vulnerabilities.
(B) Mandatory use.--The Secretary of Commerce
shall, using the authority available to the Secretary
under section 11331(b) of title 40, United States Code,
mandate the use by the agencies of guidelines developed
under paragraph (2) with respect to vulnerabilities
designated under subparagraph (A).
(C) Use and exception.--Each agency shall use a
standard mandated under subparagraph (B) unless the
Chief Information Officer of such agency determines,
with the concurrence of the Director of the National
Institute of Standards and Technology, that the use of
such guideline by such agency would not increase the
security of the information technology covered by such
standard.

SEC. 5. AUTHORIZATION OF APPROPRIATIONS.

(a) Authorization of Appropriations.--There is authorized to be
appropriated to carry out the provisions of this Act amounts as
follows:
(1) For the Department of Commerce for the National
Institute of Standards and Technology, $1,000,000 for fiscal
year 2004 to develop the guidelines required by section 4(c).
(2) For each agency, such sums as may be necessary for such
agency for fiscal years 2004 through 2008 to carry out the
provisions of this Act.
(b) Availability.--The amount authorized to be appropriated by
subsection (a)(1) shall remain available until expended.

SEC. 6. EFFECTIVE DATE.

This Act shall take effect 180 days after the date of the enactment
of this Act.
Solution:
National Cyber Security Leadership Act of 2003 - Requires the Chief Information Officer of each Federal agency to: (1) identify the significant vulnerabilities of the information technology (IT) of such agency; (2) establish performance goals for eliminating such vulnerabilities; (3) procure or develop tools to identify and eliminate those vulnerabilities in order to achieve such performance goals; (4) train personnel in the utilization of those tools; (5) test the agency's IT to determine the extent of its compliance with the performance goals; and (6) develop and implement a plan to eliminate significant vulnerabilities in order to achieve compliance.Requires: (1) each Officer to include information on the agency's activities under this Act in annual reports on the agency's information security program and practices submitted to the Director of the Office of Management and Budget (OMB); and (2) the OMB Director to ensure the review of such reports by the Director of the National Institute of Standards and Technology (NIST); (3) the NIST Director to designate, as the result of such review, any significant IT vulnerabilities of such broad applicability and severity so as to warrant the use of government-wide guidelines the Director shall develop and make available to such Officers for complying with this Act; and (4) the Secretary of Commerce to mandate agency use of such guidelines.