15 U.S.C. § 7432 — National cybersecurity challenges

(a) Establishing the challenges: (1) To reach high-priority cybersecurity breakthroughs by 2028, the Secretary of Commerce must set up these national challenges: (A) Economics of a cyberattack — build systems that measurably and dramatically raise the cost for attackers of carrying out common cyberattacks. (B) Cyber training — (i) give people in the United States enough digital literacy to make safe, secure online decisions, and (ii) build a cybersecurity workforce with measurable skills to protect information systems. (C) Emerging technology — advance cybersecurity efforts in response to emerging technology, like artificial intelligence, quantum science, next-generation communications, autonomy, data science, and computational technology. (D) Reimagining digital identity — improve the privacy, security, and safety of individuals' online activity while keeping a high level of usability. (E) Federal agency resilience — reduce cybersecurity risks to federal networks and systems, and improve how federal agencies respond to cybersecurity incidents on them. (2) In setting these challenges, the Secretary must coordinate with the Secretary of Homeland Security on the cyber training and federal agency resilience challenges. (b) Pursuing the challenges: (1) No later than 180 days after January 1, 2021, the Secretary — acting through the Under Secretary of Commerce for Standards and Technology — must begin efforts to pursue the challenges set under subsection (a). (2) That work must include running competitions to award cash or noncash prizes, following the process set under section 3719 of this title or any other applicable law. (3) In doing this work, the Secretary may enter into and carry out other kinds of transactions the Secretary considers necessary, on terms the Secretary sets. (4) In pursuing the challenges, the Secretary must coordinate with: (A) the Director of the National Science Foundation; (B) the Secretary of Homeland Security; (C) the Director of the Defense Advanced Research Projects Agency; (D) the Director of the Office of Science and Technology Policy; (E) the Director of the Office of Management and Budget; (F) the Administrator of the General Services Administration; (G) the Federal Trade Commission; and (H) the heads of any other federal agencies the Secretary of Commerce considers appropriate. (5)(A) Following section 3719, the Secretary must request and accept funding from other federal agencies, state, territorial, local, or tribal government agencies, and private for-profit or nonprofit entities, to support pursuit of a national cybersecurity challenge. (B) But nothing in that requirement forces any person or entity to give funds or otherwise take part in an effort or competition under this section. (c) Recommendations: (1) To carry out this section, the Secretary of Commerce must designate an advisory council to seek recommendations. (2) That council's recommendations must include: (A) a scope for the efforts carried out under subsection (b), and (B) metrics to judge prize-competition submissions against the national cybersecurity challenges set under subsection (a). (3) The Secretary may not pay advisory council members anything beyond travel expenses for their service.