US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
The US Cybersecurity Enhancement Act of 2014: NIST's duty to facilitate the voluntary critical infrastructure cybersecurity framework, federal cybersecurity research planning and funding, security checklists, competitions and the scholarship-for-service programme, the national awareness programme, international standards coordination, the federal cloud strategy and identity management research.
US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) is a compliance framework from United States with 5 domains and 18 controls. The largest domains are Title II: Cybersecurity research and development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (7 controls), Title III: Education and workforce development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (4 controls), Title I: Public-private collaboration on cybersecurity – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (5)
Title I: Public-private collaboration on cybersecurity – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
| Code | Title |
|---|---|
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::101a | NIST facilitates a voluntary, industry-led framework to reduce cyber risks to critical infrastructure |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::101b | NIST prescribes no specific solutions, and information shared for the framework is not used to regulate |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::101c | The Comptroller General studies and reports on the framework's development, adoption and effectiveness |
Title II: Cybersecurity research and development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
| Code | Title |
|---|---|
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::201a | Agencies develop and update a federal cybersecurity research and development strategic plan, roadmap and reports |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::201b | The National Science Foundation supports research into cybersecurity practices in curricula and faculty development |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::201c | The National Science Foundation reviews cybersecurity test beds and may fund additional ones, evaluating their effectiveness |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::201d-f | Research is coordinated across initiatives, funded in the listed security areas and directed at a science of cybersecurity |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::202 | Computer and network security research centre awards weigh the added capability criteria |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::203 | NIST develops, prioritises and disseminates security automation standards and configuration checklists for widely used federal systems |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::204 | NIST conducts intramural security research on identity and access management, system security, testing, control systems and supply chain |
Title III: Education and workforce development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
| Code | Title |
|---|---|
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::301 | Commerce, the National Science Foundation and Homeland Security support cybersecurity competitions and challenges |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::302a | The National Science Foundation continues the federal cyber scholarship-for-service programme |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::302b | Agencies appoint scholarship graduates in the excepted service and may convert them non-competitively |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::302c | Institutions monitor scholarship recipients' service and collect repayments when obligations fail |
Title IV: Cybersecurity awareness and preparedness – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
| Code | Title |
|---|---|
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::401 | NIST coordinates a national cybersecurity awareness and education programme with a strategic plan reported every five years |
Title V: Advancement of cybersecurity technical standards – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)
| Code | Title |
|---|---|
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::502 | NIST coordinates federal participation in international information security standards and plans that coordination |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::503 | NIST continues a federal cloud computing strategy covering interoperability, conformance testing and security frameworks |
| us-cybersecurity-enhancement-act-of-2014-public-law-113-274::504 | NIST continues an identity management research and development programme |
What is US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) and who does it apply to?
US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) is a compliance framework from United States with 5 domains and 18 controls. The US Cybersecurity Enhancement Act of 2014: NIST's duty to facilitate the voluntary critical infrastructure cybersecurity framework, federal cybersecurity research planning and funding, security checklists, competitions and the scholarship-for-service programme, the national awareness programme, international standards coordination, the federal cloud strategy and identity management research. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) actually require?
US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) has 18 controls organised across 5 domains. The largest domains are Title II: Cybersecurity research and development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (7 controls), Title III: Education and workforce development – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (4 controls), Title I: Public-private collaboration on cybersecurity – US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) do I already cover?
US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement US Cybersecurity Enhancement Act of 2014 (Public Law 113-274)?
Start your US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about US Cybersecurity Enhancement Act of 2014 (Public Law 113-274) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 18 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required