S.Amdt. 2721

SA 2721. Mrs. SHAHEEN (for herself, Mr. Coons, and Mr. Peters)
submitted an amendment intended to be proposed to amendment SA 2282
submitted by Mr. Inhofe (for himself and Mr. McCain) and intended to be
proposed to the bill H.R. 5515, to authorize appropriations for fiscal
year 2019 for military activities of the Department of Defense, for
military construction, and for defense activities of the Department of
Energy, to prescribe military personnel strengths for such fiscal year,
and for other purposes; which was ordered to lie on the table; as
follows:

Strike section 1626 and insert the following:

SEC. 1626. ASSISTANCE FOR SMALL MANUFACTURERS IN THE DEFENSE
INDUSTRIAL SUPPLY CHAIN ON MATTERS RELATING TO
CYBERSECURITY.

(a) Dissemination of Cybersecurity Resources.--
(1) In general.--The Under Secretary of Defense for
Research and Engineering, in consultation with the Director
of the National Institute of Standards and Technology and the
Administrator of the Small Business Administration, shall
take such actions as may be necessary to enhance awareness of
cybersecurity threats among small manufacturers in the
defense industrial supply chain.
(2) Priority.--The Under Secretary of Defense for Research
and Engineering shall prioritize efforts to increase
awareness to help reduce cybersecurity risks faced by small
manufacturers described in paragraph (1), including through
the use of small business development centers, the Hollings
Manufacturing Extension Partnership, and the National Network
for Manufacturing Innovation.
(3) Sector focus.--The Under Secretary of Defense for
Research and Engineering shall carry out this subsection with
a focus on such industry sectors as the Under Secretary
considers critical.
(4) Outreach events.--Under paragraph (1), the Under
Secretary of Defense for Research and Engineering shall
conduct outreach to support activities consistent with this
section. Such outreach may include live events with a
physical presence and outreach conducted through internet
websites.
(b) Voluntary Cybersecurity Self-assessments.--The Under
Secretary of Defense for Research and Engineering shall
develop mechanisms to provide assistance to help small
manufacturers conduct voluntary self-assessments in order to
understand operating environments, cybersecurity
requirements, and existing vulnerabilities, including through
the Mentor Protege Program, small business programs, and
engagements with defense laboratories and test ranges.
(c) Transfer of Research Findings and Expertise.--
(1) In general.--The Under Secretary of Defense for
Research and Engineering shall

[[Page S3705]]

promote the transfer of appropriate technology and techniques
developed in the Department of Defense to small manufacturers
throughout the United States to implement security measures
that are adequate to protect covered defense information,
including controlled unclassified information.
(2) Coordination with other federal expertise and
capabilities.--The Under Secretary of Defense for Research
and Engineering shall coordinate efforts, when appropriate,
with the expertise and capabilities that exist in Federal
agencies, federally sponsored laboratories, the Hollings
Manufacturing Extension Partnership, the National Network for
Manufacturing Innovation, and small business development
centers.
(3) Agreements.--In carrying out this subsection, the Under
Secretary of Defense for Research and Engineering may enter
into agreements with private industry, institutes of higher
education, or a State, United States territory, local, or
tribal government to ensure breadth and depth of coverage to
the United States defense industrial base and to leverage
resources.
(d) Defense Acquisition Workforce Cyber Training Program.--
The Secretary of Defense shall establish a cyber counseling
certification program, or approve a similar existing program,
to certify small business professionals and other relevant
acquisition staff within the Department of Defense and
designated employees of small business development centers to
provide cyber planning assistance to small manufacturers in
the defense industrial supply chain. Subject to the
availability of appropriations, the Department of Defense may
reimburse small business development centers for costs
related to certification training under this subsection.
(e) Authorities.--In executing this program, the Secretary
may use the following authorities:
(1) The Manufacturing Technology Program established under
section 2521 of title 10, United States Code.
(2) The Centers for Science, Technology, and Engineering
Partnership program under section 2368 of title 10, United
States Code.
(3) The Manufacturing Engineering Education Program
established under section 2196 of title 10, United States
Code.
(4) The Small Business Innovation Research program.
(5) The mentor-protege program.
(6) Other legal authorities as the Secretary deems
necessary for the effective and efficient execution of the
program.
(f) Definitions.--In this section:
(1) Resources.--The term ``resources'' means guidelines,
tools, best practices, standards, methodologies, and other
ways of providing information.
(2) Small business concern.--The term ``small business
concern'' means a small business concern as that term is used
in section 3 of the Small Business Act (15 U.S.C. 632).
(3) Small business development center.--The term ``small
business development center'' means a small business
development center described in section 21 of the Small
Business Act (15 U.S.C. 648).
(4) Small manufacturer.--The term ``small manufacturer''
means a small business concern that is a manufacturer.
(5) State.--The term ``State'' means each of the several
States, Territories, and possessions of the United States,
the District of Columbia, and the Commonwealth of Puerto
Rico.
______