Cyber Leap Act of 2020

II 116TH CONGRESS 2D SESSION S. 3712 To require the Secretary of Commerce to establish national cybersecurity grand challenges, and for other purposes. IN THE SENATE OF THE UNITED STATES MAY 13, 2020 Mr. WICKER (for himself, Ms. ROSEN, and Mr. GARDNER) introduced the fol- lowing bill; which was read twice and referred to the Committee on Com- merce, Science, and Transportation A BILL To require the Secretary of Commerce to establish national cybersecurity grand challenges, and for other purposes. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘Cybersecurity Competi- 4 tions to Yield Better Efforts to Research the Latest Ex- 5 ceptionally Advanced Problems Act of 2020’’ or the 6 ‘‘Cyber Leap Act of 2020’’. 7 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 2 •S 3712 IS SEC. 2. NATIONAL CYBERSECURITY GRAND CHALLENGES. 1 (a) IN GENERAL.—Title II of the Cybersecurity En- 2 hancement Act of 2014 (15 U.S.C. 7431 et seq.) is amend- 3 ed by adding at the end the following: 4 ‘‘SEC. 205. NATIONAL CYBERSECURITY GRAND CHAL- 5 LENGES. 6 ‘‘(a) ESTABLISHMENT OF NATIONAL CYBERSECU- 7 RITY GRAND CHALLENGES.— 8 ‘‘(1) IN GENERAL.—To achieve high-priority 9 breakthroughs in cybersecurity by 2028, the Sec- 10 retary of Commerce shall establish the following na- 11 tional cybersecurity grand challenges: 12 ‘‘(A) ECONOMICS OF A CYBER ATTACK.— 13 Building more resilient systems that measur- 14 ably and exponentially raise adversary costs of 15 carrying out common cyber attacks. 16 ‘‘(B) CYBER TRAINING.— 17 ‘‘(i) Empowering the people of the 18 United States with an appropriate and 19 measurably sufficient level of digital lit- 20 eracy to make safe and secure decisions 21 online. 22 ‘‘(ii) Developing a cybersecurity work- 23 force with measurable skills to protect and 24 maintain information systems. 25 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 3 •S 3712 IS ‘‘(C) EMERGING TECHNOLOGY.—Advanc- 1 ing cybersecurity efforts in response to emerg- 2 ing technology, such as artificial intelligence, 3 quantum science, and next generation commu- 4 nications technologies. 5 ‘‘(D) REIMAGINING DIGITAL IDENTITY.— 6 Maintaining a high sense of usability while im- 7 proving the security and safety of online activ- 8 ity of individuals in the United States. 9 ‘‘(E) FEDERAL AGENCY RESILIENCE.—Re- 10 ducing cybersecurity risks to Federal networks 11 and systems, and improving the response of 12 Federal agencies to cybersecurity incidents on 13 such networks and systems. 14 ‘‘(F) OTHER CHALLENGES.—Such other 15 challenges as the Secretary of Commerce con- 16 siders appropriate to achieve high-priority 17 breakthroughs in cybersecurity. 18 ‘‘(2) CONSIDERATIONS.—In carrying out para- 19 graph (1), the Secretary shall consider the rec- 20 ommendations set forth in the report of the National 21 Security Telecommunications Advisory Committee 22 entitled ‘NSTAC Report to the President on a Cy- 23 bersecurity Moonshot’ and dated November 14, 24 2018. 25 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 4 •S 3712 IS ‘‘(b) PURSUIT OF NATIONAL CYBERSECURITY 1 GRAND CHALLENGES.— 2 ‘‘(1) IN GENERAL.—Not later than 180 days 3 after the date of the enactment of the Cybersecurity 4 Competitions to Yield Better Efforts to Research the 5 Latest Exceptionally Advanced Problems Act of 6 2020, the Secretary, acting through the Under Sec- 7 retary of Commerce for Standards and Technology, 8 shall commence efforts to pursue the national cyber- 9 security grand challenges established under sub- 10 section (a). 11 ‘‘(2) COMPETITIONS.—The efforts required by 12 paragraph (1) shall include carrying out programs to 13 award prizes, including cash and noncash prizes, 14 competitively pursuant to the authorities and proc- 15 esses established under section 24 of the Stevenson- 16 Wydler Technology Innovation Act of 1980 (15 17 U.S.C. 3719) or any other applicable provision of 18 law. 19 ‘‘(3) ADDITIONAL AUTHORITIES.—In carrying 20 out paragraph (1), the Secretary may enter into and 21 perform such other transactions as the Secretary 22 considers necessary and on such terms as the Sec- 23 retary considers appropriate. 24 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 5 •S 3712 IS ‘‘(4) COORDINATION.—In pursuing national cy- 1 bersecurity grand challenges under paragraph (1), 2 the Secretary shall coordinate with the following: 3 ‘‘(A) The Director of the National Science 4 Foundation. 5 ‘‘(B) The Director of the Cybersecurity 6 and Infrastructure Security Agency. 7 ‘‘(C) The Director of the Defense Ad- 8 vanced Research Projects Agency. 9 ‘‘(D) The Director of the Office of Science 10 and Technology Policy. 11 ‘‘(E) The Director of the Office of Man- 12 agement and Budget. 13 ‘‘(F) The Administrator of the General 14 Services Administration. 15 ‘‘(G) The Federal Trade Commission. 16 ‘‘(H) The heads of such other Federal 17 agencies as the Secretary of Commerce con- 18 siders appropriate for purposes of this section. 19 ‘‘(5) SOLICITATION OF ACCEPTANCE OF 20 FUNDS.—Pursuant to section 24 of the Stevenson- 21 Wydler Technology Innovation Act of 1980 (15 22 U.S.C. 3719), the Secretary shall request and accept 23 funds from other Federal agencies, State, United 24 States territory, local, or tribal government agencies, 25 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 6 •S 3712 IS private sector for-profit entities, and nonprofit enti- 1 ties to support efforts to pursue a national cyberse- 2 curity grand challenge under this section. 3 ‘‘(c) RECOMMENDATIONS.— 4 ‘‘(1) IN GENERAL.—In carrying out this sec- 5 tion, the Secretary of Commerce shall designate an 6 advisory council to seek recommendations. 7 ‘‘(2) ELEMENTS.—The recommendations re- 8 quired by paragraph (1) shall include the following: 9 ‘‘(A) A scope for efforts carried out under 10 subsection (b). 11 ‘‘(B) Metrics to assess submissions for 12 prizes under competitions carried out under 13 subsection (b) as the submissions pertain to the 14 national cybersecurity grand challenges estab- 15 lished under subsection (a).’’. 16 (b) CONFORMING AMENDMENTS.—Section 201(a)(1) 17 of such Act is amended— 18 (1) in subparagraph (J), by striking ‘‘; and’’ 19 and inserting a semicolon; 20 (2) by redesignating subparagraph (K) as sub- 21 paragraph (L); and 22 (3) by inserting after subparagraph (J) the fol- 23 lowing: 24 VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS 7 •S 3712 IS ‘‘(K) implementation of section 205 1 through research and development on the topics 2 identified under subsection (a) of such section; 3 and’’. 4 (c) CLERICAL AMENDMENT.—The table of contents 5 in section 1(b) of such Act is amended by inserting after 6 the item relating to section 204 the following: 7 ‘‘Sec. 205. National Cybersecurity Grand Challenges.’’. Æ VerDate Sep 11 2014 15:43 Jun 02, 2020 Jkt 099200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6301 E:\BILLS\S3712.IS S3712 pamtmann on DSKBC07HB2PROD with BILLS