A bill to provide for assistance for small manufacturers in the defense industrial supply chain on matters relating to cybersecurity.

II 116TH CONGRESS 2D SESSION S. 4598 To provide for assistance for small manufacturers in the defense industrial supply chain on matters relating to cybersecurity. IN THE SENATE OF THE UNITED STATES SEPTEMBER 16, 2020 Ms. ROSEN (for herself and Mr. YOUNG) introduced the following bill; which was read twice and referred to the Committee on Armed Services A BILL To provide for assistance for small manufacturers in the defense industrial supply chain on matters relating to cybersecurity. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. ASSISTANCE FOR SMALL MANUFACTURERS IN 3 THE DEFENSE INDUSTRIAL SUPPLY CHAIN 4 ON MATTERS RELATING TO CYBERSECURITY. 5 (a) IN GENERAL.—Subject to the availability of ap- 6 propriations, the Secretary of Defense, in consultation 7 with the Director of the National Institute of Standards 8 and Technology, may award financial assistance to a Cen- 9 VerDate Sep 11 2014 20:30 Sep 25, 2020 Jkt 099200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S4598.IS S4598 khammond on DSKJM1Z7X2PROD with BILLS 2 •S 4598 IS ter for the purpose of providing cybersecurity services to 1 small manufacturers. 2 (b) CRITERIA.—The Secretary, in consultation with 3 the Director, shall establish and publish on the grants.gov 4 website, or successor website, criteria for selecting recipi- 5 ents for financial assistance under this section. 6 (c) USE OF FINANCIAL ASSISTANCE.—Financial as- 7 sistance under this section— 8 (1) shall be used by a Center to provide small 9 manufacturers with cybersecurity services relating 10 to— 11 (A) compliance with the cybersecurity re- 12 quirements of the Department of Defense Sup- 13 plement to the Federal Acquisition Regulation, 14 including awareness, assessment, evaluation, 15 preparation, and implementation of cybersecu- 16 rity services; and 17 (B) achieving compliance with the Cyberse- 18 curity Maturity Model Certification framework 19 of the Department of Defense; and 20 (2) may be used by a Center to employ trained 21 personnel to deliver cybersecurity services to small 22 manufacturers. 23 (d) BIENNIAL REPORTS.— 24 VerDate Sep 11 2014 22:30 Sep 21, 2020 Jkt 099200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S4598.IS S4598 khammond on DSKJM1Z7X2PROD with BILLS 3 •S 4598 IS (1) IN GENERAL.—Not less frequently than 1 once every two years, the Secretary shall submit to 2 the congressional defense committees, the Committee 3 on Commerce, Science, and Transportation of the 4 Senate, and the Committee on Science, Space, and 5 Technology of the House of Representatives a bien- 6 nial report on financial assistance awarded under 7 this section. 8 (2) CONTENTS.—To the extent practicable, 9 each report submitted under paragraph (1) shall in- 10 clude the following with respect to the years covered 11 by the report: 12 (A) The number of small manufacturing 13 companies assisted. 14 (B) A description of the cybersecurity serv- 15 ices provided. 16 (C) A description of the cybersecurity mat- 17 ters addressed. 18 (D) An analysis of the operational effec- 19 tiveness and cost-effectiveness of the 20 cybersecurity services provided. 21 (e) TERMINATION.—The authority of the Secretary 22 to award financial assistance under this section shall ter- 23 minate on the date that is five years after the date of the 24 enactment of this Act. 25 VerDate Sep 11 2014 20:30 Sep 25, 2020 Jkt 099200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S4598.IS S4598 khammond on DSKJM1Z7X2PROD with BILLS 4 •S 4598 IS (f) DEFINITIONS.—In this section: 1 (1) The term ‘‘Center’’ has the meaning given 2 such term in section 25(a) of the National Institute 3 of Standards and Technology Act (15 U.S.C. 4 278k(a)). 5 (2) The term ‘‘congressional defense commit- 6 tees’’ has the meaning given that term in section 7 101(a)(16) of title 10, United States Code. 8 (3) The term ‘‘small manufacturer’’ has the 9 meaning given that term in section 1644(g) of the 10 John S. McCain National Defense Authorization Act 11 for Fiscal Year 2019 (Public Law 115–232; 10 12 U.S.C. 2224 note). 13 Æ VerDate Sep 11 2014 22:30 Sep 21, 2020 Jkt 099200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6301 E:\BILLS\S4598.IS S4598 khammond on DSKJM1Z7X2PROD with BILLS