In December, 2014, the President signed into law the Cybersecurity Enhancement Act of 2014 (Public Law 113-274). Section 302 addresses SFS specifically.
In December, 2017, the National Defense Authorization Act for Fiscal Year 2018 was signed into law. Section 1649 a., b., and c. address SFS specifically.
15 U.S. Code section 7442 contains those laws in effect on May 30, 2018 in regards to the SFS Program, http://uscode.house.gov/view.xhtml?req=(title:15%20section:7442%20edition:prelim).