#aac? ,,congress  #a/ ,session  ,h4 ,r4 
#gef  ,,an ,,act  ,to advance           
cyb]security rese>*1 developm5t1 &      
te*nical /&>ds1 & = o!r purposes4  #a4  
,%ort title ,?is ,act may be cit$ z !   
,cyb]security ,enhancem5t ,act ( #bjac4 
,i ,rese>* & ,developm5t  #aja4         
,def9itions ,9 ?is title3  7#a7         
,national coord9ation (fice ,! t]m      
,national ,coord9ation ,(fice means !   
,national ,coord9ation ,(fice = !       
,network+ & ,in=mation ,te*nology       
,rese>* & ,developm5t program4  7#b7    
,program ,! t]m ,program means !        
,network+ & ,in=mation ,te*nology       
,rese>* & ,developm5t program :i* has   
be5 e/abli%$ "u section #aja ( !        
,high-,p]=mance ,comput+ ,act ( #aiia   
7#ae ,u4,s4,c4 #eeaa74  #ajb4 ,f9d+s    
,section #b ( ! ,cyb] ,security ,rese>* 
& ,developm5t ,act 7#ae ,u4,s4,c4 #gdja7
 is am5d$--  7#a7 by am5d+ p>agraph 7#a7
 to read z foll[s3  7#a7 ,advancem5ts 9 
in=mation & communications te*nology h  
result$ 9 a globally int]connect$       

network ( gov]nm5t1 comm]cial1          
sci5tific1 & education infra/ructures1  
includ+ critical infra/ructures =       
electric p[]1 natural gas & petroleum   
production & di/ribution1               
telecommunications1 transportation1 wat]
 supply1 bank+ & f9ance1 & em]g5cy &    
gov]nm5t s]vices4  2  7#b7 9 p>agraph   
7#b71 by /rik+ ,expon5tial increases 9  
int]connectivity h facilitat$ enhanc$   
communications1 economic gr[?1 & ins]t+ 
,^! advancem5ts h significantly         
contribut$ to ! gr[? ( ! ,unit$ ,/ates  
economy12  7#c7 by am5d+ p>agraph 7#c7  
to read z foll[s3  7#c7 ,! ,cyb]space   
,policy ,review publi%$ by ! ,presid5t 9
 ,may1 #bjji1 conclud$ t our in=mation  
te*nology & communications infra/ructure
 is vuln]able & has suff]$ intrusions t 
h all[$ crim9als to /eal hundr$s (      
millions ( doll>s & nation-/ates & o!r  
entities to /eal intellectual prop]ty & 
s5sitive milit>y in=mation4  2 &  7#d7  
by am5d+ p>agraph 7#f7 to read z foll[s3
  7#f7 ,:ile ,african-,am]icans1        

,hispanics1 & ,native ,am]icans         
con/itute #cc p]c5t ( ! college-age     
population1 memb]s ( ^! m9orities       
comprise less ?an #bj p]c5t ( ba*elor   
degree recipi5ts 9 ! field ( comput]    
sci5ces4  4  #ajc4 ,cyb]security        
/rategic rese>* & developm5t plan  7a7  
,9 g5]al ,n lat] ?an #ab mon?s aft] !   
date ( enactm5t ( ?is ,act1 ! ag5cies   
id5tifi$ 9 subsection                   
#aja7;a77#c77;,b77i7 ?r\gh 7x7 ( !      
,high-,p]=mance ,comput+ ,act ( #aiia   
7#ae ,u4,s4,c4 #eeaa7;a77#c77;,b77i7    
?r\gh 7x77 or designat$ "u section      
#aja7;a77#c77;,b77xi7 ( su* ,act1 work+ 
?r\gh ! ,national ,sci5ce & ,te*nology  
,c\ncil & ) ! assi/ance ( ! ,national   
,coord9ation ,(fice1 %all transmit to   
,congress a /rategic plan bas$ on an    
assessm5t ( cyb]security risk to guide !
 ov]all direction ( ,f$]al cyb]security 
& in=mation assurance rese>* &          
developm5t = in=mation te*nology &      
network+ sy/ems4 ,once e #c ye>s aft] ! 
initial /rategic plan is transmitt$ to  

,congress "u ?is section1 su* ag5cies   
%all prep>e & transmit to ,congress an  
update ( su* plan4  7b7 ,cont5ts ( plan 
,! /rategic plan requir$ "u subsection  
7a7 %all--  7#a7 specify & prioritize   
ne>-t]m1 mid-t]m & long-t]m rese>*      
objectives1 includ+ objectives associat$
 ) ! rese>* areas id5tifi$ 9 section    
#d7;a77#a7 ( ! ,cyb] ,security ,rese>* &
 ,developm5t ,act 7#ae ,u4,s4,c4        
#gdjc7;a77#a77 & h[ ! ne>-t]m objectives
 complem5t rese>* & developm5t areas 9  
:i* ! private sector is actively engag$2
  7#b7 describe h[ ! ,program w focus on
 innovative1 trans=mational te*nologies 
) ! pot5tial to enhance ! security1     
reliability1 resili5ce1 & tru/wor?9ess (
 ! digital infra/ructure1 & to protect  
consum] privacy2  7#c7 describe h[ !    
,program w fo/] ! rapid transf] ( rese>*
 & developm5t results into new          
cyb]security te*nologies & applications 
= ! timely b5efit ( society & ! national
 int]e/1 includ+ ?r\gh ! dissem9ation ( 
be/ practices & o!r outrea* activities2 

7#d7 describe h[ ! ,program w e/abli% & 
ma9ta9 a national rese>* infra/ructure =
 creat+1 te/+1 & evaluat+ ! next        
g5]ation ( secure network+ & in=mation  
te*nology sy/ems2  7#e7 describe h[ !   
,program w facilitate access by academic
 rese>*]s to ! infra/ructure describ$ 9 
p>agraph 7#d71 z well z to relevant     
data1 includ+ ev5t data2  7#f7 describe 
h[ ! ,program w engage females &        
individuals id5tifi$ 9 section #cc or   
#cd ( ! ,sci5ce & ,eng9e]+ ,equal       
,opportunities ,act 7#db ,u4,s4,c4      
#ahhe;a or #ahhe;b7 to fo/] a m div]se  
work=ce 9 ?is area2 &  7#g7 describe h[ 
! ,program w help to recruit & prep>e   
vet]ans = ! ,f$]al cyb]security work=ce4
  7c7 ,developm5t ( roadmap ,! ag5cies  
describ$ 9 subsection 7a7 %all develop &
 annually update an implem5tation       
roadmap = ! /rategic plan requir$ 9 ?is 
section4 ,su* roadmap %all--  7#a7      
specify ! role ( ea* ,f$]al ag5cy 9     
c>ry+ out or sponsor+ rese>* &          
developm5t to meet ! rese>* objectives (

 ! /rategic plan1 includ+ a description 
( h[ progress t[>d ! rese>* objectives w
 be evaluat$2  7#b7 specify ! fund+     
allocat$ to ea* major rese>* objective (
 ! /rategic plan & ! s\rce ( fund+ by   
ag5cy = ! curr5t fiscal ye>2 &  7#c7    
e/imate ! fund+ requir$ = ea* major     
rese>* objective ( ! /rategic plan = !  
foll[+ #c fiscal ye>s4  7d7             
,recomm5dations ,9 develop+ & updat+ !  
/rategic plan "u subsection 7a71 !      
ag5cies involv$ %all solicit            
recomm5dations & advice f--  7#a7 !     
advisory committee e/abli%$ "u section  
#aja7;b77#a7 ( ! ,high-,p]=mance        
,comput+ ,act ( #aiia 7#ae ,u4,s4,c4    
#eeaa7;b77#a772 &  7#b7 a wide range (  
/akehold]s1 includ+ indu/ry1 academia1  
includ+ repres5tatives ( m9ority s]v+   
in/itutions & community colleges1       
,national ,laboratories1 & o!r relevant 
organizations & in/itutions4  7e7       
,app5d+ to report ,! implem5tation      
roadmap requir$ "u subsection 7c71 & its
 annual updates1 %all be app5d$ to !    

report requir$ "u section               
#aja7;a77#b77;,d7 ( ! ,high-,p]=mance   
,comput+ ,act ( #aiia 7#ae ,u4,s4,c4    
#eeaa7;a77#b77;,d774  7f7 ,cyb]security 
rese>* database ,! ag5cies involv$ 9    
develop+ & updat+ ! /rategic plan "u    
subsection 7a7 %all e/abli%1 9          
coord9ation ) ! ,(fice ( ,managem5t &   
,budget1 a me*anism to track ongo+ &    
complet$ ,f$]al cyb]security rese>* &   
developm5t projects & associat$ fund+1 &
 %all make su* in=mation publically     
available4  #ajd4 ,social & behavioral  
rese>* 9 cyb]security ,section          
#d7;a77#a7 ( ! ,cyb] ,security ,rese>* &
 ,developm5t ,act 7#ae ,u4,s4,c4        
#gdjc7;a77#a77 is am5d$--  7#a7 by      
ins]t+ & usability aft] to ! /ructure2  
7#b7 9 subp>agraph 7,h71 by /rik+ & aft]
 ! semicolon2  7#c7 9 subp>agraph 7,i71 
by /rik+ ! p]iod at ! end & ins]t+ 2 &2 
&  7#d7 by add+ at ! end ! foll[+ new   
subp>agraph3  7,j7 social & behavioral  
factors1 includ+ human-comput]          
int]actions1 usability1 & us]           

motivations4  4  #aje4 ,national ,sci5ce
 ,f\ndation cyb]security rese>* &       
developm5t programs  7a7 ,comput] &     
network security rese>* areas ,section  
#d7;a77#a7 ( ! ,cyb] ,security ,rese>* &
 ,developm5t ,act 7#ae ,u4,s4,c4        
#gdjc7;a77#a77 is am5d$--  7#a7 9       
subp>agraph 7,a7 by ins]t+ id5tity      
managem5t1 aft] cryptography12 &  7#b7 9
 subp>agraph 7,i71 by ins]t+ 1 crimes   
aga9/ *ildr51 & organiz$ crime aft]     
intellectual prop]ty4  7b7 ,comput] &   
network security rese>* grants ,section 
#d7;a77#c7 ( su* ,act 7#ae ,u4,s4,c4    
#gdjc7;a77#c77 is am5d$ by /rik+        
subp>agraphs 7,a7 ?r\gh 7,e7 & ins]t+ ! 
foll[+ new subp>agraphs3  7,a7          
#aai1jjj1jjj = fiscal ye> #bjad2  7,b7  
#aai1jjj1jjj = fiscal ye> #bjae2 &  7,c7
 #aai1jjj1jjj = fiscal ye> #bjaf4  4    
7c7 ,comput] & network security rese>*  
c5t]s ,section #d7;b7 ( su* ,act 7#ae   
,u4,s4,c4 #gdjc7;b77 is am5d$--  7#a7 9 
p>agraph 7#d7--  7,a7 9 subp>agraph     
7,c71 by /rik+ & aft] ! semicolon2  7,b7

 9 subp>agraph 7,d71 by /rik+ ! p]iod & 
ins]t+ 2 &2 &  7,c7 by add+ at ! end !  
foll[+ new subp>agraph3  7,e7 h[ ! c5t] 
w p>tn] ) gov]nm5t laboratories1 =-pr(it
 entities1 o!r in/itutions ( high]      
education1 or nonpr(it rese>*           
in/itutions4  2 &  7#b7 9 p>agraph 7#g7 
by /rik+ subp>agraphs 7,a7 ?r\gh 7,e7 & 
ins]t+ ! foll[+ new subp>agraphs3  7,a7 
#e1jjj1jjj = fiscal ye> #bjad2  7,b7    
#e1jjj1jjj = fiscal ye> #bjae2 &  7,c7  
#e1jjj1jjj = fiscal ye> #bjaf4  4  7d7  
,comput] & network security capacity    
build+ grants ,section #e7;a77#f7 ( su* 
,act 7#ae ,u4,s4,c4 #gdjd7;a77#f77 is   
am5d$ by /rik+ subp>agraphs 7,a7 ?r\gh  
7,e7 & ins]t+ ! foll[+ new subp>agraphs3
  7,a7 #be1jjj1jjj = fiscal ye> #bjad2  
7,b7 #be1jjj1jjj = fiscal ye> #bjae2 &  
7,c7 #be1jjj1jjj = fiscal ye> #bjaf4  4 
7e7 ,sci5tific & advanc$ te*nology act  
grants ,section #e7;b77#b7 ( su* ,act   
7#ae ,u4,s4,c4 #gdjd7;b77#b77 is am5d$  
by /rik+ subp>agraphs 7,a7 ?r\gh 7,e7 & 
ins]t+ ! foll[+ new subp>agraphs3  7,a7 

#d1jjj1jjj = fiscal ye> #bjad2  7,b7    
#d1jjj1jjj = fiscal ye> #bjae2 &  7,c7  
#d1jjj1jjj = fiscal ye> #bjaf4  4  7f7  
,graduate tra9ee%ips 9 comput] & network
 security ,section #e7;c77#g7 ( su* ,act
 7#ae ,u4,s4,c4 #gdjd7;c77#g77 is am5d$ 
by /rik+ subp>agraphs 7,a7 ?r\gh 7,e7 & 
ins]t+ ! foll[+ new subp>agraphs3  7,a7 
#cb1jjj1jjj = fiscal ye> #bjad2  7,b7   
#cb1jjj1jjj = fiscal ye> #bjae2 &  7,c7 
#cb1jjj1jjj = fiscal ye> #bjaf4  4  7g7 
,cyb] security faculty developm5t       
tra9ee%ip program ,section #e7;e7 ( su* 
,act 7#ae ,u4,s4,c4 #gdjd7;e77 is       
repeal$4  #ajf4 ,f$]al cyb] s*ol>%ip =  
s]vice program  7a7 ,9 g5]al ,!         
,director ( ! ,national ,sci5ce         
,f\ndation %all cont9ue a ,s*ol>%ip =   
,s]vice program "u section #e7;a7 ( !   
,cyb] ,security ,rese>* & ,developm5t   
,act 7#ae ,u4,s4,c4 #gdjd7;a77 to       
recruit & tra9 ! next g5]ation ( ,f$]al 
cyb]security pr(essionals & to increase 
! capacity ( ! high] education sy/em to 
produce an in=mation te*nology work=ce )

 ! skills necess>y to enhance ! security
 ( ! ,nation's communications &         
in=mation infra/ructure4  7b7           
,*>act]i/ics ( program ,! program "u ?is
 section %all--  7#a7 provide1 ?r\gh    
qualifi$ in/itutions ( high] education1 
includ+ community colleges1 s*ol>%ips t 
provide tuition1 fees1 & a competitive  
/ip5d = up to #b ye>s to /ud5ts purs+ a 
ba*elor's or ma/]'s degree & up to #c   
ye>s to /ud5ts pursu+ a doctoral degree 
9 a cyb]security field2  7#b7 provide ! 
s*ol>%ip recipi5ts ) summ] int]n%ip     
opportunities or o!r mean+ful tempor>y  
appo9tm5ts 9 ! ,f$]al in=mation         
te*nology work=ce2 &  7#c7 increase !   
capacity ( in/itutions ( high] education
 ?r\gh\t all regions ( ! ,unit$ ,/ates  
to produce highly qualifi$ cyb]security 
pr(essionals1 ?r\gh ! aw>d (            
competitive1 m]it-review$ grants t      
support su* activities z--  7,a7 faculty
 pr(essional developm5t1 includ+        
te*nical1 h&s-on exp]i5ces 9 ! private  
sector or gov]nm5t1 work%ops1 sem9>s1   

conf]5ces1 & o!r pr(essional developm5t 
opportunities t w result 9 improv$      
in/ructional capabilities2  7,b7        
in/itutional p>tn]%ips1 includ+ m9ority 
s]v+ in/itutions & community colleges2  
7,c7 developm5t & evaluation (          
cyb]security-relat$ c\rses & curricula2 
&  7,d7 public-private p>tn]%ips t w    
integrate rese>* exp]i5ces & h&s-on     
le>n+ into cyb]security degree programs4
  7c7 ,s*ol>%ip requirem5ts  7#a7       
,eligibility ,s*ol>%ips "u ?is section  
%all be available only to /ud5ts :o--   
7,a7 are citiz5s or p]man5t resid5ts ( !
 ,unit$ ,/ates2  7,b7 are full-"t /ud5ts
 9 an eligible degree program1 z det]m9$
 by ! ,director1 t is focus$ on comput] 
security or in=mation assurance at an   
aw>dee in/itution2 &  7,c7 accept ! t]ms
 ( a s*ol>%ip pursuant to ?is section4  
7#b7 ,selection ,individuals %all be    
select$ to receive s*ol>%ips prim>ily on
 ! basis ( academic m]it1 ) consid]ation
 giv5 to f9ancial ne$1 to ! goal (      
promot+ ! p>ticipation ( females &      

individuals id5tifi$ 9 section #cc or   
#cd ( ! ,sci5ce & ,eng9e]+ ,equal       
,opportunities ,act 7#db ,u4,s4,c4      
#ahhe;a or #ahhe;b71 & to vet]ans4 ,=   
purposes ( ?is p>agraph1 ! t]m vet]an   
means a p]son :o--  7,a7 s]v$ on active 
duty 7o!r ?an active duty = tra9+7 9 !  
,arm$ ,=ces ( ! ,unit$ ,/ates = a p]iod 
( m ?an #ahj consecutive days1 & :o 0   
dis*>g$ or releas$ !refrom "u conditions
 o!r ?an di%onorable2 or  7,b7 s]v$ on  
active duty 7o!r ?an active duty =      
tra9+7 9 ! ,arm$ ,=ces ( ! ,unit$ ,/ates
 & 0 dis*>g$ or releas$ f su* s]vice = a
 s]vice-connect$ disability be=e s]v+   
#ahj consecutive days4  ,= purposes (   
subp>agraph 7,b71 ! t]m s]vice-connect$ 
has ! mean+ giv5 su* t]m "u section #aja
 ( title #ch1 ,unit$ ,/ates ,code4  7#c7
 ,s]vice obligation ,if an individual   
receives a s*ol>%ip "u ?is section1 z a 
condition ( receiv+ su* s*ol>%ip1 !     
individual ^u completion ( _! degree mu/
 s]ve z a cyb]security pr(essional )9 ! 
,f$]al work=ce = a p]iod ( "t z provid$ 

9 p>agraph 7#e74 ,if a s*ol>%ip recipi5t
 is n (f]$ employm5t by a ,f$]al ag5cy  
or a f$]ally fund$ rese>* & developm5t  
c5t]1 ! s]vice requirem5t c be satisfi$ 
at ! ,director's discretion by--  7,a7  
s]v+ z a cyb]security pr(essional 9 a   
,/ate1 local1 or tribal gov]nm5t ag5cy2 
or  7,b7 tea*+ cyb]security c\rses at an
 in/itution ( high] education4  7#d7    
,conditions ( support ,z a condition (  
acceptance ( a s*ol>%ip "u ?is section1 
a recipi5t %all agree to provide !      
aw>dee in/itution ) annual v]ifiable    
docum5tation ( employm5t & up-to-date   
contact in=mation4  7#e7 ,l5g? ( s]vice 
,! l5g? ( s]vice requir$ 9 ex*ange = a  
s*ol>%ip "u ?is subsection %all be #a   
ye> m ?an ! numb] ( ye>s = :i* !        
s*ol>%ip 0 receiv$4  7d7 ,failure ,to   
complete s]vice obligation  7#a7 ,g5]al 
rule ,if an individual :o has receiv$ a 
s*ol>%ip "u ?is section--  7,a7 fails to
 ma9ta9 an acceptable level ( academic  
/&+ 9 ! educational in/itution 9 :i* !  
individual is enroll$1 z det]m9$ by !   

,director2  7,b7 is dismiss$ f su*      
educational in/itution = discipl9>y     
reasons2  7,c7 )draws f ! program = :i* 
! aw>d 0 made be=e ! completion ( su*   
program2  7,d7 decl>es t ! individual   
does n int5d to fulfill ! s]vice        
obligation "u ?is section2 or  7,e7     
fails to fulfill ! s]vice obligation ( !
 individual "u ?is section1  su*        
individual %all be liable to ! ,unit$   
,/ates z provid$ 9 p>agraph 7#c74  7#b7 
,monitor+ compliance ,z a condition (   
p>ticipat+ 9 ! program1 a qualifi$      
in/itution ( high] education receiv+ a  
grant "u ?is section %all--  7,a7 ent]  
into an agreem5t ) ! ,director ( !      
,national ,sci5ce ,f\ndation to monitor 
! compliance ( s*ol>%ip recipi5ts )     
respect to _! s]vice obligation2 &  7,b7
 provide to ! ,director1 on an annual   
basis1 po/-aw>d employm5t in=mation     
requir$ "u subsection 7c77#d7 = s*ol>%ip
 recipi5ts ?r\gh ! completion ( _!      
s]vice obligation4  7#c7 ,am\nt (       
repaym5t  7,a7 ,less ?an "o ye> ( s]vice

 ,if a circum/ance describ$ 9 p>agraph  
7#a7 occurs be=e ! completion ( #a ye> (
 a s]vice obligation "u ?is section1 !  
total am\nt ( aw>ds receiv$ by !        
individual "u ?is section %all be repaid
 or su* am\nt %all be treat$ z a loan to
 be repaid 9 accordance ) subp>agraph   
7,c74  7,b7 ,m ?an "o ye> ( s]vice ,if a
 circum/ance describ$ 9 subp>agraph 7,d7
 or 7,e7 ( p>agraph 7#a7 occurs aft] !  
completion ( #a ye> ( a s]vice          
obligation "u ?is section1 ! total am\nt
 ( s*ol>%ip aw>ds receiv$ by !          
individual "u ?is section1 r$uc$ by !   
ratio ( ! numb] ( ye>s ( s]vice complet$
 divid$ by ! numb] ( ye>s ( s]vice      
requir$1 %all be repaid or su* am\nt    
%all be treat$ z a loan to be repaid 9  
accordance ) subp>agraph 7,c74  7,c7    
,repaym5ts ,a loan describ$ 9           
subp>agraph 7,a7 or 7,b7 %all be treat$ 
z a ,f$]al ,direct ,unsubsidiz$ ,/af=d  
,loan "u "p ,d ( title ,,iv ( ! ,high]  
,education ,act ( #aife 7#bj ,u4,s4,c4  
#ajhg;a & foll[+71 & %all be subject to 

repaym5t1 toge!r ) int]e/ !reon accru+ f
 ! date ( ! s*ol>%ip aw>d1 9 accordance 
) t]ms & conditions specifi$ by !       
,director 79 consultation ) ! ,secret>y 
( ,education7 9 regulations promulgat$  
to c>ry out ?is p>agraph4  7#d7         
,collection ( repaym5t  7,a7 ,9 g5]al ,9
 ! ev5t t a s*ol>%ip recipi5t is requir$
 to repay ! s*ol>%ip "u ?is subsection1 
! in/itution provid+ ! s*ol>%ip %all--  
7i7 be responsible = det]m9+ ! repaym5t 
am\nts & = notify+ ! recipi5t & !       
,director ( ! am\nt ow$2 &  7ii7 collect
 su* repaym5t am\nt )9 a p]iod ( "t z   
det]m9$ "u ! agreem5t describ$ 9        
p>agraph 7#b71 or ! repaym5t am\nt %all 
be treat$ z a loan 9 accordance )       
p>agraph 7#c77;,c74  7,b7 ,return$ to   
treasury ,except z provid$ 9 subp>agraph
 7,c7 ( ?is p>agraph1 any su* repaym5t  
%all be return$ to ! ,treasury ( !      
,unit$ ,/ates4  7,c7 ,reta9 p]c5tage ,an
 in/itution ( high] education may reta9 
a p]c5tage ( any repaym5t ! in/itution  
collects "u ?is p>agraph to defray      

adm9i/rative co/s associat$ ) !         
collection4 ,! ,director %all e/abli% a 
s+le1 fix$ p]c5tage t w apply to all    
eligible entities4  7#e7 ,exceptions ,! 
,director may provide = ! p>tial or     
total waiv] or susp5sion ( any s]vice or
 paym5t obligation by an individual "u  
?is section :5ev] compliance by !       
individual ) ! obligation is impossible 
or w\ld involve extreme h>d%ip to !     
individual1 or if en=cem5t ( su*        
obligation ) respect to ! individual    
w\ld be unconscionable4  7e7 ,hir+      
,au?ority  7#a7 ,appo9tm5t 9 except$    
s]vice ,not)/&+ any provision ( *apt]   
#cc ( title #e1 ,unit$ ,/ates ,code1    
gov]n+ appo9tm5ts 9 ! competitive       
s]vice1 an ag5cy %all appo9t 9 ! except$
 s]vice an individual :o has complet$ ! 
academic program = :i* a s*ol>%ip 0     
aw>d$4  7#b7 ,noncompetitive conv]sion  
,except z provid$ 9 p>agraph 7#d71 ^u   
fulfillm5t ( ! s]vice t]m1 an employee  
appo9t$ "u p>agraph 7#a7 may be conv]t$ 
noncompetitively to t]m1                

c>e]-conditional or c>e] appo9tm5t4     
7#c7 ,tim+ ( conv]sion ,an ag5cy may    
noncompetitively conv]t a t]m employee  
appo9t$ "u p>agraph 7#b7 to a           
c>e]-conditional or c>e] appo9tm5t be=e 
! t]m appo9tm5t expires4  7#d7 ,au?ority
 to decl9e conv]sion ,an ag5cy may      
decl9e to make ! noncompetitive         
conv]sion or appo9tm5t "u p>agraph 7#b7 
= cause4  #ajg4 ,cyb]security work=ce   
assessm5t ,n lat] ?an #ahj days aft] !  
date ( enactm5t ( ?is ,act ! ,presid5t  
%all transmit to ! ,congress a report   
address+ ! cyb]security work=ce ne$s ( !
 ,f$]al ,gov]nm5t4 ,! report %all       
include--  7#a7 an exam9ation ( ! curr5t
 /ate ( & ! project$ ne$s ( ! ,f$]al    
cyb]security work=ce1 includ+ a         
comp>ison ( ! diff]5t ag5cies &         
dep>tm5ts1 & an analysis ( ! capacity ( 
su* ag5cies & dep>tm5ts to meet ^? ne$s2
  7#b7 an analysis ( ! s\rces &         
availability ( cyb]security tal5t1 a    
comp>ison ( ! skills & exp]tise s\ght by
 ! ,f$]al ,gov]nm5t & ! private sector1 

an exam9ation ( ! curr5t & future       
capacity ( ,unit$ ,/ates in/itutions (  
high] education1 includ+ community      
colleges1 to provide curr5t & future    
cyb]security pr(essionals1 ?r\gh        
education & tra9+ activities1 ) ^?      
skills s\ght by ! ,f$]al ,gov]nm5t1     
,/ate & local entities1 & ! private     
sector1 & a description ( h[ successful 
programs are engag+ ! tal5ts ( females &
 individuals id5tifi$ 9 section #cc or  
#cd ( ! ,sci5ce & ,eng9e]+ ,equal       
,opportunities ,act 7#db ,u4,s4,c4      
#ahhe;a or #ahhe;b72  7#c7 an exam9ation
 ( ! effectiv5ess ( ! ,national ,c5t]s (
 ,academic ,excell5ce 9 ,in=mation      
,assurance ,education1 ! ,c5t]s (       
,academic ,excell5ce 9 ,rese>*1 & !     
,f$]al ,cyb] ,s*ol>%ip = ,s]vice        
programs 9 promot+ high] education &    
rese>* 9 cyb]security & in=mation       
assurance & 9 produc+ a gr[+ numb] (    
pr(essionals ) ! necess>y cyb]security &
 in=mation assurance exp]tise1 includ+  
individuals f ,/ates or regions 9 :i* ! 

unemploym5t rate exce$s ! national      
av]age2  7#d7 an analysis ( any b>ri]s  
to ! ,f$]al ,gov]nm5t recruit+ & hir+   
cyb]security tal5t1 includ+ b>ri]s      
relat+ to comp5sation1 ! hir+ process1  
job classification1 & hir+              
flexibilities2 &  7#e7 recomm5dations = 
,f$]al policies to ensure an adequate1  
well-tra9$ ,f$]al cyb]security work=ce4 
#ajh4 ,cyb]security univ]sity-indu/ry   
task =ce  7a7 ,e/abli%m5t (             
univ]sity-,indu/ry task =ce ,n lat] ?an 
#ahj days aft] ! date ( enactm5t ( ?is  
,act1 ! ,director ( ! ,(fice ( ,sci5ce &
 ,te*nology ,policy %all conv5e a task  
=ce to explore me*anisms = c>ry+ out    
collaborative rese>*1 developm5t1       
education1 & tra9+ activities =         
cyb]security ?r\gh a consortium or o!r  
appropriate entity ) p>ticipants f      
in/itutions ( high] education & indu/ry4
  7b7 ,functions ,! task =ce %all--     
7#a7 develop options = a collaborative  
model & an organizational /ructure = su*
 entity "u :i* ! jo9t rese>* &          

developm5t activities c\ld be plann$1   
manag$1 & conduct$ effectively1 includ+ 
me*anisms = ! allocation ( res\rces     
among ! p>ticipants 9 su* entity =      
support ( su* activities2  7#b7 id5tify 
& prioritize at lea/ ?ree cyb]security  
gr& *all5ges1 focus$ on nationally      
significant problems requir+            
collaborative & int]discipl9>y          
solutions2  7#c7 propose a process =    
develop+ a rese>* & developm5t ag5da =  
su* entity to address ! gr& *all5ges    
id5tifi$ "u p>agraph 7#b72  7#d7 def9e !
 roles & responsibilities = !           
p>ticipants f in/itutions ( high]       
education & indu/ry 9 su* entity2  7#e7 
propose guidel9es = assign+ intellectual
 prop]ty rights & = ! transf] ( rese>* &
 developm5t results to ! private sector2
 &  7#f7 make recomm5dations = h[ su*   
entity c\ld be fund$ f ,f$]al1 ,/ate1 & 
nongov]nm5tal s\rces4  7c7 ,composition 
,9 e/abli%+ ! task =ce "u subsection    
7a71 ! ,director ( ! ,(fice ( ,sci5ce & 
,te*nology ,policy %all appo9t an equal 

numb] ( individuals f in/itutions (     
high] education1 includ+ m9ority-s]v+   
in/itutions & community colleges1 & f   
indu/ry ) k & exp]tise 9 cyb]security4  
7d7 ,report ,n lat] ?an #ab mon?s aft] !
 date ( enactm5t ( ?is ,act1 ! ,director
 ( ! ,(fice ( ,sci5ce & ,te*nology      
,policy %all transmit to ! ,congress a  
report describ+ ! f9d+s & recomm5dations
 ( ! task =ce4  7e7 ,t]m9ation ,! task  
=ce %all t]m9ate ^u transmittal ( !     
report requir$ "u subsection 7d74  7f7  
,comp5sation & exp5ses ,memb]s ( ! task 
=ce %all s]ve )\t comp5sation4  #aji4   
,cyb]security automation & *eckli/s =   
gov]nm5t sy/ems ,section #h7;c7 ( !     
,cyb] ,security ,rese>* & ,developm5t   
,act 7#ae ,u4,s4,c4 #gdjf7;c77 is am5d$ 
to read z foll[s3  7c7 ,security        
automation & *eckli/s = gov]nm5t sy/ems 
7#a7 ,9 g5]al ,! ,director ( ! ,national
 ,in/itute ( ,/&>ds & ,te*nology %all   
develop1 & revise z necess>y1 security  
automation /&>ds1 associat$ ref]5ce     
mat]ials 7includ+ protocols71 & *eckli/s

 provid+ sett+s & option selections t   
m9imize ! security risks associat$ ) ea*
 in=mation te*nology h>dw>e or s(tw>e   
sy/em & security tool t is1 or is likely
 to become1 widely us$ )9 ! ,f$]al      
,gov]nm5t 9 ord] to enable /&>diz$ &    
int]op]able te*nologies1 ar*itectures1 &
 frameworks = cont9u\s monitor+ (       
in=mation security )9 ! ,f$]al          
,gov]nm5t4  7#b7 ,priorities =          
developm5t ,! ,director ( ! ,national   
,in/itute ( ,/&>ds & ,te*nology %all    
e/abli% priorities = ! developm5t (     
/&>ds1 ref]5ce mat]ials1 & *eckli/s "u  
?is subsection on ! basis (--  7,a7 !   
security risks associat$ ) ! use ( !    
sy/em2  7,b7 ! numb] ( ag5cies t use a  
p>ticul> sy/em or security tool2  7,c7 !
 usefulness ( ! /&>ds1 ref]5ce mat]ials1
 or *eckli/s to ,f$]al ag5cies t are    
us]s or pot5tial us]s ( ! sy/em2  7,d7 !
 effectiv5ess ( ! associat$ /&>d1       
ref]5ce mat]ial1 or *eckli/ 9 creat+ or 
enabl+ cont9u\s monitor+ ( in=mation    
security2 or  7,e7 su* o!r factors z !  

,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology det]m9es to be      
appropriate4  7#c7 ,exclud$ sy/ems ,!   
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology may exclude f !     
application ( p>agraph 7#a7 any         
in=mation te*nology h>dw>e or s(tw>e    
sy/em or security tool = :i* su*        
,director det]m9es t ! developm5t ( a   
/&>d1 ref]5ce mat]ial1 or *eckli/ is    
inappropriate because ( ! infrequ5cy (  
use ( ! sy/em1 ! obsolesc5ce ( ! sy/em1 
or ! inutility or impracticability (    
develop+ a /&>d1 ref]5ce mat]ial1 or    
*eckli/ = ! sy/em4  7#d7 ,dissem9ation (
 /&>ds & relat$ mat]ials ,! ,director ( 
! ,national ,in/itute ( ,/&>ds &        
,te*nology %all ensure t ,f$]al ag5cies 
are in=m$ ( ! availability ( any /&>d1  
ref]5ce mat]ial1 *eckli/1 or o!r item   
develop$ "u ?is subsection4  7#e7 ,ag5cy
 use requirem5ts ,! developm5t ( /&>ds1 
ref]5ce mat]ials1 & *eckli/s "u p>agraph
 7#a7 = an in=mation te*nology h>dw>e or
 s(tw>e sy/em or tool does n--  7,a7    

require any ,f$]al ag5cy to select !    
specific sett+s or options recomm5d$ by 
! /&>d1 ref]5ce mat]ial1 or *eckli/ = ! 
sy/em2  7,b7 e/abli% conditions or      
pr]equisites = ,f$]al ag5cy procurem5t  
or deploym5t ( any su* sy/em2  7,c7     
imply an endorsem5t ( any su* sy/em by !
 ,director ( ! ,national ,in/itute (    
,/&>ds & ,te*nology2 or  7,d7 preclude  
any ,f$]al ag5cy f procur+ or deploy+   
o!r in=mation te*nology h>dw>e or s(tw>e
 sy/ems = :i* no su* /&>d1 ref]5ce      
mat]ial1 or *eckli/ has be5 develop$ or 
id5tifi$ "u p>agraph 7#a74  4  #aaj4    
,national ,in/itute ( ,/&>ds &          
,te*nology cyb]security rese>* &        
developm5t ,section #bj ( ! ,national   
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bgh;g-#c7 is am5d$ by   
r$esignat+ subsection 7e7 z subsection  
7f71 & by ins]t+ aft] subsection 7d7 !  
foll[+3  7e7 ,intramural security rese>*
 ,z "p ( ! rese>* activities conduct$ 9 
accordance ) subsection 7d77#c71 !      
,in/itute %all--  7#a7 conduct a rese>* 

program to develop a unify+ & /&>diz$   
id5tity1 privilege1 & access control    
managem5t framework = ! execution ( a   
wide v>iety ( res\rce protection        
policies & t is am5able to implem5tation
 )9 a wide v>iety ( exi/+ & em]g+       
comput+ environm5ts2  7#b7 c>ry out     
rese>* associat$ ) improv+ ! security ( 
in=mation sy/ems & networks2  7#c7 c>ry 
out rese>* associat$ ) improv+ ! te/+1  
measurem5t1 usability1 & assurance (    
in=mation sy/ems & networks2  7#d7 c>ry 
out rese>* associat$ ) improv+ security 
( indu/rial control sy/ems2 &  7#e7 c>ry
 out rese>* associat$ ) improv+ !       
security & integrity ( ! in=mation      
te*nology supply *a94  4  #aaa4 ,rese>* 
on ! sci5ce ( cyb]security ,! ,director 
( ! ,national ,sci5ce ,f\ndation & !    
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology %all1 ?r\gh exi/+   
programs & activities1 support rese>* t 
w lead to ! developm5t ( a sci5tific    
f\ndation = ! field ( cyb]security1     
includ+ rese>* t increases und]/&+ ( !  

und]ly+ pr9ciples ( secur+ complex      
network$ sy/ems1 enables repeatable     
exp]im5tation1 & creates quantifiable   
security metrics4  ,,ii ,advancem5t (   
,cyb]security ,te*nical ,/&>ds  #bja4   
,def9itions ,9 ?is title3  7#a7         
,director ,! t]m ,director means !      
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology4  7#b7 ,in/itute ,! 
t]m ,in/itute means ! ,national         
,in/itute ( ,/&>ds & ,te*nology4  #bjb4 
,int]national cyb]security te*nical     
/&>ds  7a7 ,9 g5]al ,! ,director1 9     
coord9ation ) appropriate ,f$]al        
au?orities1 %all--  7#a7 z appropriate1 
ensure coord9ation ( ,f$]al ag5cies     
engag$ 9 ! developm5t ( int]national    
te*nical /&>ds relat$ to in=mation sy/em
 security2 &  7#b7 n lat] ?an #a ye>    
aft] ! date ( enactm5t ( ?is ,act1      
develop & transmit to ! ,congress a plan
 = ensur+ su* ,f$]al ag5cy coord9ation4 
7b7 ,consultation ) ! private sector ,9 
c>ry+ out ! activities specifi$ 9       
subsection 7a77#a71 ! ,director %all    

ensure consultation ) appropriate       
private sector /akehold]s4  #bjc4 ,cl\d 
comput+ /rategy  7a7 ,9 g5]al ,!        
,director1 9 collaboration ) ! ,f$]al   
,,cio ,c\ncil1 & 9 consultation ) o!r   
relevant ,f$]al ag5cies & /akehold]s f !
 private sector1 %all cont9ue to develop
 & enc\rage ! implem5tation ( a         
compreh5sive /rategy = ! use & adoption 
( cl\d comput+ s]vices by ! ,f$]al      
,gov]nm5t4  7b7 ,activities ,9 c>ry+ out
 ! /rategy develop$ "u subsection 7a71 !
 ,director %all give consid]ation to    
activities t--  7#a7 accel]ate !        
developm5t1 9 collaboration ) ! private 
sector1 ( /&>ds t address int]op]ability
 & portability ( cl\d comput+ s]vices2  
7#b7 advance ! developm5t ( con=mance   
te/+ p]=m$ by ! private sector 9 support
 ( cl\d comput+ /&>dization2 &  7#c7    
support1 9 consultation ) ! private     
sector1 ! developm5t ( appropriate      
security frameworks & ref]5ce mat]ials1 
& ! id5tification ( be/ practices1 = use
 by ,f$]al ag5cies to address security &

 privacy requirem5ts to enable ! use &  
adoption ( cl\d comput+ s]vices1 includ+
 activities--  7,a7 to ensure ! physical
 security ( cl\d comput+ data c5t]s & ! 
data /or$ 9 su* c5t]s2  7,b7 to ensure  
secure access to ! data /or$ 9 cl\d     
comput+ data c5t]s2  7,c7 to develop    
security /&>ds z requir$ "u section #bj 
( ! ,national ,in/itute ( ,/&>ds &      
,te*nology ,act 7#ae ,u4,s4,c4          
#bgh;g-#c72 &  7,d7 to support !        
developm5t ( ! automation ( cont9u\s    
monitor+ sy/ems4  #bjd4 ,promot+        
cyb]security aw>5ess & education  7a7   
,program ,! ,director1 9 collaboration )
 relevant ,f$]al ag5cies1 indu/ry1      
educational in/itutions1 ,national      
,laboratories1 ! ,national ,coord9ation 
,(fice ( ! ,network+ & ,in=mation       
,te*nology ,rese>* & ,developm5t        
program1 & o!r organizations1 %all      
cont9ue to coord9ate a cyb]security     
aw>5ess & education program to increase 
k1 skills1 & aw>5ess ( cyb]security     
risks1 consequ5ces1 & be/ practices     

?r\gh--  7#a7 ! widespread dissem9ation 
( cyb]security te*nical /&>ds & be/     
practices id5tifi$ by ! ,in/itute2  7#b7
 ef=ts to make cyb]security be/         
practices usable by individuals1 small  
to m$ium-siz$ bus9esses1 ,/ate1 local1 &
 tribal gov]nm5ts1 & educational        
in/itutions2  7#c7 improv+ ! /ate (     
cyb]security education at all           
educational levels2  7#d7 ef=ts to      
attract1 recruit1 & reta9 qualifi$      
pr(essionals to ! ,f$]al cyb]security   
work=ce2 &  7#e7 improv+ ! skills1      
tra9+1 & pr(essional developm5t ( !     
,f$]al cyb]security work=ce4  7b7       
,/rategic plan ,! ,director %all1 9     
coop]ation ) relevant ,f$]al ag5cies &  
o!r /akehold]s1 develop & implem5t a    
/rategic plan to guide ,f$]al programs &
 activities 9 support ( a compreh5sive  
cyb]security aw>5ess & education program
 z describ$ "u subsection 7a74  7c7     
,report to congress ,n lat] ?an #a ye>  
aft] ! date ( enactm5t ( ?is ,act & e #e
 ye>s !reaft]1 ! ,director %all transmit

 ! /rategic plan requir$ "u subsection  
7b7 to ! ,committee on ,sci5ce1 ,space1 
& ,te*nology ( ! ,h\se ( ,repres5tatives
 & ! ,committee on ,comm]ce1 ,sci5ce1 & 
,transportation ( ! ,s5ate4  #bje4      
,id5tity managem5t rese>* & developm5t  
,! ,director %all cont9ue a program to  
support ! developm5t ( te*nical /&>ds1  
metrology1 te/b$s1 & con=mance crit]ia1 
tak+ into acc\nt appropriate us]        
conc]ns1 to--  7#a7 improve             
int]op]ability among id5tity managem5t  
te*nologies2  7#b7 /r5g!n au!ntication  
me?ods ( id5tity managem5t sy/ems2  7#c7
 improve privacy protection 9 id5tity   
managem5t sy/ems1 includ+ heal?         
in=mation te*nology sy/ems1 ?r\gh       
au!ntication & security protocols2 &    
7#d7 improve ! usability ( id5tity      
managem5t sy/ems4  #bjf4 ,au?orizations 
,no additional funds are au?oriz$ to    
c>ry out ?is ,act1 & ! am5dm5ts made by 
?is ,act4 ,?is ,act1 & ! am5dm5ts made  
by ?is ,act1 %all be c>ri$ out us+      
am\nts o!rwise au?oriz$ or appropriat$4 

,pass$ ! ,h\se ( ,repres5tatives ,april 
#af1 #bjac4;,cl]k4