Arkansas Legal Resource Navigator

15 U.S.C. § 7442 — Federal cybersecurity research and development

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7442 — Federal cybersecurity research and development

**(a) Fundamental cybersecurity research** (1) **Federal cybersecurity research and development strategic plan** — The heads of the applicable agencies and departments, working through the National Science and Technology Council and the Networking and Information Technology Research and Development Program, shall develop and update every 4 years a Federal cybersecurity research and development strategic plan (referred to in this subsection as the “strategic plan”) based on an assessment of cybersecurity risk to guide the overall direction of Federal cybersecurity and information assurance research and development for information technology and networking systems. The heads of the applicable agencies and departments shall build upon existing programs and plans to develop the strategic plan to meet objectives in cybersecurity, such as— (A) how to design and build complex software-intensive systems that are secure and reliable when first deployed; (B) how to test and verify that software and hardware, whether developed locally or obtained from a third party, is free of significant known security flaws; (C) how to test and verify that software and hardware obtained from a third party correctly implements stated functionality, and only that functionality; (D) how to guarantee the privacy of an individual, including that individual’s identity, information, and lawful transactions when stored in distributed systems or transmitted over networks; (E) how to build new protocols to enable the Internet to have robust security as one of the key capabilities of the Internet; (F) how to determine the origin of a message transmitted over the Internet; (G) how to support privacy in conjunction with improved security; (H) how to address the problem of insider thr

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7442

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: 16d4de61fde33272b217ff217a9d029ce8edc22904b647f2c9171307c3500366. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_f0064db353f5491523569b54
Source file: Laws/federal/codes/united-states-code/title-15/section-7442-federal-cybersecurity-research-and-development--541dd33870.md
Pages: Not recorded – Not recorded
Passage SHA-256: e58cf776d8399f4a46f23b92bf34dbf8e64ec4c1bdb1c075e78269ac60f04b08

Source location: Title 15, Chapter 100A, § 7442; chapter-100a-cybersecurity-enhancement.md

Stored source content

**(a) Fundamental cybersecurity research** (1) **Federal cybersecurity research and development strategic plan** — The heads of the applicable agencies and departments, working through the National Science and Technology Council and the Networking and Information Technology Research and Development Program, shall develop and update every 4 years a Federal cybersecurity research and development strategic plan (referred to in this subsection as the “strategic plan”) based on an assessment of cybersecurity risk to guide the overall direction of Federal cybersecurity and information assurance research and development for information technology and networking systems. The heads of the applicable agencies and departments shall build upon existing programs and plans to develop the strategic plan to meet objectives in cybersecurity, such as— (A) how to design and build complex software-intensive systems that are secure and reliable when first deployed; (B) how to test and verify that software and hardware, whether developed locally or obtained from a third party, is free of significant known security flaws; (C) how to test and verify that software and hardware obtained from a third party correctly implements stated functionality, and only that functionality; (D) how to guarantee the privacy of an individual, including that individual’s identity, information, and lawful transactions when stored in distributed systems or transmitted over networks; (E) how to build new protocols to enable the Internet to have robust security as one of the key capabilities of the Internet; (F) how to determine the origin of a message transmitted over the Internet; (G) how to support privacy in conjunction with improved security; (H) how to address the problem of insider threats; (I) how improved consumer education and digital literacy initiatives can address human factors that contribute to cybersecurity; (J) how to protect information processed, transmitted, or stored using cloud computing or transmitted through wireless services; (K) implementation of [section 7432 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7432&num=0&edition=prelim) through research and development on the topics identified under subsection (a) of such section; and (L) any additional objectives the heads of the applicable agencies and departments, in coordination with the head of any relevant Federal agency and with input from stakeholders, including appropriate national laboratories, industry, and academia, determine appropriate. (2) **Requirements** (A) *Contents of plan* — The strategic plan shall— (i) specify and prioritize near-term, mid-term, and long-term research objectives, including objectives associated with the research identified in [section 7403(a)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7403/a/1&num=0&edition=prelim); (ii) specify how the near-term objectives described in clause (i) complement research and development areas in which the private sector is actively engaged; (iii) describe how the heads of the applicable agencies and departments will focus on innovative, transformational technologies with the potential to enhance the security, reliability, resilience, and trustworthiness of the digital infrastructure, and to protect consumer privacy; (iv) describe how the heads of the applicable agencies and departments will foster the rapid transfer of research and development results into new cybersecurity technologies and applications for the timely benefit of society and the national interest, including through the dissemination of best practices and other outreach activities; (v) describe how the heads of the applicable agencies and departments will establish and maintain a national research infrastructure for creating, testing, and evaluating the next generation of secure networking and information technology systems; and (vi) describe how the heads of the applicable agencies and departments will facilitate access by academic researchers to the infrastructure described in clause (v), as well as to relevant data, including event data. (B) *Private sector efforts* — In developing, implementing, and updating the strategic plan, the heads of the applicable agencies and departments, working through the National Science and Technology Council and Networking and Information Technology Research and Development Program, shall work in close cooperation with industry, academia, and other interested stakeholders to ensure, to the extent possible, that Federal cybersecurity research and development is not duplicative of private sector efforts. (C) *Recommendations* — In developing and updating the strategic plan the heads of the applicable agencies and departments shall solicit recommendations and advice from— (i) the advisory committee established under [section 5511(b)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section5511/b/1&num=0&edition=prelim); and (ii) a wide range of stakeholders, including industry, academia, including representatives of minority serving institutions and community colleges, National Laboratories, and other relevant organizations and institutions. (D) *Implementation roadmap* — The heads of the applicable agencies and departments, working through the National Science and Technology Council and Networking and Information Technology Research and Development Program, shall develop and annually update an implementation roadmap for the strategic plan. The implementation roadmap shall— (i) specify the role of each Federal agency in carrying out or sponsoring research and development to meet the research objectives of the strategic plan, including a description of how progress toward the research objectives will be evaluated; (ii) specify the funding allocated to each major research objective of the strategic plan and the source of funding by agency for the current fiscal year; (iii) estimate the funding required for each major research objective of the strategic plan for the following 3 fiscal years; and (iv) track ongoing and completed Federal cybersecurity research and development projects. (3) **Reports to Congress** — The heads of the applicable agencies and departments, working through the National Science and Technology Council and Networking and Information Technology Research and Development Program, shall submit to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Science, Space, and Technology of the House of Representatives— (A) the strategic plan not later than 1 year after December 18, 2014; (B) each quadrennial update to the strategic plan; and (C) the implementation roadmap under subparagraph (D), and its annual updates, which shall be appended to the annual report required under [section 5511(a)(2)(D) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section5511/a/2/D&num=0&edition=prelim). (4) **Definition of applicable agencies and departments** — In this subsection, the term “applicable agencies and departments” means the agencies and departments identified in clauses (i) through (xi) of section 5511(a)(3)(B) 11 See References in Text note below. of this title or designated under clause (xii) of that section. **(b) Cybersecurity practices research** The Director of the National Science Foundation shall support research that— (1) develops, evaluates, disseminates, and integrates new cybersecurity practices and concepts into the core curriculum of computer science programs and of other programs where graduates of such programs have a substantial probability of developing software after graduation, including new practices and concepts relating to secure coding education and improvement programs; and (2) develops new models for professional development of faculty in cybersecurity education, including secure coding development. **(c) Cybersecurity modeling and test beds** (1) **Review** — Not later than 1 year after December 18, 2014, the Director of the National Science Foundation, in coordination with the Director of the Office of Science and Technology Policy, shall conduct a review of cybersecurity test beds in existence on December 18, 2014, to inform the grants under paragraph (2). The review shall include an assessment of whether a sufficient number of cybersecurity test beds are available to meet the research needs under the Federal cybersecurity research and development strategic plan. Upon completion, the Director shall submit the review to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Science, Space, and Technology of the House of Representatives. (2) **Additional cybersecurity modeling and test beds** (A) *In general* — If the Director of the National Science Foundation, after the review under paragraph (1), determines that the research needs under the Federal cybersecurity research and development strategic plan require the establishment of additional cybersecurity test beds, the Director of the National Science Foundation, in coordination with the Secretary of Commerce and the Secretary of Homeland Security, may award grants to institutions of higher education or research and development non-profit institutions to establish cybersecurity test beds. (B) *Requirement* — The cybersecurity test beds under subparagraph (A) shall be sufficiently robust in order to model the scale and complexity of real-time cyber attacks and defenses on real world networks and environments. (C) *Assessment required* — The Director of the National Science Foundation, in coordination with the Secretary of Commerce and the Secretary of Homeland Security, shall evaluate the effectiveness of any grants awarded under this subsection in meeting the objectives of the Federal cybersecurity research and development strategic plan not later than 2 years after the review under paragraph (1) of this subsection, and periodically thereafter. **(d) Coordination with other research initiatives** In accordance with the responsibilities under [section 5511 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section5511&num=0&edition=prelim), the Director of the Office of Science and Technology Policy shall coordinate, to the extent practicable, Federal research and development activities under this section with other ongoing research and development security-related initiatives, including research being conducted by— (1) the National Science Foundation; (2) the National Institute of Standards and Technology; (3) the Department of Homeland Security; (4) other Federal agencies; (5) other Federal and private research laboratories, research entities, and universities; (6) institutions of higher education; (7) relevant nonprofit organizations; and (8) international partners of the United States. **(e) Omitted** **(f) Research on the science of cybersecurity** The head of each agency and department identified under section 5511(a)(3)(B) 1 of this title, through existing programs and activities, shall support research that will lead to the development of a scientific foundation for the field of cybersecurity, including research that increases understanding of the underlying principles of securing complex networked systems, enables repeatable experimentation, and creates quantifiable security metrics.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7403 — National Science Foundation research

**(a) Computer and network security research grants** (1) **In general** — The Director shall award grants for basic research on innovative approaches to the structure of computer and network hardware and software that are aimed at enhancing computer security. Research areas may include— (A) authentication, cryptography, and other secure data communications technology; (B) computer forensics and intrusion detection; (C) reliability of computer and network applications, middleware, operating systems, control systems, and communications infrastructure; (D) privacy and confidentiality; (E) network security architecture, including tools for security administration and analysis; (F) emerging threats; (G) vulnerability assessments and techniques for quantifying risk; (H) remote access and wireless security; (I) enhancement of law enforcement ability to detect, investigate, and prosecute cyber-crimes, including those that involve piracy of intellectual property; (J) secure fundamental protocols that are integral to inter-network communications and data exchange; (K) secure software engineering and software assurance, including— (i) programming languages and systems that include fundamental security features; (ii) portable or reusable code that remains secure when deployed in various environments; (iii) verification and validation technologies to ensure that requirements and specifications have been implemented; and (iv) models for comparison and metrics to assure that required standards have been met; (L) holistic system security that— (i) addresses the building of secure systems from trusted and untrusted components; (ii) proactively reduces vulnerabilities; (iii) addresses insider threats; and (iv)

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7403

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 5511 — Findings

The Congress finds the following: (1) Advances in computer science and technology are vital to the Nation’s prosperity, national and economic security, industrial production, engineering, and scientific advancement. (2) The United States currently leads the world in the development and use of networking and information technology, including high-performance computing, for national security, industrial productivity, science, and engineering, but that lead is being challenged by foreign competitors. (3) Further research and development, expanded educational programs, improved computer research networks, and more effective technology transfer from government to industry are necessary for the United States to reap fully the benefits of networking and information technology, including high-performance computing. (4) A high-capacity, flexible, high-speed national research and education computer network is needed to provide researchers and educators with access to computational and information resources, act as a test bed for further research and development for high-capacity and high-speed computer networks, and provide researchers the necessary vehicle for continued network technology improvement through research. (5) Several Federal agencies have ongoing networking and information technology, including high-performance computing, programs, but improved long-term interagency coordination, cooperation, and planning would enhance the effectiveness of these programs. (6) A 1991 report entitled “Grand Challenges: High-Performance Computing and Communications” by the Office of Science and Technology Policy, outlining a research and development strategy for high-performance computing, provides a framework for a multiagency high-performance computing program. Such a program w

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 5511

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7432 — No regulatory authority

Nothing in this chapter shall be construed to confer any regulatory authority on any Federal, State, tribal, or local department or agency.

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7432

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7461 — Federal Cyber Scholarship-for-Service Program

**(a) In general** The Director of the National Science Foundation, in coordination with the Director of the Office of Personnel Management and Secretary of Homeland Security, shall continue a Federal cyber scholarship-for-service program to recruit and train the next generation of information technology professionals, industrial control system security professionals, and security managers to meet the needs of the cybersecurity mission for Federal, State, local, and tribal governments. **(b) Program description and components** The Federal Cyber Scholarship-for-Service Program shall— (1) provide scholarships through qualified institutions of higher education, including community colleges, to students who are enrolled in programs of study at institutions of higher education leading to degrees or specialized program certifications in the cybersecurity field and cybersecurity-related aspects of other related fields as appropriate, including artificial intelligence, quantum computing and aerospace; (2) provide the scholarship recipients with summer internship opportunities or other meaningful temporary appointments in the Federal information technology and cybersecurity workforce; (3) prioritize the placement of scholarship recipients fulfilling the post-award employment obligation under this section to ensure that— (A) not less than 70 percent of such recipients are placed in an executive agency (as defined in [section 105 of title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section105&num=0&edition=prelim)); (B) not more than 10 percent of such recipients are placed as educators in the field of cybersecurity at qualified institutions of higher education that provide scholarships under this section; and (C) not more than 20 percent o

Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 7461

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 18994 — Graduate STEM education

**(a) Mentoring and professional development** (1) **Mentoring plans** (A) *Omitted* (B) *Evaluation* — Not later than 120 days after August 9, 2022, the Director shall enter into an agreement with a qualified independent organization to evaluate the effectiveness of the postdoctoral mentoring plan requirement for improving mentoring for Foundation-supported postdoctoral researchers. (2) **Career exploration** (A) *In general* — The Director shall make awards, on a competitive basis, to institutions of higher education and nonprofit organizations (or consortia of such institutions or organizations) to develop innovative approaches for facilitating career exploration of academic and nonacademic career options and for providing opportunity-broadening experiences, including work-integrated opportunities, for graduate students and postdoctoral scholars that can then be considered, adopted, or adapted by other institutions and to carry out research on the impact and outcomes of such activities. (B) *Review of proposals* — In selecting award recipients under this subparagraph, the Director shall consider, at a minimum— (i) the extent to which the administrators of the institution are committed to making the proposed activity a priority; and (ii) the likelihood that the institution or organization will sustain or expand the proposed activity effort beyond the period of the award. (3) **Development plans** — The Director shall require that annual project reports for awards that support graduate students and postdoctoral scholars include certification by the principal investigator that each graduate student and postdoctoral scholar receiving substantial support from such award, as determined by 11 So in original. has developed and annually updated an ind

Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 18994

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

15 U.S.C. § 7442 — Federal Cyber Scholarship-for-Service

Page 2362 TITLE 15—COMMERCE AND TRADE § 7442 (8) other areas the Secretary of Commerce, Director of the National Science Foundation, and Secretary of Homeland Security consider necessary to fulfill the cybersecurity mission. (e) Topics In selecting topics for competitions and chal- lenges under subsection (a)(1), the Secretary of Commerce, Director of the National Science Foundation, and Secretary of Homeland Secu- rity— (1) shall consult widely both within and out- side the Federal Government; and (2) may empanel advisory committees. (f) Internships The Director of the Office of Personnel Man- agement may support, as appropriate, intern- ships or other work experience in the Federal Government to the winners of the competitions and challenges under this section. (Pub. L. 113–274, title III, § 301, Dec. 18, 2014, 128 Stat. 2981.) Editorial Notes REFERENCES IN TEXT Section 3719 of this title (as amended by section 105 of the America COMPETES Reauthorization Act of 2010 (124 Stat. 3989)), referred to in subsec. (a)(1), probably means section 3719 of this title as enacted by section 105(a) of Pub. L. 111–358. § 7442. Federal Cyber Scholarship-for-Service Program (a) In general The Director of the National Science Founda- tion, in coordination with the Director of the Office of Personnel Management and Secretary of Homeland Security, shall continue a Federal cyber scholarship-for-service program to recruit and train the next generation of information technology professionals, industrial control sys- tem security professionals, and security man- agers to meet the needs of the cybersecurity mission for Federal, State, local, and tribal gov- ernments. (b) Program description and components The Federal Cyber Scholarship-for-Service Program shall

Source: Supplied 2024 U.S. Code historical extraction · 15 U.S.C. § 7442

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.