S.Amdt. 2620

1. Adds TITLE II--CYBERSECURITY PUBLIC AWARENESS ACT at the end of the bill

   Adds a title

   In S. 754 · Placed on Calendar Senate

   (b) Modification of Limitation on Dissemination of Certain Information Concerning Penetrations of Defense Contractor Networks.-- Section 941(c)(3) of the National Defense Authorization Act for Fiscal Year 2013 (Public Law 112-239; 10 U.S.C. 2224 note) is amended by inserting at the end the following: "The Secretary may share such information with other Federal entities if such information consists of cyber threat indicators and defensive measures and such information is shared consistent with the policies and procedures promulgated by the Attorney General under section 5 of the Cybersecurity Information Sharing Act of 2015.".

   Inserted: TITLE II--CYBERSECURITY PUBLIC AWARENESS ACT

   Inserted: SEC. 201. SHORT TITLE.

   Inserted: This title may be cited as the "Cybersecurity Public Awareness Act of 2015".

   Inserted: SEC. 202. ENFORCEMENT OF CYBERSECURITY LAWS.

   Inserted: (a) Prosecution for Cybercrime.--

   Inserted: (1) In general.--Not later than 180 days after the date of enactment of this Act, the Attorney General, in consultation with the Director of the United States Secret Service, the Director of U.S. Immigration and Customs Enforcement, and the Director of the Federal Bureau of Investigation, shall submit to Congress a report--

   Inserted: (A) describing investigations and prosecutions relating to cyber intrusions, computer or network compromise, or other forms of illegal hacking the preceding year, including--

   Inserted: (i) the number of investigations initiated relating to such crimes;

   Inserted: (ii) the number of arrests relating to such crimes;

   Inserted: (iii) the number and description of instances in which investigations or prosecutions relating to such crimes have been delayed or prevented because of an inability to extradite a criminal defendant in a timely manner; and

   Inserted: (iv) the number of prosecutions for such crimes, including--

   Inserted: (I) the number of defendants prosecuted;

   Show 26 more inserted paragraphsShow less

   Inserted: (II) whether the prosecutions resulted in a conviction; and

   Inserted: (III) the sentence imposed and the statutory maximum for each such crime for which a defendant was convicted;

   Inserted: (B) identifying the number of employees, financial resources, and other resources (such as technology and training) devoted to the enforcement, investigation, and prosecution of cyber intrusions, computer or network compromised, or other forms of illegal hacking, including the number of investigators, prosecutors, and forensic specialists dedicated to investigating and prosecuting cyber intrusions, computer or network compromise, or other forms of illegal hacking; and

   Inserted: (C) discussing any impediments under the laws of the United States or international law to prosecutions for cyber intrusions, computer or network compromise, or other forms of illegal hacking, including discussion of ways to improve the mutual legal assistance process used to obtain evidence abroad and to provide domestic evidence to foreign requestors.

   Inserted: (2) Updates.--The Attorney General, in consultation with the Director of the United States Secret Service, the Director of Immigration and Customs Enforcement, and the Director of the Federal Bureau of Investigation, shall annually submit to Congress a report updating the report submitted under paragraph (1) at the same time the Attorney General submits annual reports under section 404 of the Prioritizing Resources and Organization for Intellectual Property Act of 2008 (42 U.S.C. 3713d).

   Inserted: (b) Preparedness of Federal Courts to Promote Cybersecurity.--Not later than 180 days after the date of enactment of this Act, the Attorney General, in coordination with the Administrative Office of the United States Courts, shall submit to Congress a report--

   Inserted: (1) on whether Federal courts have granted timely relief in matters relating to botnets and other cybercrime and cyber threats; and

   Inserted: (2) that includes, as appropriate, recommendations on changes or improvements to--

   Inserted: (A) the Federal Rules of Civil Procedure or the Federal Rules of Criminal Procedure;

   Inserted: (B) the training and other resources available to support the Federal judiciary;

   Inserted: (C) the capabilities and specialization of courts to which such cases may be assigned; and

   Inserted: (D) Federal civil and criminal laws.

   Inserted: SEC. 203. CYBERSECURITY PUBLIC AWARENESS CAMPAIGNS.

   Inserted: (a) Evaluation of Existing Cybersecurity Public Awareness Campaigns.--Not later than 180 days after the date of enactment of this Act, the Comptroller General of the United States shall submit to Congress a report examining--

   Inserted: (1) the number of cybersecurity public awareness campaigns run by Federal agencies;

   Inserted: (2) the estimated costs of Federal cybersecurity public awareness campaigns; and

   Inserted: (3) the effectiveness of Federal cybersecurity public awareness campaigns.

   Inserted: (b) Recommendations for Improving Cybersecurity Public Awareness Campaigns.--The report required under subsection (a) shall include recommendations for improving and, if appropriate, consolidating Federal cybersecurity public awareness campaigns.

   Inserted: SEC. 204. DEVELOPING TECHNOLOGIES TO ENHANCE CRITICAL INFRASTRUCTURE CYBERSECURITY.

   Inserted: (a) Definition.--In this section, the term "critical infrastructure sector" has the meaning given the term in section 203.

   Inserted: (b) Reports.--

   Inserted: (1) In general.--The Secretary of Homeland Security shall enter into a contract with the National Research Council, or another Federally funded research and development corporation, under which the Council or corporation shall submit to Congress a report on opportunities to develop innovative or experimental technologies or technological approaches that would enhance the cybersecurity of the critical infrastructure sector.

   Inserted: (2) Limitations.--The report required under paragraph (1) shall--

   Inserted: (A) consider only technologies or technological options that can be deployed consistent with constitutional and statutory privacy rights; and

   Inserted: (B) identify any technologies or technological options described in subparagraph (A) that merit Federal research support.

   Inserted: (3) Timing.--The contract entered into under paragraph (1) shall require that the report described in paragraph (1) be submitted not later than 1 year after the date of enactment of this Act. The Secretary of Homeland Security may enter into additional subsequent contracts as appropriate.

   Original wording

   At the end, add the following:

Read automatically from the Congressional Record. Check the original before relying on it.

As printed