Browse Arkansas Code titles and sections
42 U.S.C. § 18937 — Dissemination of resources for research institutions
Federal law — U.S. Code and appendices · legal_authorities
**(a) Dissemination of resources for research institutions**
(1) **In general** — Not later than one year after August 9, 2022, the Director shall, using the authorities of the Director under subsections (c)(15) and (e)(1)(A)(ix) of [section 272 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section272&num=0&edition=prelim), disseminate and make publicly available tailored resources to help qualifying institutions identify, assess, manage, and reduce their cybersecurity risk related to conducting research.
(2) **Requirements** — The Director shall ensure that the resources disseminated pursuant to paragraph (1)—
(A) are generally applicable and usable by a wide range of qualifying institutions;
(B) vary with the nature and size of the qualifying institutions, and the nature and sensitivity of the data collected or stored on the information systems or devices of the qualifying institutions;
(C) include elements that promote awareness of simple, basic controls, a workplace cybersecurity culture, and third-party stakeholder relationships, to assist qualifying institutions in mitigating common cybersecurity risks;
(D) include case studies, examples, and scenarios of practical application;
(E) are outcomes-based and can be implemented using a variety of technologies that are commercial and off-the-shelf; and
(F) to the extent practicable, are based on international technical standards.
(3) **National cybersecurity awareness and education program** — The Director shall ensure that the resources disseminated under paragraph (1) are consistent with the efforts of the Director under [section 7443 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7443&num=0&edition=prelim).
(4) **Updat
Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 18937
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 6dafa44db96ae4eea39859cd179da5867ce8bff4059dd62c24667cde8bb6fa52. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_5caa5b3fe64b9c60408af7d9
Source file: Laws/federal/codes/united-states-code/title-42/section-18937-dissemination-of-resources-for-research-institutions--0da0dd9659.md
Pages: Not recorded – Not recorded
Passage SHA-256: b42b0c0f7146c712fa5ab9341d7973c71f3c4562cc8730d5e6c64b3a07e117bc
Source location: Title 42, Chapter 163, § 18937; chapter-163-research-and-development-competition-and-innovation.md
Stored source content
**(a) Dissemination of resources for research institutions**
(1) **In general** — Not later than one year after August 9, 2022, the Director shall, using the authorities of the Director under subsections (c)(15) and (e)(1)(A)(ix) of [section 272 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section272&num=0&edition=prelim), disseminate and make publicly available tailored resources to help qualifying institutions identify, assess, manage, and reduce their cybersecurity risk related to conducting research.
(2) **Requirements** — The Director shall ensure that the resources disseminated pursuant to paragraph (1)—
(A) are generally applicable and usable by a wide range of qualifying institutions;
(B) vary with the nature and size of the qualifying institutions, and the nature and sensitivity of the data collected or stored on the information systems or devices of the qualifying institutions;
(C) include elements that promote awareness of simple, basic controls, a workplace cybersecurity culture, and third-party stakeholder relationships, to assist qualifying institutions in mitigating common cybersecurity risks;
(D) include case studies, examples, and scenarios of practical application;
(E) are outcomes-based and can be implemented using a variety of technologies that are commercial and off-the-shelf; and
(F) to the extent practicable, are based on international technical standards.
(3) **National cybersecurity awareness and education program** — The Director shall ensure that the resources disseminated under paragraph (1) are consistent with the efforts of the Director under [section 7443 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7443&num=0&edition=prelim).
(4) **Updates** — The Director shall review periodically and update the resources under paragraph (1) as the Director determines appropriate.
(5) **Voluntary resources** — The use of the resources disseminated under paragraph (1) shall be considered voluntary.
**(b) Other Federal cybersecurity requirements** Nothing in this section may be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to Federal agencies.
**(c) Definitions** In this section:
(1) **Qualifying institutions** — The term “qualifying institutions” means institutions of higher education that are awarded in excess of $50,000,000 per year in total Federal research funding.
(2) **Resources** — The term “resources” means guidelines, tools, best practices, technical standards, methodologies, and other ways of providing information.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Establishment of national cybersecurity challenges**
(1) **In general** — To achieve high-priority breakthroughs in cybersecurity by 2028, the Secretary of Commerce shall establish the following national cybersecurity challenges:
(A) *Economics of a cyber attack* — Building more resilient systems that measurably and exponentially raise adversary costs of carrying out common cyber attacks.
(B) *Cyber training*
(i) Empowering the people of the United States with an appropriate and measurably sufficient level of digital literacy to make safe and secure decisions online.
(ii) Developing a cybersecurity workforce with measurable skills to protect and maintain information systems.
(C) *Emerging technology* — Advancing cybersecurity efforts in response to emerging technology, such as artificial intelligence, quantum science, next generation communications, autonomy, data science, and computational technologies.
(D) *Reimagining digital identity* — Maintaining a high sense of usability while improving the privacy, security, and safety of online activity of individuals in the United States.
(E) *Federal agency resilience* — Reducing cybersecurity risks to Federal networks and systems, and improving the response of Federal agencies to cybersecurity incidents on such networks and systems.
(2) **Coordination** — In establishing the challenges under paragraph (1), the Secretary shall coordinate with the Secretary of Homeland Security on the challenges under subparagraphs (B) and (E) of such paragraph.
**(b) Pursuit of national cybersecurity challenges**
(1) **In general** — Not later than 180 days after January 1, 2021, the Secretary, acting through the Under Secretary of Commerce for Standards and Technology, shall commence efforts to pursue the n
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7443
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Establishment of National Institute of Standards and Technology** There is established within the Department of Commerce a science, engineering, technology, and measurement laboratory to be known as the National Institute of Standards and Technology (hereafter in this chapter referred to as the “Institute”).
**(b) Functions of Secretary and Institute** The Secretary of Commerce (hereafter in this chapter referred to as the “Secretary”) acting through the Director of the Institute (hereafter in this chapter referred to as the “Director”) is authorized to serve as the President’s principal adviser on standards policy pertaining to the Nation’s technological competitiveness and innovation ability and to take all actions necessary and appropriate to accomplish the purposes of this chapter, including the following functions of the Institute—
(1) to assist industry in the development of technology and procedures needed to improve quality, to modernize manufacturing processes, to ensure product reliability, manufacturability, functionality, and cost-effectiveness, and to facilitate the more rapid commercialization, especially by small- and medium-sized companies throughout the United States, of products based on new scientific discoveries in fields such as automation, electronics, advanced materials, biotechnology, and optical technologies;
(2) to develop, maintain, and retain custody of the national standards of measurement, and provide the means and methods for making measurements consistent with those standards;
(3) to facilitate standards-related information sharing and cooperation between Federal agencies and to coordinate the use by Federal agencies of private sector standards, emphasizing where possible the use of standards developed by private, consensus orga
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 272
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 9263
TITLE 42—THE PUBLIC HEALTH AND WELFARE
§ 18937
(D) produce public-facing reports of the
findings from such testing for a general au-
dience;
(E) develop policies and procedures ac-
counting for the legal and social implica-
tions of activities under this paragraph when
working with a foreign entity of concern (as
such term is defined in section 19221 of this
title);
(F) establish procedures to prioritize test-
ing of biometrics identification technologies
developed by entities headquartered in the
United States; and
(G) conduct such other activities as deter-
mined necessary by the Director.
(c) GAO report to Congress
Not later than 18 months after August 9, 2022,
the Comptroller General of the United States
shall submit a detailed report to Congress on
the impact of biometric identification tech-
nologies on historically marginalized commu-
nities, including low-income communities and
minority religious, racial, and ethnic groups.
Such report should be made publicly available
on an internet website.
(Pub. L. 117–167, div. B, title II, § 10226, Aug. 9,
2022, 136 Stat. 1479.)
§ 18935. Dissemination of resources for research
institutions
(a) Dissemination of resources for research insti-
tutions
(1) In general
Not later than one year after August 9, 2022,
the Director shall, using the authorities of the
Director
under
subsections
(c)(15)
and
(e)(1)(A)(ix) of section 272 of title 15, dissemi-
nate and make publicly available tailored re-
sources to help qualifying institutions iden-
tify,
assess,
manage,
and
reduce
their
cybersecurity risk related to conducting re-
search.
(2) Requirements
The Director shall ensure that the resources
disseminated pursuant to paragraph (1)—
(A) are generally applicable and usable by
a wide
Source: Supplied 2024 U.S. Code historical extraction · 42 U.S.C. § 18937
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.