US Codex
Bill
Notes

H.R. 6229 — what changed

National Institute of Standards and Technology Reauthorization Act of 2018

From Reported in House to Engrossed in House. 3 sections amended between Reported in House and Engrossed in House.

Sec. 4 Cybersecurity research

(a)
removed Assistance to Federal agencies— The Secretary, acting through the Director, shall enhance and expand the Institute’s guidance and assistance to Federal agencies to help such agencies effectively use the Framework, including by providing technical guidance and education and training of—
(1)
removed agency staff responsible for cybersecurity; and
(2)
removed individual inspectors general and staff of such agencies who are responsible for the annual independent evaluation required under section 3555 of title 44, United States Code.
(b)
removed Report— Not later than 12 months after the date of the enactment of this Act, the Secretary shall submit to the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate a report describing the implementation of the activities described in this section in as much detail as possible, including the identification of Federal agencies assisted pursuant to subsection (a) and the types of consultative services, education, guidance, assistance, and training provided to such agencies and inspectors general of such agencies pursuant to such subsection.
(a)
renumbered was (4) Research— The Secretary, acting through the Director, shall expand the fundamental and applied research carried out by the Institute to address key questions relating the measurement of privacy, security, and vulnerability of software tools and communications networks, including through—
(1)
renumbered was (4)(3) the development of research and engineering capabilities to provide practical solutions, including measurement techniques and engineering toolkits, to solve cybersecurity challenges such as human factors, identity management, network security, privacy, and software;
(2)
renumbered was (4)(4) investment in tools to help private and public sector organizations measure their cybersecurity, manage their risks and ensure workforce preparedness for new cybersecurity challenges; and
(3)
renumbered was (4)(5) investment in programs to prepare the United States with strong cybersecurity and encryption technologies to apply to emerging technologies such as artificial intelligence, the internet of things, and quantum computing.
(b)
renumbered was (5) Authority— The Secretary, acting through the Director, shall have the authority to enter into and perform such contracts on such terms as the Secretary considers to be appropriate, including cooperative research and development arrangements, grants, and cooperative agreements or other transactions, as may be necessary in the conduct of the work of the Institute with respect to cybersecurity.

Sec. 6 Artificial intelligence and data science

The Secretary, acting through the Director, shall continue to support the development of artificial intelligence and data science, including through—

(1)
the expansion of the Institute’s capabilities, including scientific staff and research infrastructure;
(2)
changed the implementation of rigorous scientific testing to support the development of trustworthy and safe artificial intelligence and data systems; andsystems;
(3)
changed the development of machine learning and other artificial intelligence applications to support measurement science research programs and take steps to modernize the Institute’s research infrastructure.infrastructure; and
(4)
added the development and publication of new cybersecurity tools, encryption methods, and best practices for artificial intelligence and data science.

Sec. 8 Hiring and management

(a)
changed Appointments—Direct hire authority— The Secretary, acting through the Director shall have the authority to—Director, may—
(1)
changed make appointments appoint, without regard to the provisions of subchapter I of chapter 33 of title 5, United States Code (other than sections 3303, 3328, and 3330e of such chapter), qualified candidates to scientific, engineering, and professional personnel without regard to the civil service laws as the Secretary, acting through the Director determines necessary positions for carrying out research and development functions which require the services of specially qualified personnel relating to cybersecurity and quantum information science and technology and such other areas of national research priorities as the Secretary, acting through the Director Director, may determine; and
(2)
changed fix the rate of basic pay of such personnel any individual appointed under paragraph (1), at a rate to be determined by the Secretary, acting through the Director at rates not in excess of the basic rate of pay of the Vice President under section 104 of title 3, United States Code, without regard to the civil service laws.title 5, United States Code.
(b)
Limitation— The Director may appoint not more than 10 individuals under this section.
(c)
added Sunset— The authority under this section shall expire on the date that is 5 years after the date of enactment of this Act.