ASSISTANCE FOR SMALL MANUFACTURERS IN THE DEFENSE INDUSTRIAL SUPPLY CHAIN ON MATTERS RELATING TO CYBERSECURITY.

SEC. 1738. [10 U.S.C. 2224 note] ASSISTANCE FOR SMALL MANUFACTURERS IN THE DEFENSE INDUSTRIAL SUPPLY CHAIN ON MATTERS RELATING TO CYBERSECURITY. (a) In General.—Subject to the availability of appropriations, the Secretary of Defense, in consultation with the Director of the National Institute of Standards and Technology, may award financial assistance to a Center for the purpose of providing cybersecurity services to small manufacturers. (b) Criteria.—If the Secretary carries out subsection (a), the Secretary, in consultation with the Director, shall establish and publish on the grants.gov website, or successor website, criteria for selecting recipients for financial assistance under this section. (c) Use of Financial Assistance.—Financial assistance under this section— (1) shall be used by a Center to provide small manufacturers with cybersecurity services, including— (A) compliance with the cybersecurity requirements of the Department of Defense Supplement to the Federal Acquisition Regulation, including awareness, assessment, evaluation, preparation, and implementation of cybersecurity services; and (B) achieving compliance with the Cybersecurity Maturity Model Certification framework of the Department of Defense; and (2) may be used by a Center to employ trained personnel to deliver cybersecurity services to small manufacturers. (d) Biennial Reports.— (1) In general.—Not less frequently than once every two years, the Secretary shall submit to the congressional defense committees, the Committee on Commerce, Science, and Transportation of the Senate, and the Committee on Science, Space, and Technology of the House of Representatives a report on financial assistance awarded under this section. (2) Contents.—To the extent practicable, each report submitted under paragraph (1) shall include the following with respect to the years covered by each such report: (A) The number of small manufacturers assisted. (B) A description of the cybersecurity services provided. (C) A description of the cybersecurity matters addressed. (D) An analysis of the operational effectiveness and cost-effectiveness of such cybersecurity services. (e) Termination.—The authority of the Secretary to award financial assistance under this section shall terminate on the date that is five years after the date of the enactment of this section. (f) Definitions.—In this section: (1) Center.—The term “Center” has the meaning given such term in section 25(a) of the National Institute of Standards and Technology Act (15 U.S.C. 278k(a)). (2) Small manufacturer.—The term “small manufacturer” has the meaning given such term in section 1644(g) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Public Law 115-232; 10 U.S.C. 2224 note).