Browse Arkansas Code titles and sections

42 U.S.C. § 18935 — Software security and authentication

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 18935 — Software security and authentication

**(a) Vulnerabilities in open source software** The Director shall assign severity metrics to identified vulnerabilities with open source software and produce voluntary guidance to assist the entities that maintain open source software repositories to discover and mitigate vulnerabilities. **(b) Artificial intelligence-enabled defenses** The Director shall carry out research and testing to improve the effectiveness of artificial intelligence-enabled cybersecurity, including by generating optimized data sets to train artificial intelligence defense systems and evaluating the performance of varying network architectures at strengthening network security. **(c) Authentication of Institute software** The Director shall ensure all software released by the Institute is digitally signed and maintained to enable stakeholders to verify its authenticity and integrity upon installation and execution. **(d) Assistance to Inspectors General** Subject to available funding, the Director shall provide technical assistance to improve the education and training of individual Federal agency Inspectors General and staff who are responsible for the annual independent evaluation they are required to perform of the information security program and practices of Federal agencies under [section 3555 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3555&num=0&edition=prelim). **(e) Software supply chain security practices** (1) **In general** — The Director shall, in coordination with industry, academia, and other Federal agencies, as appropriate, develop a set of security outcomes and practices, including security controls, control enhancements, supplemental guidance, or other supporting information to enable software developers and operators to ident

Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 18935

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: 14890152fe5ff4cbdb863983b63ea5e48918634c7f087c5d862ee498041bef63. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_dd372e1e8fca69249e783659
Source file: Laws/federal/codes/united-states-code/title-42/section-18935-software-security-and-authentication--39a1faa842.md
Pages: Not recorded – Not recorded
Passage SHA-256: b9c7ab072c0327fa56ad6e8af2aaff3035d3dcb8a609ff9bb9605531cc24fa11

Source location: Title 42, Chapter 163, § 18935; chapter-163-research-and-development-competition-and-innovation.md

Stored source content

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3555 — Annual independent evaluation

**(a) In General.—** (1) Each year each agency shall have performed an independent evaluation of the information security program and practices of that agency to determine the effectiveness of such program and practices. (2) Each evaluation under this section shall include— (A) testing of the effectiveness of information security policies, procedures, and practices of a representative subset of the agency’s information systems; (B) an assessment of the effectiveness of the information security policies, procedures, and practices of the agency; and (C) separate presentations, as appropriate, regarding information security relating to national security systems. **(b) Independent Auditor.—** Subject to subsection (c)— (1) for each agency with an Inspector General appointed under chapter 4 of title 5, the annual evaluation required by this section shall be performed by the Inspector General or by an independent external auditor, as determined by the Inspector General of the agency; and (2) for each agency to which paragraph (1) does not apply, the head of the agency shall engage an independent external auditor to perform the evaluation. **(c) National Security Systems.—** For each agency operating or exercising control of a national security system, that portion of the evaluation required by this section directly relating to a national security system shall be performed— (1) only by an entity designated by the agency head; and (2) in such a manner as to ensure appropriate protection for information associated with any information security vulnerability in such system commensurate with the risk and in accordance with all applicable laws. **(d) Existing Evaluations.—** The evaluation required by this section may be based in whole or in part on an audit, eval

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3555

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 18935 — Dissemination of resources for research

Page 9263 TITLE 42—THE PUBLIC HEALTH AND WELFARE § 18937 (D) produce public-facing reports of the findings from such testing for a general au- dience; (E) develop policies and procedures ac- counting for the legal and social implica- tions of activities under this paragraph when working with a foreign entity of concern (as such term is defined in section 19221 of this title); (F) establish procedures to prioritize test- ing of biometrics identification technologies developed by entities headquartered in the United States; and (G) conduct such other activities as deter- mined necessary by the Director. (c) GAO report to Congress Not later than 18 months after August 9, 2022, the Comptroller General of the United States shall submit a detailed report to Congress on the impact of biometric identification tech- nologies on historically marginalized commu- nities, including low-income communities and minority religious, racial, and ethnic groups. Such report should be made publicly available on an internet website. (Pub. L. 117–167, div. B, title II, § 10226, Aug. 9, 2022, 136 Stat. 1479.) § 18935. Dissemination of resources for research institutions (a) Dissemination of resources for research insti- tutions (1) In general Not later than one year after August 9, 2022, the Director shall, using the authorities of the Director under subsections (c)(15) and (e)(1)(A)(ix) of section 272 of title 15, dissemi- nate and make publicly available tailored re- sources to help qualifying institutions iden- tify, assess, manage, and reduce their cybersecurity risk related to conducting re- search. (2) Requirements The Director shall ensure that the resources disseminated pursuant to paragraph (1)— (A) are generally applicable and usable by a wide

Source: Supplied 2024 U.S. Code historical extraction · 42 U.S.C. § 18935

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.