NIST AUTHORITY FOR CYBERSECURITY AND PRIVACY ACTIVITIES.

SEC. 10223. NIST AUTHORITY FOR CYBERSECURITY AND PRIVACY ACTIVITIES. Subsection (c) of section 2 of the National Institute of Standards and Technology Act (15 U.S.C. 272) is amended—(1) in paragraph (16), by striking the period at the end and inserting a semicolon; (2) by redesignating paragraphs (16) through (27) as paragraphs (21) through (32), respectively; and (3) by inserting after paragraph (15) the following:“(16) support information security measures for the development and lifecycle of software and the software supply chain, including development of voluntary, consensus-based technical standards, best practices, frameworks, methodologies, procedures, processes, and software engineering toolkits and configurations; “(17) support information security measures, including voluntary, consensus-based technical standards, best practices, and guidelines, for the design, adoption, and deployment of cloud computing services; “(18) support research, development, and practical application to improve the usability of cybersecurity processes and technologies; “(19) facilitate and support the development of a voluntary, consensus-based set of technical standards, guidelines, best practices, methodologies, procedures, and processes to improve privacy protections in systems, technologies, and processes used by both the public and private sector; “(20) support privacy measures, including voluntary, consensus-based technical standards, best practices, guidelines, metrology, and testbeds for the design, adoption, and deployment of privacy enhancing technologies;” .136 STAT. 1478