A U.S. House subcommittee Sept. 23 approved legislation requiring federal agencies to develop, update and implement strategic plans for cyber-security R&D. The Cybersecurity Research and Development Amendments Act of 2009 calls for agencies to create a road map detailing each agency’s cyber-security role and the level of funding required to fulfill the research objectives.

In addition, the bill would require the NSF (National Science Foundation) to support research on the social and behavioral aspects of cyber-security.

Resource Library:

The legislation now moves to the full Committee on Science and Technology.

"Cyber-threats are constantly evolving and cyber-security R&D must evolve in concert through a combination of near-term fixes and long-term projects that build a more secure foundation,” bill author and House Committee on Science and Technology’s Research and Science Education Subcommittee Chairman Daniel Lipinski (D-IL) said in a statement. "[The amendments] will ensure an overall vision and an implementation plan for the federal cyber-security R&D portfolio and will train the next generation of cyber-security professionals."

The subcommittee has held three hearings to examine the state of federal cyber-security, including areas where progress is needed, the need for a more coordinated and prioritized research portfolio, better partnerships between the private sector and government and training for the IT work force.

“The plan must be based on an assessment of cyber-security risk, to make sure that taxpayer dollars fund the R&D needed to meet the strategic needs of our country and to keep Internet users safe from cyber-crime,” added Lipinski.