[Congressional Record Volume 164, Number 94 (Thursday, June 7, 2018)]
[Senate]
[Pages S3373-S3374]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]
SA 2547. Mrs. SHAHEEN (for herself and Mr. Coons) submitted an
amendment intended to be proposed to amendment SA 2282 submitted by Mr.
Inhofe (for himself and Mr. McCain) and intended to be proposed to the
bill H.R. 5515, to authorize appropriations for fiscal year 2019 for
military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:
Strike section 1626 and insert the following:
SEC. 1626. ASSISTANCE FOR SMALL MANUFACTURERS IN THE DEFENSE
INDUSTRIAL SUPPLY CHAIN ON MATTERS RELATING TO
CYBERSECURITY.
(a) Dissemination of Cybersecurity Resources.--
(1) In general.--The Under Secretary of Defense for
Research and Engineering, in consultation with the Director
of the National Institute of Standards and Technology and the
Administrator of the Small Business Administration, shall
take such actions as may be necessary to enhance awareness of
cybersecurity threats among small manufacturers in the
defense industrial supply chain.
(2) Priority.--The Under Secretary of Defense for Research
and Engineering shall prioritize efforts to increase
awareness to help reduce cybersecurity risks faced by small
manufacturers described in paragraph (1), including through
the use of small business development centers and the
Hollings Manufacturing Extension Partnership.
(3) Sector focus.--The Under Secretary of Defense for
Research and Engineering shall carry out this subsection with
a focus on such industry sectors as the Under Secretary
considers critical.
(4) Outreach events.--Under paragraph (1), the Under
Secretary of Defense for Research and Engineering shall
conduct outreach to support activities consistent with this
section. Such outreach may include live events with a
physical presence and outreach conducted through Internet
websites.
(b) Voluntary Cybersecurity Self-assessments.--The Under
Secretary of Defense for Research and Engineering shall
develop mechanisms to provide assistance to help small
manufacturers conduct voluntary self-assessments in order to
understand operating environments, cybersecurity
requirements, and existing vulnerabilities, including through
the Mentor Protege Program, small business programs, and
engagements with defense laboratories and test ranges.
(c) Transfer of Research Findings and Expertise.--
(1) In general.--The Under Secretary of Defense for
Research and Engineering shall promote the transfer of
appropriate technology and techniques developed in the
Department of Defense to small manufacturers throughout the
United States to implement security measures that are
adequate to protect covered defense information, including
controlled unclassified information.
(2) Coordination with other federal expertise and
capabilities.--The Under Secretary of Defense for Research
and Engineering shall coordinate efforts, when appropriate,
with the expertise and capabilities
[[Page S3374]]
that exist in Federal agencies and federally sponsored
laboratories.
(3) Agreements.--In carrying out this subsection, the Under
Secretary of Defense for Research and Engineering may enter
into agreements with private industry, institutes of higher
education, or a State, United States territory, local, or
tribal government to ensure breadth and depth of coverage to
the United States defense industrial base and to leverage
resources.
(d) Defense Acquisition Workforce Cyber Training Program.--
The Secretary of Defense shall establish a cyber counseling
certification program, or approve a similar existing program,
to certify small business professionals and other relevant
acquisition staff within the Department of Defense and
designated employees of small business development centers to
provide cyber planning assistance to small manufacturers in
the defense industrial supply chain. Subject to the
availability of appropriations, the Department of Defense may
reimburse small business development centers for costs
related to certification training under this subsection.
(e) Authorities.--In executing this program, the Secretary
may use the following authorities:
(1) The Manufacturing Technology Program established under
section 2521 of title 10, United States Code.
(2) The Centers for Science, Technology, and Engineering
Partnership program under section 2368 of title 10, United
States Code.
(3) The Manufacturing Engineering Education Program
established under section 2196 of title 10, United States
Code.
(4) The Small Business Innovation Research program.
(5) The mentor-protege program.
(6) Other legal authorities as the Secretary deems
necessary for the effective and efficient execution of the
program.
(f) Definitions.--In this section:
(1) Resources.--The term ``resources'' means guidelines,
tools, best practices, standards, methodologies, and other
ways of providing information.
(2) Small business concern.--The term ``small business
concern'' means a small business concern as that term is used
in section 3 of the Small Business Act (15 U.S.C. 632).
(3) Small business development center.--The term ``small
business development center'' means a small business
development center described in section 21 of the Small
Business Act (15 U.S.C. 648).
(4) Small manufacturer.--The term ``small manufacturer''
means a small business concern that is a manufacturer.
(5) State.--The term ``State'' means each of the several
States, Territories, and possessions of the United States,
the District of Columbia, and the Commonwealth of Puerto
Rico.
______