; (2) investment in tools to help private and public sector organizations measure their cybersecurity, manage their risks and ensure workforce preparedness for new cybersecurity challenges; and (3) investment in programs to prepare the United States with strong cybersecurity and encryption technologies to apply to emerging technologies such as artificial intelligence, the internet of things, and quantum computing. (d) Authority The Secretary, acting through the Director, shall have the authority to enter into and perform such contracts on such terms as the Secretary considers to be appropriate, including cooperative research and development arrangements, grants, and cooperative agreements or other transactions, as may be necessary in the conduct of the work of the Institute with respect to cybersecurity. 5. Composites research (a) Research The Secretary, acting through the Director, shall implement the recommendations contained in the December 2017 report entitled Road Mapping Workshop Report on Overcoming Barriers to Adoption of Composites in Sustainable Infrastructure , as appropriate, to help facilitate the adoption of composite technology in infrastructure in the United States. In implementing such recommendations, the Secretary, acting through the Director shall, with respect to the use of composite technology in infrastructure— (1) not later than 6 months after the date of enactment of this Act, establish a design data clearinghouse to identify, gather, validate, and disseminate existing design criteria, tools, guidelines, and standards; and (2) develop methods and resources required for testing an evaluation of safe and appropriate uses of composite materials for infrastructure, including— (A) conditioning protocols, procedures and models; (B) screening and acceptance tools