,,ii  #aac? ,,congress  #a/ ,session    
,s4 #acec  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #bd1 #bjac ,mr4  
,rockefell] 7= himself & ,mr4 ,?une7    
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to provide = an ongo+1        
volunt>y public-private p>tn]%ip to     
improve cyb]security1 & to /r5g!n       
cyb]security rese>* & developm5t1       
work=ce developm5t & education1 & public
 aw>5ess & prep>$ness1 & = o!r purposes4
  #a4 ,%ort title2 table ( cont5ts  7a7 
,%ort title ,?is ,act may be cit$ z !   
,cyb]security ,act ( #bjac4  7b7 ,table 
( cont5ts ,! table ( cont5ts ( ?is ,act 
is z foll[s3  ,sec4 #a4 ,%ort title2    
table ( cont5ts4 ,sec4 #b4 ,def9itions4 
,sec4 #c4 ,no regulatory au?ority4      
,,title ,i--,public-private             
collaboration on cyb]security ,sec4     
#aja4 ,public-private collaboration on  
cyb]security4 ,,title                   
,,ii--,cyb]security rese>* & developm5t 

,sec4 #bja4 ,f$]al cyb]security rese>* &
 developm5t4 ,sec4 #bjb4 ,comput] &     
network security rese>* c5t]s4 ,,title  
,,iii--,education & ,work=ce ,developm5t
 ,sec4 #cja4 ,cyb]security competitions 
& *all5ges4 ,sec4 #cjb4 ,f$]al cyb]     
s*ol>%ip-=-s]vice program4 ,sec4 #cjc4  
,/udy & analysis ( education1           
accr$itation1 tra9+1 & c]tification (   
in=mation infra/ructure & cyb]security  
pr(essionals4 ,,title                   
,,iv--,cyb]security ,aw>5ess &          
,prep>$ness ,sec4 #dja4 ,national       
cyb]security aw>5ess & prep>$ness       
campaign4  #b4 ,def9itions ,9 ?is ,act3 
7#a7 ,cyb]security mission ,! t]m       
cyb]security mission means activities t 
encompass ! full range ( ?reat r$uction1
 vuln]ability r$uction1 det]r5ce1       
int]national engagem5t1 incid5t         
response1 resili5cy1 & recov]y policies 
& activities1 includ+ comput] network   
op]ations1 in=mation assurance1 law     
en=cem5t1 diplomacy1 milit>y1 &         
intellig5ce missions z su* activities   

relate to ! security & /ability (       
cyb]space4  7#b7 ,in=mation             
infra/ructure ,! t]m in=mation          
infra/ructure means ! und]ly+ framework 
t in=mation sy/ems & assets rely on to  
process1 transmit1 receive1 or /ore     
in=mation electronically1 includ+       
programmable electronic devices1        
communications networks1 & indu/rial or 
sup]visory control sy/ems & any         
associat$ h>dw>e1 s(tw>e1 or data4  7#c7
 ,in=mation sy/em ,! t]m in=mation sy/em
 has ! mean+ giv5 t t]m 9 section #cejb 
( title #dd1 ,unit$ ,/ates ,code4  #c4  
,no regulatory au?ority ,no?+ 9 ?is ,act
 %all be con/ru$ to conf] any regulatory
 au?ority on any ,f$]al1 ,/ate1 tribal1 
or local dep>tm5t or ag5cy4  ,i         
,public-private collaboration on        
cyb]security  #aja4 ,public-private     
collaboration on cyb]security  7a7      
,cyb]security ,section #b7;c7 ( !       
,national ,in/itute ( ,/&>ds &          
,te*nology ,act 7#ae ,u4,s4,c4 #bgb7;c77
 is am5d$--  7#a7 by r$esignat+         

p>agraphs 7#ae7 ?r\gh 7#bb7 z p>agraphs 
7#af7 ?r\gh 7#bc71 respectively2 &  7#b7
 by ins]t+ aft] p>agraph 7#ad7 ! foll[+3
  7#ae7 on an ongo+ basis1 facilitate & 
support ! developm5t ( a volunt>y1      
indu/ry-l$ set ( /&>ds1 guidel9es1 be/  
practices1 me?odologies1 proc$ures1 &   
processes to r$uce cyb] risks to        
critical infra/ructure 7z def9$ "u      
subsection 7e772  4  7b7 ,scope &       
limitations ,section #b ( ! ,national   
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bgb7 is am5d$ by add+ at
 ! end ! foll[+3  7e7 ,cyb] risks  7#a7 
,9 g5]al ,9 c>ry+ out ! activities "u   
subsection 7c77#ae71 ! ,director--  7,a7
 %all--  7i7 coord9ate closely &        
cont9u\sly ) relevant private sector    
p]sonnel & entities1 critical           
infra/ructure own]s & op]ators1 sector  
coord9at+ c\ncils1 ,in=mation ,%>+ &    
,analysis ,c5t]s1 & o!r relevant indu/ry
 organizations1 & incorporate indu/ry   
exp]tise2  7ii7 consult ) ! heads (     
ag5cies ) national security             

responsibilities1 sector-specific       
ag5cies1 ,/ate & local gov]nm5ts1 !     
gov]nm5ts ( o!r nations1 & int]national 
organizations2  7iii7 id5tify a         
prioritiz$1 flexible1 repeatable1       
p]=mance-bas$1 & co/-effective approa*1 
includ+ in=mation security measures &   
controls1 t may be volunt>ily adopt$ by 
own]s & op]ators ( critical             
infra/ructure to help !m id5tify1       
assess1 & manage cyb] risks2  7iv7      
include me?odologies--  7,i7 to id5tify 
& mitigate impacts ( ! cyb]security     
measures or controls on bus9ess         
confid5tiality2 &  7,,ii7 to protect    
individual privacy & civil lib]ties2    
7v7 incorporate volunt>y cons5sus /&>ds 
& indu/ry be/ practices2  7vi7 align )  
volunt>y int]national /&>ds to ! fulle/ 
ext5t possible2  7vii7 prev5t           
duplication ( regulatory processes &    
prev5t conflict ) or sup]s$+ (          
regulatory requirem5ts1 m&atory /&>ds1 &
 relat$ processes2 &  7viii7 include su*
 o!r simil> & consi/5t elem5ts z !      

,director consid]s necess>y2 &  7,b7    
%all n prescribe or o!rwise require--   
7i7 ! use ( specific solutions2  7ii7 ! 
use ( specific in=mation or             
communications te*nology products or    
s]vices2 or  7iii7 t in=mation or       
communications te*nology products or    
s]vices be design$1 develop$1 or        
manufactur$ 9 a p>ticul> mann]4  7#b7   
,limitation ,in=mation %>$ ) or provid$ 
to ! ,in/itute = ! purpose ( !          
activities describ$ "u subsection       
7c77#ae7 %all n be us$ by any ,f$]al1   
,/ate1 tribal1 or local dep>tm5t or     
ag5cy to regulate ! activity ( any      
entity4  7#c7 ,def9itions ,9 ?is        
subsection3  7,a7 ,critical             
infra/ructure ,! t]m critical           
infra/ructure has ! mean+ giv5 ! t]m 9  
section #ajaf7;e7 ( ! ,,usa ,,patriot   
,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774
  7,b7 ,sector-specific ag5cy ,! t]m    
sector-specific ag5cy means ! ,f$]al    
dep>tm5t or ag5cy responsible = provid+ 
in/itutional k & specializ$ exp]tise z  

well z lead+1 facilitat+1 or support+ ! 
security & resili5ce programs &         
associat$ activities ( its designat$    
critical infra/ructure sector 9 !       
all-haz>ds environm5t4  4  ,,ii         
,cyb]security rese>* & developm5t  #bja4
 ,f$]al cyb]security rese>* & developm5t
  7a7 ,fundam5tal cyb]security rese>*   
7#a7 ,9 g5]al ,! ,director ( ! ,(fice ( 
,sci5ce & ,te*nology ,policy1 9         
coord9ation ) ! head ( any relevant     
,f$]al ag5cy1 %all build ^u programs &  
plans 9 effect z ( ! date ( enactm5t (  
?is ,act to develop a ,f$]al            
cyb]security rese>* & developm5t plan to
 meet objectives 9 cyb]security1 su* z--
  7,a7 h[ to design & build complex     
s(tw>e-int5sive sy/ems t are secure &   
reliable :5 fir/ deploy$2  7,b7 h[ to   
te/ & v]ify t s(tw>e & h>dw>e1 :e!r     
develop$ locally or obta9$ f a ?ird     
p>ty1 is free ( significant kn[n        
security flaws2  7,c7 h[ to te/ & v]ify 
t s(tw>e & h>dw>e obta9$ f a ?ird p>ty  
correctly implem5ts /at$ functionality1 

& only t functionality2  7,d7 h[ to     
gu>antee ! privacy ( an individual1     
includ+ t individual's id5tity1         
in=mation1 & lawful transactions :5 /or$
 9 di/ribut$ sy/ems or transmitt$ ov]   
networks2  7,e7 h[ to build new         
protocols to enable ! ,int]net to h     
robu/ security z "o ( ! key capabilities
 ( ! ,int]net2  7,f7 h[ to det]m9e !    
orig9 ( a message transmitt$ ov] !      
,int]net2  7,g7 h[ to support privacy 9 
conjunction ) improv$ security2  7,h7 h[
 to address ! gr[+ problem ( insid]     
?reats2  7,i7 h[ improv$ consum]        
education & digital lit]acy initiatives 
c address human factors t contribute to 
cyb]security2  7,j7 h[ to protect       
in=mation process$1 transmitt$1 or /or$ 
us+ cl\d comput+ or transmitt$ ?r\gh    
wireless s]vices2 &  7,k7 any additional
 objectives ! ,director ( ! ,(fice (    
,sci5ce & ,te*nology ,policy1 9         
coord9ation ) ! head ( any relevant     
,f$]al ag5cy & ) input f /akehold]s1    
includ+ indu/ry & academia1 det]m9es    

appropriate4  7#b7 ,requirem5ts  7,a7 ,9
 g5]al ,! ,f$]al cyb]security rese>* &  
developm5t plan %all id5tify &          
prioritize ne>-t]m1 mid-t]m1 & long-t]m 
rese>* 9 comput] & in=mation sci5ce &   
eng9e]+ to meet ! objectives "u p>agraph
 7#a71 includ+ rese>* 9 ! areas describ$
 9 section #d7;a77#a7 ( ! ,cyb]         
,security ,rese>* & ,developm5t ,act    
7#ae ,u4,s4,c4 #gdjc7;a77#a774  7,b7    
,private sector ef=ts ,9 develop+1      
implem5t+1 & updat+ ! ,f$]al            
cyb]security rese>* & developm5t plan1 !
 ,director ( ! ,(fice ( ,sci5ce &       
,te*nology ,policy %all "w 9 close      
coop]ation ) indu/ry1 academia1 & o!r   
int]e/$ /akehold]s to ensure1 to ! ext5t
 possible1 t ,f$]al cyb]security rese>* 
& developm5t is n duplicative ( private 
sector ef=ts4  7#c7 ,tri5nial updates   
7,a7 ,9 g5]al ,! ,f$]al cyb]security    
rese>* & developm5t plan %all be updat$ 
tri5nially4  7,b7 ,report to ,congress  
,! ,director ( ! ,(fice ( ,sci5ce &     
,te*nology ,policy %all submit ! plan1 n

 lat] ?an #a ye> aft] ! date ( enactm5t 
( ?is ,act1 & ea* updat$ plan "u ?is    
section to ! ,committee on ,comm]ce1    
,sci5ce1 & ,transportation ( ! ,s5ate & 
! ,committee on ,sci5ce1 ,space1 &      
,te*nology ( ! ,h\se ( ,repres5tatives4 
7b7 ,cyb]security practices rese>* ,!   
,director ( ! ,national ,sci5ce         
,f\ndation %all support rese>* t--  7#a7
 develops1 evaluates1 dissem9ates1 &    
integrates new cyb]security practices & 
concepts into ! core curriculum (       
comput] sci5ce programs & ( o!r programs
 :]e graduates ( su* programs h a       
sub/antial probability ( develop+ s(tw>e
 aft] graduation1 includ+ new practices 
& concepts relat+ to secure cod+        
education & improvem5t programs2 &  7#b7
 develops new models = pr(essional      
developm5t ( faculty 9 cyb]security     
education1 includ+ secure cod+          
developm5t4  7c7 ,cyb]security model+ & 
te/ b$s  7#a7 ,review ,n lat] ?an #a ye>
 aft] ! date ( enactm5t ( ?is ,act1 !   
,director ! ,national ,sci5ce           

,f\ndation1 9 coord9ation ) ! ,director 
( ! ,(fice ( ,sci5ce & ,te*nology       
,policy1 %all conduct a review (        
cyb]security te/ b$s 9 exi/5ce on ! date
 ( enactm5t ( ?is ,act to in=m ! grants 
"u p>agraph 7#b74 ,! review %all include
 an assessm5t ( :e!r a suffici5t numb] (
 cyb]security te/ b$s are available to  
meet ! rese>* ne$s "u ! ,f$]al          
cyb]security rese>* & developm5t plan4  
7#b7 ,additional cyb]security model+ &  
te/ b$s  7,a7 ,9 g5]al ,if ! ,director (
 ! ,national ,sci5ce ,f\ndation1 aft] ! 
review "u p>agraph 7#a71 det]m9es t !   
rese>* ne$s "u ! ,f$]al cyb]security    
rese>* & developm5t plan require !      
e/abli%m5t ( additional cyb]security te/
 b$s1 ! ,director ( ! ,national ,sci5ce 
,f\ndation1 9 coord9ation ) ! ,secret>y 
( ,comm]ce & ! ,secret>y ( ,homel&      
,security1 may aw>d grants to           
in/itutions ( high] education or rese>* 
& developm5t non-pr(it in/itutions to   
e/abli% cyb]security te/ b$s4  7,b7     
,requirem5t ,! cyb]security te/ b$s "u  

subp>agraph 7,a7 %all be suffici5tly    
l>ge 9 ord] to model ! scale &          
complexity ( real-"t cyb] attacks &     
def5ses on real _w networks &           
environm5ts4  7,c7 ,assessm5t requir$ ,!
 ,director ( ! ,national ,sci5ce        
,f\ndation1 9 coord9ation ) ! ,secret>y 
( ,comm]ce & ! ,secret>y ( ,homel&      
,security1 %all evaluate ! effectiv5ess 
( any grants aw>d$ "u ?is subsection 9  
meet+ ! objectives ( ! ,f$]al           
cyb]security rese>* & developm5t plan "u
 subsection 7a7 no lat] ?an #b ye>s aft]
 ! review "u p>agraph 7#a7 ( ?is        
subsection1 & p]iodically !reaft]4  7d7 
,coord9ation ,) ,o!r ,rese>*            
,initiatives ,9 accordance ) !          
responsibilities "u section #aja ( !    
,high-,p]=mance ,comput+ ,act ( #aiia   
7#ae ,u4,s4,c4 #eeaa71 ! ,director !    
,(fice ( ,sci5ce & ,te*nology ,policy   
%all coord9ate1 to ! ext5t practicable1 
,f$]al rese>* & developm5t activities "u
 ?is section ) o!r ongo+ rese>* &       
developm5t security-relat$ initiatives1 

includ+ rese>* be+ conduct$ by--  7#a7 !
 ,national ,sci5ce ,f\ndation2  7#b7 !  
,national ,in/itute ( ,/&>ds &          
,te*nology2  7#c7 ! ,dep>tm5t ( ,homel& 
,security2  7#d7 o!r ,f$]al ag5cies2    
7#e7 o!r ,f$]al & private rese>*        
laboratories1 rese>* entities1 &        
univ]sities2  7#f7 in/itutions ( high]  
education2  7#g7 relevant nonpr(it      
organizations2 &  7#h7 int]national     
p>tn]s ( ! ,unit$ ,/ates4  7e7 ,national
 ,sci5ce ,f\ndation ,comput] & ,network 
,security ,rese>* ,grant ,areas ,section
 #d7;a77#a7 ( ! ,cyb] ,security ,rese>* 
& ,developm5t ,act 7#ae ,u4,s4,c4       
#gdjc7;a77#a77 is am5d$--  7#a7 9       
subp>agraph 7,h71 by /rik+ & at ! end2  
7#b7 9 subp>agraph 7,i71 by /rik+ !     
p]iod at ! end & ins]t+ a semicolon2 &  
7#c7 by add+ at ! end ! foll[+3  7,j7   
secure fundam5tal protocols t are       
integral to int]-network communications 
& data ex*ange2  7,k7 secure s(tw>e     
eng9e]+ & s(tw>e assurance1 includ+--   
7i7 programm+ languages & sy/ems t      

include fundam5tal security features2   
7ii7 portable or reusable code t rema9s 
secure :5 deploy$ 9 v>i\s environm5ts2  
7iii7 v]ification & validation          
te*nologies to ensure t requirem5ts &   
specifications h be5 implem5t$2 &  7iv7 
models = comp>ison & metrics to assure t
 requir$ /&>ds h be5 met2  7,l7 holi/ic 
sy/em security t--  7i7 addresses !     
build+ ( secure sy/ems f tru/$ & untru/$
 compon5ts2  7ii7 proactively r$uces    
vuln]abilities2  7iii7 addresses insid] 
?reats2 &  7iv7 supports privacy 9      
conjunction ) improv$ security2  7,m7   
monitor+ & detection2  7,n7 mitigation &
 rapid recov]y me?ods2  7,o7 security ( 
wireless networks & mobile devices2 &   
7,p7 security ( cl\d infra/ructure &    
s]vices4  4  7f7 ,rese>* on ! sci5ce (  
cyb]security ,! head ( ea* ag5cy &      
dep>tm5t id5tifi$ "u section            
#aja7;a77#c77;,b7 ( ! ,high-,p]=mance   
,comput+ ,act ( #aiia 7#ae ,u4,s4,c4    
#eeaa7;a77#c77;,b771 ?r\gh exi/+        
programs & activities1 %all support     

rese>* t w lead to ! developm5t ( a     
sci5tific f\ndation = ! field (         
cyb]security1 includ+ rese>* t increases
 und]/&+ ( ! und]ly+ pr9ciples ( secur+ 
complex network$ sy/ems1 enables        
repeatable exp]im5tation1 & creates     
quantifiable security metrics4  #bjb4   
,comput] & network security rese>* c5t]s
 ,section #d7;b7 ( ! ,cyb] ,security    
,rese>* & ,developm5t ,act 7#ae         
,u4,s4,c4 #gdjc7;b77 is am5d$--  7#a7 by
 /rik+ ! c5t] 9 p>agraph 7#d77;,d7 &    
ins]t+ ! ,c5t]2 &  7#b7 9 p>agraph      
7#e7--  7,a7 by /rik+ & at ! end (      
subp>agraph 7,c72  7,b7 by /rik+ ! p]iod
 at ! end ( subp>agraph 7,d7 & ins]t+ a 
semicolon2 &  7,c7 by add+ at ! end !   
foll[+3  7,e7 ! demon/rat$ capability ( 
! applicant to conduct high p]=mance    
computation integral to complex comput] 
& network security rese>*1 ?r\gh on-site
 or (f-site comput+2  7,f7 ! applicant's
 affiliation ) private sector entities  
involv$ ) indu/rial rese>* describ$ 9   
subsection 7a77#a72  7,g7 ! capability (

 ! applicant to conduct rese>* 9 a      
secure environm5t2  7,h7 ! applicant's  
affiliation ) exi/+ rese>* programs ( ! 
,f$]al ,gov]nm5t2  7,i7 ! applicant's   
exp]i5ce manag+ public-private p>tn]%ips
 to transition new te*nologies into a   
comm]cial sett+ or ! gov]nm5t us]       
community2 &  7,j7 ! capability ( !     
applicant to conduct int]discipl9>y     
cyb]security rese>*1 su* z 9 law1       
economics1 or behavioral sci5ces4  4    
,,iii ,education & ,work=ce ,developm5t 
#cja4 ,cyb]security competitions &      
*all5ges  7a7 ,9 g5]al ,! ,secret>y (   
,comm]ce1 ,director ( ! ,national       
,sci5ce ,f\ndation1 & ,secret>y (       
,homel& ,security %all--  7#a7 support  
competitions & *all5ges "u section #aje 
( ! ,am]ica ,,competes ,reau?orization  
,act ( #bjaj 7#abd ,/at4 #cihi7 or any  
o!r provision ( law1 z appropriate--    
7,a7 to id5tify1 develop1 & recruit     
tal5t$ individuals to p]=m duties relat+
 to ! security ( in=mation infra/ructure
 9 ,f$]al1 ,/ate1 & local gov]nm5t      

ag5cies1 & ! private sector2 or  7,b7 to
 /imulate innovation 9 basic & appli$   
cyb]security rese>*1 te*nology          
developm5t1 & prototype demon/ration t  
has ! pot5tial = application to !       
in=mation te*nology activities ( !      
,f$]al ,gov]nm5t2 &  7#b7 ensure !      
effective op]ation ( ! competitions &   
*all5ges "u ?is section4  7b7           
,p>ticipation ,p>ticipants 9 !          
competitions & *all5ges "u subsection   
7a77#a7 may include--  7#a7 /ud5ts      
enroll$ 9 grades #i ?r\gh #ab2  7#b7    
/ud5ts enroll$ 9 a po/second>y program (
 /udy lead+ to a baccalaureate degree at
 an in/itution ( high] education2  7#c7 
/ud5ts enroll$ 9 a po/baccalaureate     
program ( /udy at an in/itution ( high] 
education2  7#d7 in/itutions ( high]    
education & rese>* in/itutions2  7#e7   
vet]ans2 &  7#f7 o!r gr\ps or           
individuals t ! ,secret>y ( ,comm]ce1   
,director ( ! ,national ,sci5ce         
,f\ndation1 & ,secret>y ( ,homel&       
,security det]m9e appropriate4  7c7     

,affiliation & coop]ative agreem5ts     
,competitions & *all5ges "u ?is section 
may be c>ri$ out ?r\gh affiliation &    
coop]ative agreem5ts )--  7#a7 ,f$]al   
ag5cies2  7#b7 regional1 ,/ate1 or s*ool
 programs support+ ! developm5t ( cyb]  
pr(essionals2  7#c7 ,/ate1 local1 &     
tribal gov]nm5ts2 or  7#d7 o!r private  
sector organizations4  7d7 ,areas (     
skill ,competitions & *all5ges "u       
subsection 7a77#a77;,a7 %all be design$ 
to id5tify1 develop1 & recruit          
exceptional tal5t relat+ to--  7#a7     
e?ical hack+2  7#b7 p5etration te/+2    
7#c7 vuln]ability assessm5t2  7#d7      
cont9uity ( sy/em op]ations2  7#e7      
security 9 design2  7#f7 cyb] =5sics2   
7#g7 (f5sive & def5sive cyb] op]ations2 
&  7#h7 o!r areas ! ,secret>y (         
,comm]ce1 ,director ( ! ,national       
,sci5ce ,f\ndation1 & ,secret>y (       
,homel& ,security consid] necess>y to   
fulfill ! cyb]security mission4  7e7    
,topics ,9 select+ topics = competitions
 & *all5ges "u subsection 7a77#a71 !    

,secret>y ( ,comm]ce1 ,director ( !     
,national ,sci5ce ,f\ndation1 &         
,secret>y ( ,homel& ,security--  7#a7   
%all consult widely bo? )9 & outside !  
,f$]al ,gov]nm5t2 &  7#b7 may empanel   
advisory committees4  7f7 ,int]n%ips ,! 
,director ( ! ,(fice ( ,p]sonnel        
,managem5t may support1 z appropriate1  
int]n%ips or o!r "w exp]i5ce 9 ! ,f$]al 
,gov]nm5t to ! w9n]s ( ! competitions & 
*all5ges "u ?is section4  #cjb4 ,f$]al  
cyb] s*ol>%ip-=-s]vice program  7a7 ,9  
g5]al ,! ,director ( ! ,national ,sci5ce
 ,f\ndation1 9 coord9ation ) ! ,director
 ( ! ,(fice ( ,p]sonnel ,managem5t &    
,secret>y ( ,homel& ,security1 %all     
cont9ue a ,f$]al ,cyb]                  
,s*ol>%ip-=-,s]vice program to recruit &
 tra9 ! next g5]ation ( in=mation       
te*nology pr(essionals1 indu/rial       
control sy/em security pr(essionals1 &  
security manag]s to meet ! ne$s ( !     
cyb]security mission = ,f$]al1 ,/ate1   
local1 & tribal gov]nm5ts4  7b7 ,program
 description & compon5ts ,! ,f$]al ,cyb]

 ,s*ol>%ip-=-,s]vice program %all--     
7#a7 provide s*ol>%ips to /ud5ts :o are 
enroll$ 9 programs ( /udy at in/itutions
 ( high] education lead+ to degrees or  
specializ$ program c]tifications 9 !    
cyb]security field2  7#b7 provide !     
s*ol>%ip recipi5ts ) summ] int]n%ip     
opportunities or o!r mean+ful tempor>y  
appo9tm5ts 9 ! ,f$]al in=mation         
te*nology work=ce2 &  7#c7 provide a    
proc$ure by :i* ! ,national ,sci5ce     
,f\ndation or a ,f$]al ag5cy1 consi/5t )
 regulations ( ! ,(fice ( ,p]sonnel     
,managem5t1 may reque/ & fund security  
cle>ances = s*ol>%ip recipi5ts1 includ+ 
provid+ = cle>ances dur+ int]n%ips or   
o!r tempor>y appo9tm5ts & aft] receipt (
 _! degrees4  7c7 ,s*ol>%ip am\nts ,ea* 
s*ol>%ip "u subsection 7b7 %all be 9 an 
am\nt t cov]s ! /ud5t's tuition & fees  
at ! in/itution "u subsection 7b77#a7 & 
provides ! /ud5t ) an additional /ip5d4 
7d7 ,s*ol>%ip ,conditions ,ea* s*ol>%ip 
recipi5t1 z a condition ( receiv+ a     
s*ol>%ip "u ! program1 %all ent] into an

 agreem5t "u :i* ! recipi5t agrees to "w
 9 ! cyb]security mission ( a ,f$]al1   
,/ate1 local1 or tribal ag5cy = a p]iod 
equal to ! l5g? ( ! s*ol>%ip foll[+     
receipt ( ! /ud5t's degree4  7e7 ,hir+  
au?ority  7#a7 ,appo9tm5t 9 except$     
s]vice ,not)/&+ any provision ( *apt]   
#cc ( title #e1 ,unit$ ,/ates ,code1    
gov]n+ appo9tm5ts 9 ! competitive       
s]vice1 an ag5cy %all appo9t 9 ! except$
 s]vice an individual :o has complet$ ! 
academic program = :i* a s*ol>%ip 0     
aw>d$4  7#b7 ,noncompetitive conv]sion  
,except z provid$ 9 p>agraph 7#d71 ^u   
fulfillm5t ( ! s]vice t]m1 an employee  
appo9t$ "u p>agraph 7#a7 may be conv]t$ 
noncompetitively to t]m1                
c>e]-conditional or c>e] appo9tm5t4     
7#c7 ,tim+ ( conv]sion ,an ag5cy may    
noncompetitively conv]t a t]m employee  
appo9t$ "u p>agraph 7#b7 to a           
c>e]-conditional or c>e] appo9tm5t be=e 
! t]m appo9tm5t expires4  7#d7 ,au?ority
 to decl9e conv]sion ,an ag5cy may      
decl9e to make ! noncompetitive         

conv]sion or appo9tm5t "u p>agraph 7#b7 
= cause4  7f7 ,eligibility ,to be       
eligible to receive a s*ol>%ip "u ?is   
section1 an individual %all--  7#a7 be a
 citiz5 or lawful p]man5t resid5t ( !   
,unit$ ,/ates2  7#b7 demon/rate a       
commitm5t to a c>e] 9 improv+ ! security
 ( in=mation infra/ructure2 &  7#c7 h   
demon/rat$ a high level ( pr(ici5cy 9   
ma!matics1 eng9e]+1 or comput] sci5ces4 
7g7 ,repaym5t ,if a s*ol>%ip recipi5t   
does n meet ! t]ms ( ! program "u ?is   
section1 ! recipi5t %all refund !       
s*ol>%ip paym5ts 9 accordance ) rules   
e/abli%$ by ! ,director ( ! ,national   
,sci5ce ,f\ndation1 9 coord9ation ) !   
,director ( ! ,(fice ( ,p]sonnel        
,managem5t & ,secret>y ( ,homel&        
,security4  7h7 ,evaluation & report ,! 
,director ( ! ,national ,sci5ce         
,f\ndation %all evaluate & report       
p]iodically to ,congress on ! success ( 
recruit+ individuals = s*ol>%ips "u ?is 
section & on hir+ & reta9+ ^?           
individuals 9 ! public sector work=ce4  

#cjc4 ,/udy & analysis ( education1     
accr$itation1 tra9+1 & c]tification (   
in=mation infra/ructure & cyb]security  
pr(essionals  7a7 ,/udy ,! ,director ( !
 ,national ,sci5ce ,f\ndation & !       
,secret>y ( ,homel& ,security %all      
und]take to ent] into appropriate       
arrangem5ts ) ! ,national ,academy (    
,sci5ces to conduct a compreh5sive /udy 
( gov]nm5t1 academic1 & private-sector  
education1 accr$itation1 tra9+1 &       
c]tification programs = ! developm5t (  
pr(essionals 9 in=mation infra/ructure &
 cyb]security4 ,! agreem5t %all require 
! ,national ,academy ( ,sci5ces to      
consult ) sector coord9at+ c\ncils &    
relevant gov]nm5tal ag5cies1 regulatory 
entities1 & nongov]nm5tal organizations 
9 ! c\rse ( ! /udy4  7b7 ,scope ,! /udy 
%all include--  7#a7 an evaluation ( !  
body ( k & v>i\s skills t specific      
categories ( pr(essionals 9 in=mation   
infra/ructure & cyb]security %\ld       
possess 9 ord] to secure in=mation      
sy/ems2  7#b7 an assessm5t ( :e!r exi/+ 

gov]nm5t1 academic1 & private-sector    
education1 accr$itation1 tra9+1 &       
c]tification programs provide ! body ( k
 & v>i\s skills describ$ 9 p>agraph     
7#a72  7#c7 an evaluation (--  7,a7 !   
/ate ( cyb]security education at        
in/itutions ( high] education 9 ! ,unit$
 ,/ates2  7,b7 ! ext5t ( pr(essional    
developm5t opportunities = faculty 9    
cyb]security pr9ciples & practices2     
7,c7 ! ext5t ( ! p>tn]%ips &            
collaborative cyb]security curriculum   
developm5t activities t lev]age indu/ry 
& gov]nm5t ne$s1 res\rces1 & tools2     
7,d7 ! propos$ metrics to assess        
progress t[>d improv+ cyb]security      
education2 &  7,e7 ! descriptions ( !   
cont5t ( cyb]security c\rses 9          
und]graduate comput] sci5ce curriculum2 
7#d7 an analysis ( any b>ri]s to !      
,f$]al ,gov]nm5t recruit+ & hir+        
cyb]security tal5t1 includ+ b>ri]s      
relat+ to comp5sation1 ! hir+ process1  
job classification1 & hir+ flexibility2 
&  7#e7 an analysis ( ! s\rces &        

availability ( cyb]security tal5t1 a    
comp>ison ( ! skills & exp]tise s\ght by
 ! ,f$]al ,gov]nm5t & ! private sector1 
an exam9ation ( ! curr5t & future       
capacity ( ,unit$ ,/ates in/itutions (  
high] education1 includ+ community      
colleges1 to provide curr5t & future    
cyb]security pr(essionals1 ?r\gh        
education & tra9+ activities1 ) ^?      
skills s\ght by ! ,f$]al ,gov]nm5t1     
,/ate & local entities1 & ! private     
sector4  7c7 ,report ,n lat] ?an #a ye> 
aft] ! date ( enactm5t ( ?is ,act1 !    
,national ,academy ( ,sci5ces %all      
submit to ! ,presid5t & ,congress a     
report on ! results ( ! /udy4 ,! report 
%all include--  7#a7 f9d+s reg>d+ ! /ate
 ( in=mation infra/ructure &            
cyb]security education1 accr$itation1   
tra9+1 & c]tification programs1 includ+ 
specific areas ( defici5cy & demon/rable
 progress2 &  7#b7 recomm5dations =     
fur!r rese>* & ! improvem5t ( in=mation 
infra/ructure & cyb]security education1 
accr$itation1 tra9+1 & c]tification     

programs4  ,,iv ,cyb]security ,aw>5ess &
 ,prep>$ness  #dja4 ,national           
cyb]security aw>5ess & prep>$ness       
campaign  7a7 ,national cyb]security    
aw>5ess & prep>$ness campaign ,!        
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology 7ref]r$ to 9 ?is    
section z ! ,director71 9 consultation )
 appropriate ,f$]al ag5cies1 %all       
cont9ue to coord9ate a national         
cyb]security aw>5ess & prep>$ness       
campaign1 su* z--  7#a7 a campaign to   
increase public aw>5ess ( cyb]security1 
cyb] safety1 & cyb] e?ics1 includ+ ! use
 ( ! ,int]net1 social m$ia1 ent]ta9m5t1 
& o!r m$ia to rea* ! public2  7#b7 a    
campaign to increase ! und]/&+ ( ,/ate &
 local gov]nm5ts & private sector       
entities (--  7,a7 ! b5efits ( ensur+   
effective risk managem5t ( ! in=mation  
infra/ructure v]sus ! co/s ( failure to 
d s2 &  7,b7 ! me?ods to mitigate &     
rem$iate vuln]abilities2  7#c7 support =
 =mal cyb]security education programs at
 all education levels to prep>e skill$  

cyb]security & comput] sci5ce work]s = !
 private sector & ,f$]al1 ,/ate1 & local
 gov]nm5t2 &  7#d7 initiatives to       
evaluate & =eca/ future cyb]security    
work=ce ne$s ( ! ,f$]al gov]nm5t &      
develop /rategies = recruitm5t1 tra9+1 &
 ret5tion4  7b7 ,consid]ations ,9 c>ry+ 
out ! au?ority describ$ 9 subsection    
7a71 ! ,director1 9 consultation )      
appropriate ,f$]al ag5cies1 %all lev]age
 exi/+ programs design$ to in=m ! public
 ( safety & security ( products or      
s]vices1 includ+ self-c]tifications &   
indep5d5tly v]ifi$ assessm5ts reg>d+ !  
quantification & valuation ( in=mation  
security risk4  7c7 ,/rategic plan ,!   
,director1 9 coop]ation ) relevant      
,f$]al ag5cies & o!r /akehold]s1 %all   
build ^u programs & plans 9 effect z ( !
 date ( enactm5t ( ?is ,act to develop &
 implem5t a /rategic plan to guide      
,f$]al programs & activities 9 support (
 ! national cyb]security aw>5ess &      
prep>$ness campaign "u subsection 7a74  
7d7 ,report ,n lat] ?an #a ye> aft] !   

date ( enactm5t ( ?is ,act1 & e #e ye>s 
!reaft]1 ! ,director %all transmit !    
/rategic plan "u subsection 7c7 to !    
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation ( ! ,s5ate & !          
,committee on ,sci5ce1 ,space1 &        
,te*nology ( ! ,h\se ( ,repres5tatives4