Page:United States Statutes at Large Volume 116 Part 3.djvu/775

This page needs to be proofread.

PUBLIC LAW 107-305—NOV. 27, 2002 116 STAT. 2367 Public Law 107-305 107th Congress An Act To authorize funding for computer and network seciuity research and development and research fellowship programs, and for other piirposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the "Cyber Security Research and Development Act". SEC. 2. FINDINGS. The Congress finds the following: (1) Revolutionary advancements in computing and communications technology have interconnected government, commercial, scientific, and educational infrastructures—including critical infrastructures for electric power, natural gas and petroleum production and distribution, telecommunications, transportation, water supply, banking and finance, and emergency and government services—in a vast, interdependent physical and electronic network. (2) Exponential increases in interconnectivity have facilitated enhanced communications, economic growth, and the delivery of services critical to the public welfare, but have also increased the consequences of temporary or prolonged failure. (3) A Department of Defense Joint Task Force concluded after a 1997 United States information warfare exercise that the results "clearly demonstrated our lack of preparation for a coordinated cyber and physical attack on our critical military and civilian infrastructure". (4) Computer security technology and systems implementation lack— (A) sufficient long term research funding; (B) adequate coordination across Federal and State government agencies and among government, academia, and industry; and (C) sufficient numbers of outstanding researchers in the field. (5) Accordingly, Federal investment in computer and network security research and development must be significantly increased to— (A) improve vulnerability assessment and technological and systems solutions; Nov. 27, 2002 [H.R. 3394] Cyber Security Research and Development Act. Communications and telecommunications.