S.Amdt. 1899

SA 1899. Mr. CRUZ submitted an amendment intended to be proposed to
amendment SA 1502 proposed by Mr. Schumer to the bill S. 1260, to
establish a new Directorate for Technology and Innovation in the
National Science Foundation, to establish a regional technology hub
program, to require a strategy and report on economic security,
science, research, innovation, manufacturing, and job creation, to
establish a critical supply chain resiliency program, and for other
purposes; which was ordered to lie on the table; as follows:

At the end of title III of division B, add the following:

SEC. 2309. COMPUTING ENCLAVE PILOT PROGRAM.

(a) In General.--The Director, in consultation with the
Director of the National Institute of Standards and
Technology and the Secretary of Energy, shall continue and
expand a pilot program to ensure the security of federally
supported research data and to assist regional institutions
of higher education and their researchers regarding the
safeguarding of sensitive information.
(b) Structure.--In carrying out the pilot program described
in subsection (a), the Director shall select not less than 3
and not more than 5 institutions of higher education from
among institutions classified under the Indiana University
Center for Postsecondary Research Carnegie Classification as
a doctorate-granting university with a very high level of
research activity, and with a history of working with secure
information, for the development, installation, maintenance,
or sustainment of secure computing enclaves.
(c) Regionalization.--
(1) In general.--In selecting institutions of higher
education under subsection (b), the Director shall give
preference to institutions of higher education with the
capability of serving other regional institutions of higher
education.
(2) Geographic diversity.--The Director shall ensure that
institutions of higher education selected under subsection
(b) are geographically dispersed to better meet the needs of
regional interests.
(d) Program Elements.--The Director shall work with
institutions of higher education selected under subsection
(b) to--
(1) develop an approved design blueprint for compliance
with Federal data protection protocols;
(2) develop a comprehensive list, or a bill of materials,
of each binary component of the software, firmware, or
product that is required to deploy additional secure
computing enclaves;
(3) develop templates for all policies and procedures
required to operate the secure computing enclave in a
research setting;
(4) develop a system security plan template; and
(5) develop a process for managing a plan of action and
milestones for the secure computing enclave.
(e) Duration.--The pilot program described in subsection
(a) shall operate for not less than 3 years.
(f) Report.--
(1) In general.--The Director shall report to Congress not
later than 6 months after the completion of the pilot program
described in subsection (a).
(2) Contents.--The report required under paragraph (1)
shall include--
(A) an assessment of the pilot program described in
subsection (a), including an assessment of the security
benefits provided by such secure computing enclaves;
(B) recommendations related to the value of expanding the
network of secure computing enclaves; and
(C) recommendations on the efficacy of the use of secure
computing enclaves by other Federal agencies in a broader
effort to expand security of Federal research.
______