Better Cybercrime Metrics Act
Public Law 117-116
The following are excerpts, highlighted in red, from the final legislation and/or conference report which contain references to and studies for The National Academies of Sciences, Engineering, and Medicine. (Pound signs [##] between passages denote the deletion of unrelated text.)
S2629 Schatz (D-Hawaii) 03/30/22
Enrolled (finally passed both houses)
To establish cybercrime reporting mechanisms, and for other purposes.
--- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- ---
######
SECTION 1. SHORT TITLE
This Act may be cited as the “Better Cybercrime Metrics Act”.
SEC. 2. FINDINGS
Congress finds the following:
(1) Public polling indicates that cybercrime could be the most common crime in the United States.
(2) The United States lacks comprehensive cybercrime data and monitoring, leaving the country less prepared to combat cybercrime that threatens national and economic security.
(3) In addition to existing cybercrime vulnerabilities, the people of the United States and the United States have faced a heightened risk of cybercrime during the COVID–19 pandemic.
(4) Subsection (c) of the Uniform Federal Crime Reporting Act of 1988 ( 34 U.S.C. 41303(c) ) requires the Attorney General to “acquire, collect, classify, and preserve national data on Federal criminal offenses as part of the Uniform Crime Reports” and requires all Federal departments and agencies that investigate criminal activity to “report details about crime within their respective jurisdiction to the Attorney General in a uniform matter and on a form prescribed by the Attorney General”.
SEC. 3. CYBERCRIME TAXONOMY
(a) IN GENERAL.—Not later than 90 days after the date of enactment of this Act, the Attorney General shall seek to enter into an agreement with the National Academy of Sciences to develop a taxonomy for the purpose of categorizing different types of cybercrime and cyber-enabled crime faced by individuals and businesses.
(b) DEVELOPMENT.—In developing the taxonomy under subsection (a), the National Academy of Sciences shall—
(1) ensure the taxonomy is useful for the Federal Bureau of Investigation to classify cybercrime in the National Incident-Based Reporting System, or any successor system;
(2) .—consult relevant stakeholders, including—
(A) the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security;
(B) Federal, State, and local law enforcement agencies;
(C) criminologists and academics;
(D) cybercrime experts; and
(E) business leaders; and
(3) take into consideration relevant taxonomies developed by non-governmental organizations, international organizations, academies, or other entities.
(c) REPORT.—Not later than 1 year after the date on which the Attorney General enters into an agreement under subsection (a), the National Academy of Sciences shall submit to the appropriate committees of Congress a report detailing and summarizing—
(1) the taxonomy developed under subsection (a); and
(2) any findings from the process of developing the taxonomy under subsection (a).
(d) AUTHORIZATION OF APPROPRIATIONS.—There are authorized to be appropriated to carry out this section $1,000,000.
######