42 U.S.C. § 18935 — Dissemination of resources for research

Page 9263 TITLE 42—THE PUBLIC HEALTH AND WELFARE § 18937 (D) produce public-facing reports of the findings from such testing for a general au- dience; (E) develop policies and procedures ac- counting for the legal and social implica- tions of activities under this paragraph when working with a foreign entity of concern (as such term is defined in section 19221 of this title); (F) establish procedures to prioritize test- ing of biometrics identification technologies developed by entities headquartered in the United States; and (G) conduct such other activities as deter- mined necessary by the Director. (c) GAO report to Congress Not later than 18 months after August 9, 2022, the Comptroller General of the United States shall submit a detailed report to Congress on the impact of biometric identification tech- nologies on historically marginalized commu- nities, including low-income communities and minority religious, racial, and ethnic groups. Such report should be made publicly available on an internet website. (Pub. L. 117–167, div. B, title II, § 10226, Aug. 9, 2022, 136 Stat. 1479.) § 18935. Dissemination of resources for research institutions (a) Dissemination of resources for research insti- tutions (1) In general Not later than one year after August 9, 2022, the Director shall, using the authorities of the Director under subsections (c)(15) and (e)(1)(A)(ix) of section 272 of title 15, dissemi- nate and make publicly available tailored re- sources to help qualifying institutions iden- tify, assess, manage, and reduce their cybersecurity risk related to conducting re- search. (2) Requirements The Director shall ensure that the resources disseminated pursuant to paragraph (1)— (A) are generally applicable and usable by a wide range of qualifying institutions; (B) vary with the nature and size of the qualifying institutions, and the nature and sensitivity of the data collected or stored on the information systems or devices of the qualifying institutions; (C) include elements that promote aware- ness of simple, basic controls, a workplace cybersecurity culture, and third-party stakeholder relationships, to assist quali- fying institutions in mitigating common cybersecurity risks; (D) include case studies, examples, and scenarios of practical application; (E) are outcomes-based and can be imple- mented using a variety of technologies that are commercial and off-the-shelf; and (F) to the extent practicable, are based on international technical standards. (3) National cybersecurity awareness and edu- cation program The Director shall ensure that the resources disseminated under paragraph (1) are con- sistent with the efforts of the Director under section 7443 of title 15. (4) Updates The Director shall review periodically and update the resources under paragraph (1) as the Director determines appropriate. (5) Voluntary resources The use of the resources disseminated under paragraph (1) shall be considered voluntary. (b) Other Federal cybersecurity requirements Nothing in this section may be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to Fed- eral agencies. (c) Definitions In this section: (1) Qualifying institutions The term ‘‘qualifying institutions’’ means institutions of higher education that are awarded in excess of $50,000,000 per year in total Federal research funding. (2) Resources The term ‘‘resources’’ means guidelines, tools, best practices, technical standards, methodologies, and other ways of providing in- formation. (Pub. L. 117–167, div. B, title II, § 10229, Aug. 9, 2022, 136 Stat. 1481.) § 18936. Neutron scattering (a) Strategic plan for the Institute neutron reac- tor The Director shall develop a strategic plan for the future of the NIST Center for Neutron Re- search after the current neutron reactor is de- commissioned, including— (1) a succession plan for the reactor, includ- ing a roadmap with timeline and milestones; (2) conceptual design of a new reactor and accompanying facilities, as appropriate; and (3) a plan to minimize disruptions to the user community during the transition. (b) Coordination with the Department of Energy The Secretary, acting through the Director, shall coordinate with the Secretary of Energy on issues related to Federal support for neutron science, including estimation of long-term needs for research using neutron sources, and planning efforts for future facilities to meet such needs. (c) Report to Congress Not later than 30 months after August 9, 2022, the Director shall submit to Congress the plan required under subsection (a), and shall notify Congress of any substantial updates to such plan in subsequent years. (Pub. L. 117–167, div. B, title II, § 10231, Aug. 9, 2022, 136 Stat. 1483.) § 18937. Artificial intelligence The Director shall continue to support the de- velopment of artificial intelligence and data science, and carry out the activities of the Na- tional Artificial Intelligence Initiative Act of 2020 authorized in division E of the National De-