NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT.

SEC. 204. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT. Section 20 of the National Institute of Standards and Technology Act (15 U.S.C. 278g-3) is amended— (1) by redesignating subsection (e) as subsection (f); and (2) by inserting after subsection (d) the following: “(e) Intramural Security Research.—As part of the research activities conducted in accordance with subsection (d)(3), the Institute shall, to the extent practicable and appropriate— “(1) conduct a research program to develop a unifying and standardized identity, privilege, and access control management framework for the execution of a wide variety of resource protection policies and that is amenable to implementation within a wide variety of existing and emerging computing environments; “(2) carry out research associated with improving the security of information systems and networks; “(3) carry out research associated with improving the testing, measurement, usability, and assurance of information systems and networks; “(4) carry out research associated with improving security of industrial control systems; “(5) carry out research associated with improving the security and integrity of the information technology supply chain; and “(6) carry out any additional research the Institute determines appropriate.” .