Arkansas Legal Resource Navigator

15 U.S.C. § 278h — Research program on security of computer systems

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 278h — Research program on security of computer systems

**(a) Establishment** The Director shall establish a program of assistance to institutions of higher education that enter into partnerships with for-profit entities to support research to improve the security of computer systems. The partnerships may also include government laboratories and nonprofit research institutions. The program shall— (1) include multidisciplinary, long-term research; (2) include research directed toward addressing needs identified through the activities of the Computer System Security 11 So in original. Probably should be “Information Security”. and Privacy Advisory Board under section 278g–3(f) 22 See References in Text note below. of this title; and (3) promote the development of a robust research community working at the leading edge of knowledge in subject areas relevant to the security of computer systems by providing support for graduate students, post-doctoral researchers, and senior researchers. **(b) Fellowships** (1) **Post-doctoral research fellowships** — The Director is authorized to establish a program to award post-doctoral research fellowships to individuals who are citizens, nationals, or lawfully admitted permanent resident aliens of the United States and are seeking research positions at institutions, including the Institute, engaged in research activities related to the security of computer systems, including the research areas described in [section 7403(a)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7403/a/1&num=0&edition=prelim). (2) **Senior research fellowships** — The Director is authorized to establish a program to award senior research fellowships to individuals seeking research positions at institutions, including the Institute, engaged in research activities rel

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 278h

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: c5e201686b0bc2a05d659156fb1abb62da18b4487b5e82ed4fdf987aa98fa4d7. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_369cafa08595c397ec1f4a76
Source file: Laws/federal/codes/united-states-code/title-15/section-278h-research-program-on-security-of-computer-systems--8dd3857edc.md
Pages: Not recorded – Not recorded
Passage SHA-256: 55b61a1855fbf3f0b6b113243edcc9302e06f9b9b50547471ae07460b941f8e0

Source location: Title 15, Chapter 7, § 278h; chapter-007-national-institute-of-standards-and-technology.md

Stored source content

**(a) Establishment** The Director shall establish a program of assistance to institutions of higher education that enter into partnerships with for-profit entities to support research to improve the security of computer systems. The partnerships may also include government laboratories and nonprofit research institutions. The program shall— (1) include multidisciplinary, long-term research; (2) include research directed toward addressing needs identified through the activities of the Computer System Security 11 So in original. Probably should be “Information Security”. and Privacy Advisory Board under section 278g–3(f) 22 See References in Text note below. of this title; and (3) promote the development of a robust research community working at the leading edge of knowledge in subject areas relevant to the security of computer systems by providing support for graduate students, post-doctoral researchers, and senior researchers. **(b) Fellowships** (1) **Post-doctoral research fellowships** — The Director is authorized to establish a program to award post-doctoral research fellowships to individuals who are citizens, nationals, or lawfully admitted permanent resident aliens of the United States and are seeking research positions at institutions, including the Institute, engaged in research activities related to the security of computer systems, including the research areas described in [section 7403(a)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7403/a/1&num=0&edition=prelim). (2) **Senior research fellowships** — The Director is authorized to establish a program to award senior research fellowships to individuals seeking research positions at institutions, including the Institute, engaged in research activities related to the security of computer systems, including the research areas described in [section 7403(a)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7403/a/1&num=0&edition=prelim). Senior research fellowships shall be made available for established researchers at institutions of higher education who seek to change research fields and pursue studies related to the security of computer systems. (3) **Eligibility** (A) *In general* — To be eligible for an award under this subsection, an individual shall submit an application to the Director at such time, in such manner, and containing such information as the Director may require. (B) *Stipends* — Under this subsection, the Director is authorized to provide stipends for post-doctoral research fellowships at the level of the Institute’s Post Doctoral Research Fellowship Program and senior research fellowships at levels consistent with support for a faculty member in a sabbatical position. **(c) Awards; applications** (1) **In general** — The Director is authorized to award grants or cooperative agreements to institutions of higher education to carry out the program established under subsection (a). No funds made available under this section shall be made available directly to any for-profit partners. (2) **Eligibility** — To be eligible for an award under this section, an institution of higher education shall submit an application to the Director at such time, in such manner, and containing such information as the Director may require. The application shall include, at a minimum, a description of— (A) the number of graduate students anticipated to participate in the research project and the level of support to be provided to each; (B) the number of post-doctoral research positions included under the research project and the level of support to be provided to each; (C) the number of individuals, if any, intending to change research fields and pursue studies related to the security of computer systems to be included under the research project and the level of support to be provided to each; and (D) how the for-profit entities, nonprofit research institutions, and any other partners will participate in developing and carrying out the research and education agenda of the partnership. **(d) Program operation** (1) **Management** — The program established under subsection (a) shall be managed by individuals who shall have both expertise in research related to the security of computer systems and knowledge of the vulnerabilities of existing computer systems. The Director shall designate such individuals as program managers. (2) **Managers may be employees** — Program managers designated under paragraph (1) may be new or existing employees of the Institute or individuals on assignment at the Institute under the Intergovernmental Personnel Act of 1970 [[42 U.S.C. 4701](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section4701&num=0&edition=prelim) et seq.], except that individuals on assignment at the Institute under the Intergovernmental Personnel Act of 1970 shall not directly manage such employees. (3) **Manager responsibility** — Program managers designated under paragraph (1) shall be responsible for— (A) establishing and publicizing the broad research goals for the program; (B) soliciting applications for specific research projects to address the goals developed under subparagraph (A); (C) selecting research projects for support under the program from among applications submitted to the Institute, following consideration of— (i) the novelty and scientific and technical merit of the proposed projects; (ii) the demonstrated capabilities of the individual or individuals submitting the applications to successfully carry out the proposed research; (iii) the impact the proposed projects will have on increasing the number of computer security researchers; (iv) the nature of the participation by for-profit entities and the extent to which the proposed projects address the concerns of industry; and (v) other criteria determined by the Director, based on information specified for inclusion in applications under subsection (c); and (D) monitoring the progress of research projects supported under the program. (4) **Reports** — The Director shall report to the Senate Committee on Commerce, Science, and Transportation and the House of Representatives Committee on Science annually on the use and responsibility of individuals on assignment at the Institute under the Intergovernmental Personnel Act of 1970 [[42 U.S.C. 4701](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section4701&num=0&edition=prelim) et seq.] who are performing duties under subsection (d). **(e) Review of program** (1) **Periodic review** — The Director shall periodically review the portfolio of research awards monitored by each program manager designated in accordance with subsection (d). In conducting those reviews, the Director shall seek the advice of the Computer System Security 1 and Privacy Advisory Board, established under [section 278g–4 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g-4&num=0&edition=prelim), on the appropriateness of the research goals and on the quality and utility of research projects managed by program managers in accordance with subsection (d). (2) **Comprehensive 5-year review** — The Director shall also contract with the National Research Council for a comprehensive review of the program established under subsection (a) during the 5th year of the program. Such review shall include an assessment of the scientific quality of the research conducted, the relevance of the research results obtained to the goals of the program established under subsection (d)(3)(A), and the progress of the program in promoting the development of a substantial academic research community working at the leading edge of knowledge in the field. The Director shall submit to Congress a report on the results of the review under this paragraph no later than 6 years after the initiation of the program. **(f) Definitions** In this section: (1) **Computer system** — The term “computer system” has the meaning given that term in section 278g–3(d)(1) 2 of this title. (2) **Institution of higher education** — The term “institution of higher education” has the meaning given that term in [section 1001(a) of title 20](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title20-section1001/a&num=0&edition=prelim).

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

5 U.S.C. § 1304 — Loyalty investigations; reports; revolving fund

**(a)** The Office of Personnel Management shall conduct the investigations and issue the reports required by the following statutes— (1) sections 272b, 281b(e), and 290a of title 22; (2) [section 1874(c) of title 42](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section1874/c&num=0&edition=prelim); and (3) [section 1203(e) of title 6](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1203/e&num=0&edition=prelim), District of Columbia Code. **(b)** When an investigation under subsection (a) of this section develops data indicating that the loyalty of the individual being investigated is questionable, the Office shall refer the matter to the Federal Bureau of Investigation for a full field investigation, a report of which shall be furnished to the Office for its information and appropriate action. **(c)** When the President considers it in the national interest, he may have the investigations of a group or class, which are required by subsection (a) of this section, made by the Federal Bureau of Investigation rather than the Office. **(d)** The investigation and report required by subsection (a) of this section shall be made by the Federal Bureau of Investigation rather than the Office for those specific positions which the Secretary of State certifies are of a high degree of importance or sensitivity. **(e)** (1) A revolving fund is available, to the Office without fiscal year limitation, for financing investigations, training, and such other functions as the Office is authorized or required to perform on a reimbursable basis, including personnel management services performed at the request of individual agencies (which would otherwise be the responsibility of such agencies), or at the request of nonappropriated fu

Source: Supplied U.S. Code snapshot — release unconfirmed · 5 U.S.C. § 1304

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 246 — Grants and services to States

**(a) Comprehensive health planning and services** (1) In order to assist the States in comprehensive and continuing planning for their current and future health needs, the Secretary is authorized during the period beginning July 1, 1966, and ending June 30, 1973, to make grants to States which have submitted, and had approved by the Secretary, State plans for comprehensive State health planning. For the purposes of carrying out this subsection, there are hereby authorized to be appropriated $2,500,000 for the fiscal year ending June 30, 1967, $7,000,000 for the fiscal year ending June 30, 1968, $10,000,000 for the fiscal year ending June 30, 1969, $15,000,000 for the fiscal year ending June 30, 1970, $15,000,000 for the fiscal year ending June 30, 1971, $17,000,000 for the fiscal year ending June 30, 1972, $20,000,000 for the fiscal year ending June 30, 1973, and $10,000,000 for the fiscal year ending June 30, 1974. (2) In order to be approved for purposes of this subsection, a State plan for comprehensive State health planning must— (A) designate, or provide for the establishment of, a single State agency, which may be an interdepartmental agency, as the sole agency for administering or supervising the administration of the State’s health planning functions under the plan; (B) provide for the establishment of a State health planning council, which shall include representatives of Federal, State, and local agencies (including as an ex officio member, if there is located in such State one or more hospitals or other health care facilities of the Department of Veterans Affairs, the individual whom the Secretary of Veterans Affairs shall have designated to serve on such council as the representative of the hospitals or other health care facilities of such Departmen

Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 246

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 278q — Appropriations; availability

Appropriations to carry out the provisions of this chapter may remain available for obligation and expenditure for such period or periods as may be specified in the Acts making such appropriations.

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 278q

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 4701 — Method of payment; installments; advances or reimbursement; adjustments

Payments under this chapter may be made in installments, and in advance or by way of reimbursement, as the Office may determine, with necessary adjustments on account of overpayments or underpayments.

Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 4701

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

20 U.S.C. § 869b — Repealed. Pub. L. 91–648, title IV, § 403, Jan. 5, 1971, 84 Stat. 1925

### Statutory Notes Section, Pub. L. 89–10, title V, § 553, formerly § 507, Apr. 11, 1965, 79 Stat. 51, amended Pub. L. 89–750, title I, § 153, Nov. 3, 1966, 80 Stat. 1204; renumbered and amended Pub. L. 91–230, title I, § 143(a)(3), Apr. 13, 1970, 84 Stat. 142, relating to interchange of personnel of Office of Education with States, provided in subsec. (a), definitions; subsec. (b), authorization for interchange and period of assignment; subsec. (c), Federal personnel assigned to States, compensation, continuation of Federal employment benefits, and disability; subsec. (d), reimbursement by States for services of assigned Federal personnel; subsec. (e), travel expenses of assigned Federal personnel; subsec. (f), State personnel assigned duty with Office of Education; subsec. (g), conflict of interest, disability of State personnel assigned with Office of Education; subsec. (h), travel expenses of assigned personnel; and subsec. (i), assignments of personnel subject to regulations of Commissioner. #### Effective Date of Repeal Repeal effective sixty days after Jan. 5, 1971, see section 404 of Pub. L. 91–648, set out as an Effective Date note under [section 3371 of Title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section3371&num=0&edition=prelim), Government Organization and Employees.

Source: Supplied U.S. Code snapshot — release unconfirmed · 20 U.S.C. § 869b

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

5 U.S.C. § 3371 — Definitions

For the purpose of this subchapter— (1) “State” means— (A) a State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, the Trust Territory of the Pacific Islands, and a territory or possession of the United States; and (B) an instrumentality or authority of a State or States as defined in subparagraph (A) of this paragraph (1) and a Federal-State authority or instrumentality; (2) “local government” means— (A) any political subdivision, instrumentality, or authority of a State or States as defined in subparagraph (A) of paragraph (1); (B) any general or special purpose agency of such a political subdivision, instrumentality, or authority; and (C) any Indian tribe, band, nation, or other organized group or community, including any Alaska Native village as defined in the Alaska Native Claims Settlement Act (85 Stat. 688), which is recognized as eligible for the special programs and services provided by the United States to Indians because of their status as Indians and includes any tribal organization as defined in section 4 of the Indian Self-Determination and Education Assistance Act; (3) “Federal agency” means an Executive agency, military department, a court of the United States, the Administrative Office of the United States Courts, the Library of Congress, the Botanic Garden, the Government Publishing Office, the Congressional Budget Office, the United States Postal Service, the Postal Regulatory Commission, the Office of the Architect of the Capitol, the Office of Technology Assessment, and such other similar agencies of the legislative and judicial branches as determined appropriate by the Office of Personnel Management; and (4) “other organization” means— (A) a national, regional, State-wide, area-wide, or metropo

Source: Supplied U.S. Code snapshot — release unconfirmed · 5 U.S.C. § 3371

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7401 — Findings

The Congress finds the following: (1) Revolutionary advancements in computing and communications technology have interconnected government, commercial, scientific, and educational infrastructures—including critical infrastructures for electric power, natural gas and petroleum production and distribution, telecommunications, transportation, water supply, banking and finance, and emergency and government services—in a vast, interdependent physical and electronic network. (2) Exponential increases in interconnectivity have facilitated enhanced communications, economic growth, and the delivery of services critical to the public welfare, but have also increased the consequences of temporary or prolonged failure. (3) A Department of Defense Joint Task Force concluded after a 1997 United States information warfare exercise that the results “clearly demonstrated our lack of preparation for a coordinated cyber and physical attack on our critical military and civilian infrastructure”. (4) Computer security technology and systems implementation lack— (A) sufficient long term research funding; (B) adequate coordination across Federal and State government agencies and among government, academia, and industry; and (C) sufficient numbers of outstanding researchers in the field. (5) Accordingly, Federal investment in computer and network security research and development must be significantly increased to— (A) improve vulnerability assessment and technological and systems solutions; (B) expand and improve the pool of information security professionals, including researchers, in the United States workforce; and (C) better coordinate information sharing and collaboration among industry, government, and academic research projects. (6) While African-Americans, Hispa

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7401

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7406 — National Institute of Standards and Technology programs

**(a) , (b) Omitted** **(c) Security automation and checklists for Government systems** (1) **In general** — The Director of the National Institute of Standards and Technology shall, as necessary, develop and revise security automation standards, associated reference materials (including protocols), and checklists providing settings and option selections that minimize the security risks associated with each information technology hardware or software system and security tool that is, or is likely to become, widely used within the Federal Government, thereby enabling standardized and interoperable technologies, architectures, and frameworks for continuous monitoring of information security within the Federal Government. (2) **Priorities for development** — The Director of the National Institute of Standards and Technology shall establish priorities for the development of standards, reference materials, and checklists under this subsection on the basis of— (A) the security risks associated with the use of the system; (B) the number of agencies that use a particular system or security tool; (C) the usefulness of the standards, reference materials, or checklists to Federal agencies that are users or potential users of the system; (D) the effectiveness of the associated standard, reference material, or checklist in creating or enabling continuous monitoring of information security; or (E) such other factors as the Director of the National Institute of Standards and Technology determines to be appropriate. (3) **Excluded systems** — The Director of the National Institute of Standards and Technology may exclude from the application of paragraph (1) any information technology hardware or software system or security tool for which such Director determines that

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7406

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7407 — Authorization of appropriations

There are authorized to be appropriated to the Secretary of Commerce for the National Institute of Standards and Technology— (1) for activities under [section 278h of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278h&num=0&edition=prelim)— (A) $25,000,000 for fiscal year 2003; (B) $40,000,000 for fiscal year 2004; (C) $55,000,000 for fiscal year 2005; (D) $70,000,000 for fiscal year 2006; (E) $85,000,000 for fiscal year 2007; and (2) for activities under section 278g–3(f) 11 See References in Text note below. of this title— (A) $6,000,000 for fiscal year 2003; (B) $6,200,000 for fiscal year 2004; (C) $6,400,000 for fiscal year 2005; (D) $6,600,000 for fiscal year 2006; and (E) $6,800,000 for fiscal year 2007.

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7407

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 278h — Research program on security of com-

Page 679 TITLE 15—COMMERCE AND TRADE § 278h 1 So in original. Probably should be ‘‘Information Security’’. 2 See References in Text note below. acquire the expertise, equipment, and training necessary to participate fully in supply chains using enterprise integration. (Pub. L. 107–277, § 3, Nov. 5, 2002, 116 Stat. 1936; Pub. L. 113–188, title II, § 201(b), Nov. 26, 2014, 128 Stat. 2018; Pub. L. 114–329, title V, § 501(e)(2), Jan. 6, 2017, 130 Stat. 3033.) Editorial Notes REFERENCES IN TEXT This Act, referred to in subsec. (c), is Pub. L. 107–277, Nov. 5, 2002, 116 Stat. 1936, known as the Enterprise In- tegration Act of 2002, which enacted this section and provisions set out as a note under this section. For complete classification of this Act to the Code, see Ta- bles. CODIFICATION Section was enacted as part of the Enterprise Inte- gration Act of 2002, and not as part of the National In- stitute of Standards and Technology Act which com- prises this chapter. AMENDMENTS 2017—Subsec. (a). Pub. L. 114–329 inserted ‘‘Hollings’’ before ‘‘Manufacturing Extension Partnership’’. 2014—Subsecs. (c) to (e). Pub. L. 113–188 redesignated subsecs. (d) and (e) as (c) and (d), respectively, and struck out former subsec. (c) which required annual re- ports on the National Institute of Standards and Tech- nology’s activities under subsec. (b). Statutory Notes and Related Subsidiaries ENTERPRISE INTEGRATION Pub. L. 107–277, Nov. 5, 2002, 116 Stat. 1936, provided that: ‘‘SECTION. 1. SHORT TITLE. ‘‘This Act [enacting this section and this note] may be cited as the ‘Enterprise Integration Act of 2002’. ‘‘SEC. 2. FINDINGS. ‘‘The Congress makes the following findings: ‘‘(1) Over 90 percent of United States companies en- gaged in manufacturing are small- and medium-

Source: Supplied 2024 U.S. Code historical extraction · 15 U.S.C. § 278h

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.