,i #aacth ,,congress #ast ,session ,h4 ,r4 #beef ,,in ,,the ,,house ,,of ,,representatives ,june #bg1 #bjac ,mr4 ,honda introduced the following bill2 which was referred to the ,committee on ,science1 ,space1 and ,technology ,a ,,bill ,to provide for the establishment of ,vertical ,centers of ,excellence on ,cybersecurity to create solutions to1 and promote best practices for1 industry-specific cybersecurity challenges4 #a4 ,short title ,this ,act may be cited as the ,excellence in ,cybersecurity ,act4 #b4 ,findings ,congress finds the following3 7#a7 ,cybercrime is one of the preeminent threats facing the ,united ,states today1 and presents a cumulative national security1 economic1 and individual threat unlike any before it4 7#b7 ,the total global cost of cybercrime is estimated to be #a1jjj1jjj1jjj1jjj per year and represents one of the greatest transfers of wealth in the history of the world4 7#c7 ,cybercrime surveys have found that the solutions to cybersecurity threats are multi-pronged and go beyond increased data sharing and threat analysis4 7#d7 ,many leaders of organizations do not know who is responsible for the cybersecurity needs of their organization or industry4 ,these leaders also underestimate the capabilities of their adversaries in cybercrime and the strategic1 financial1 reputational1 and regulatory risks those adversaries pose to organizations4 7#e7 ,security experts are not effectively communicating best practices to address cyberthreats1 cyberattacks1 and defensive technologies4 7#f7 ,cybersecurity experts believe there are #d key factors that impact the vulnerability of an organization to cybercrime3 7,a7 ,understanding the changes to and best practices for the current threat environment4 7,b7 ,strategy and execution of a cybersecurity program4 7,c7 ,the identification of key assets in need of protection4 7,d7 ,the ability to develop relationships with similar organizations to develop protection within the industry ecosystem4 7#g7 ,it is essential that the ,united ,states prioritize the development of organizational relationships and best practices of specific industries to help protect those industries against threats to cybersecurity4 #c4 ,vertical ,centers of ,excellence on ,cybersecurity 7a7 ,establishment ,the ,director of the ,national ,institute of ,standards and ,technology shall establish #e ,vertical ,centers of ,excellence on ,cybersecurity4 7b7 ,mission ,each ,center shall convene experts and individuals in the industry that is the focus of the work of that ,center for the purposes of-- 7#a7 identifying and analyzing existing and future cybersecurity challenges faced by various industries2 7#b7 creating solutions and promoting best practices to address such challenges2 and 7#c7 collaborating with individuals in those industries to share knowledge4 7c7 ,requirements ,in establishing each ,center under subsection 7a71 the ,director1 not later than #f months after the date of enactment of this ,act1 shall select-- 7#a7 a particular industry that faces cybersecurity challenges to be the focus of the work of that ,center2 7#b7 a manager to be responsible for the administrative functions of that ,center2 and 7#c7 the location of that ,center pursuant to subsection 7d74 7d7 ,location requirements ,the ,director shall seek to ensure that each ,center is located a sufficient geographical distance from another ,center and shall select a location for each ,center based on-- 7#a7 proximity to the geographical location of a number of businesses operating in the industry selected pursuant to subsection 7c77#a72 7#b7 accessibility to the experts selected pursuant to section #e2 and 7#c7 the capacity of the facilities at the ,center to convene1 and promote collaboration among1 experts and individuals in that industry4 7e7 ,partnerships ,the ,director may establish partnerships with public or nonprofit entities to provide services for a ,center established under subsection 7a74 #d4 ,duties of ,centers 7a7 ,in general ,the ,director and the manager of each ,center shall jointly select a group of experts1 consistent with the requirements in section #e1 to carry out the duties described in subsection 7b74 7b7 ,duties of experts ,the experts at each ,center shall-- 7#a7 identify and analyze existing and future cybersecurity challenges faced by the industry selected pursuant to section #b7;c77#a72 7#b7 create solutions to those cybersecurity challenges that are cost-effective1 repeatable1 and scalable2 7#c7 collaborate1 convene discussions1 and share knowledge with individuals in that industry to accomplish the work of the ,center2 and 7#d7 create educational programs to promote best practices in cybersecurity for such individuals4 7c7 ,requirements of centers ,each ,center shall-- 7#a7 work within the ,cybersecurity ,framework created pursuant to section #g of ,executive ,order #acfcf1 entitled ,improving ,critical ,infrastructure ,cybersecurity 7#gh ,fed4 ,reg4 #aagci72 7#b7 collaborate with each of the other ,centers to share relevant information2 7#c7 encourage the development of relationships among individuals in the industry selected pursuant to section #b7;c77#a72 and 7#d7 share the best practices and lessons learned from the work of the ,center with those individuals4 7d7 ,confidentiality ,the ,director1 in consultation with individuals in the industry selected pursuant to section #b7;c77#a71 shall establish procedures to ensure the confidentiality of the information handled by the ,centers4 ,the ,centers shall be exempt from the requirements set forth in section #eeb7;b7 of title #e1 ,united ,states ,code 7commonly known as the ,freedom of ,information ,act74 #e4 ,requirements for ,experts 7a7 ,number and ,compensation ,the ,director shall determine-- 7#a7 the number of experts at each ,center2 and 7#b7 the compensation for each expert selected4 7b7 ,qualifications ,experts shall have experience in government1 academia1 or the particular industry that is the focus of the work of the ,center1 and any other qualifications the ,director may determine4 #f4 ,report ,not later than #a year after the date of enactment of this ,act1 the ,director shall submit a report to ,congress describing the cybersecurity challenges1 solutions1 and best practices addressed by each ,center4 #g4 ,definitions ,in this ,act3 7#a7 ,center ,the term ,center means a ,vertical ,center of ,excellence on ,cybersecurity established under section #b7;a74 7#b7 ,director ,the term ,director means the ,director of the ,national ,institute of ,standards and ,technology4 #h4 ,authorization of appropriations ,there are authorized to be appropriated to the ,director for each of fiscal years #bjad through #bjai #be1jjj1jjj to carry out this ,act4 ,amounts appropriated pursuant to this section shall be subdivided into #e equal amounts to be distributed to each ,center4