<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-type="olc" bill-stage="Referred-in-House" dms-id="A1" public-private="public" slc-id="S1-ALB21739-JG5-89-WKX" star-print="no-star-print" stage-count="1" public-print="no" key="G"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>117 S658 : National Cybersecurity Preparedness Consortium Act of 2021</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date></dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form display="yes">
<distribution-code>IC</distribution-code><congress display="yes">117th CONGRESS</congress><session display="yes">1st Session</session><legis-num display="yes">S. 658</legis-num><current-chamber display="yes">IN THE HOUSE OF REPRESENTATIVES</current-chamber><action><action-date>August 6, 2021</action-date><action-desc>Referred to the <committee-name committee-id="HHM00">Committee on Homeland Security</committee-name></action-desc></action><legis-type display="yes">AN ACT</legis-type><official-title display="yes">To authorize the Secretary of Homeland Security to work with cybersecurity consortia for training, and for other purposes.</official-title></form><legis-body style="OLC" display-enacting-clause="yes-display-enacting-clause"><section commented="no" display-inline="no-display-inline" section-type="section-one" id="id2ff325063bc04a94a8aafaeea9e5d546"><enum>1.</enum><header display-inline="yes-display-inline">Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>National Cybersecurity Preparedness Consortium Act of 2021</short-title></quote>.</text></section><section commented="no" display-inline="no-display-inline" section-type="subsequent-section" id="id07c8257aa3774107852b645e0d81fb30"><enum>2.</enum><header display-inline="yes-display-inline">Definitions</header><text display-inline="no-display-inline">In this Act—</text><paragraph commented="no" display-inline="no-display-inline" id="id38590fac90c540e6b79a7c8809a9b18e"><enum>(1)</enum><text display-inline="yes-display-inline">the term <term>consortium</term> means a group primarily composed of nonprofit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security;</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id495b52c9d8b04858baf5f626c20de583"><enum>(2)</enum><text display-inline="yes-display-inline">the terms <term>cybersecurity risk</term> and <term>incident</term> have the meanings given those terms in section 2209(a) of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/659">6 U.S.C. 659(a)</external-xref>);</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id77b512167fd5433c8a8b3b1bdaded6cf"><enum>(3)</enum><text display-inline="yes-display-inline">the term <term>Department</term> means the Department of Homeland Security; and</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id7091c4a6c99b4ce7a69e49600514ec4e"><enum>(4)</enum><text display-inline="yes-display-inline">the term <term>Secretary</term> means the Secretary of Homeland Security.</text></paragraph></section><section commented="no" display-inline="no-display-inline" section-type="subsequent-section" id="idac4998769e5249c481c785e4906de42b"><enum>3.</enum><header display-inline="yes-display-inline">National cybersecurity preparedness consortium</header><subsection commented="no" display-inline="no-display-inline" id="idd531f49fcfdf4981a6b84bacef7c8dbb"><enum>(a)</enum><header display-inline="yes-display-inline">In general</header><text display-inline="yes-display-inline">The Secretary may work with a consortium to support efforts to address cybersecurity risks and incidents.</text></subsection><subsection commented="no" display-inline="no-display-inline" id="id7b6924d81c6f4935bd8c119fa1af11d1"><enum>(b)</enum><header display-inline="yes-display-inline">Assistance to the NCCIC</header><text display-inline="yes-display-inline">The Secretary may work with a consortium to assist the national cybersecurity and communications integration center of the Department (established under section 2209 of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/659">6 U.S.C. 659</external-xref>)) to—</text><paragraph commented="no" display-inline="no-display-inline" id="id9217fb850d524befbb2af152b5abb804"><enum>(1)</enum><text display-inline="yes-display-inline">provide training to State and local first responders and officials specifically for preparing for and responding to cybersecurity risks and incidents, in accordance with applicable law;</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id465a75d4091e4d359101b5e8848ab54e"><enum>(2)</enum><text display-inline="yes-display-inline">develop and update a curriculum utilizing existing programs and models in accordance with such section 2209, for State and local first responders and officials, related to cybersecurity risks and incidents;</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="ida66b7bc46c6c449b87f22f20c3a8e659"><enum>(3)</enum><text display-inline="yes-display-inline">provide technical assistance services to build and sustain capabilities in support of preparedness for and response to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with such section 2209;</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id56046ac6466046aca4d292e90274b2f2"><enum>(4)</enum><text display-inline="yes-display-inline">conduct cross-sector cybersecurity training and simulation exercises for entities, including State and local governments, critical infrastructure owners and operators, and private industry, to encourage community-wide coordination in defending against and responding to cybersecurity risks and incidents, in accordance with section 2210(c) of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/660">6 U.S.C. 660(c)</external-xref>);</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="idfc17f73b690d4e6eb554d90d00d2bd0f"><enum>(5)</enum><text display-inline="yes-display-inline">help States and communities develop cybersecurity information sharing programs, in accordance with section 2209 of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/659">6 U.S.C. 659</external-xref>), for the dissemination of homeland security information related to cybersecurity risks and incidents; and</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id8f6843a2c8d2487c9c7461d6e9dd5a01"><enum>(6)</enum><text display-inline="yes-display-inline">help incorporate cybersecurity risk and incident prevention and response into existing State and local emergency plans, including continuity of operations plans.</text></paragraph></subsection><subsection commented="no" display-inline="no-display-inline" id="id252a3168a74c4ec69cbdaa2de69a5a23"><enum>(c)</enum><header display-inline="yes-display-inline">Considerations regarding selection of a consortium</header><text display-inline="yes-display-inline">In selecting a consortium with which to work under this Act, the Secretary shall take into consideration the following:</text><paragraph commented="no" display-inline="no-display-inline" id="id58fea5b285ca4fc2ad59796335123e8e"><enum>(1)</enum><text display-inline="yes-display-inline">Any prior experience conducting cybersecurity training and exercises for State and local entities.</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="idbae501927fcf4fcb95f4298f4edc7782"><enum>(2)</enum><text display-inline="yes-display-inline">Geographic diversity of the members of any such consortium so as to cover different regions throughout the United States.</text></paragraph></subsection><subsection commented="no" display-inline="no-display-inline" id="id3a0bef4090f94762a308d19ef590a1a9"><enum>(d)</enum><header display-inline="yes-display-inline">Metrics</header><text display-inline="yes-display-inline">If the Secretary works with a consortium under subsection (a), the Secretary shall measure the effectiveness of the activities undertaken by the consortium under this Act.</text></subsection><subsection commented="no" display-inline="no-display-inline" id="idd97bf94d42b54f7fbec7c4a400291e56"><enum>(e)</enum><header display-inline="yes-display-inline">Outreach</header><text display-inline="yes-display-inline">The Secretary shall conduct outreach to universities and colleges, including historically Black colleges and universities, Hispanic-serving institutions, Tribal Colleges and Universities, and other minority-serving institutions, regarding opportunities to support efforts to address cybersecurity risks and incidents, by working with the Secretary under subsection (a).</text></subsection></section><section commented="no" display-inline="no-display-inline" section-type="subsequent-section" id="id77c791fe3a4549b1a5799cca57b825ac"><enum>4.</enum><header display-inline="yes-display-inline">Rule of construction</header><text display-inline="no-display-inline">Nothing in this Act may be construed to authorize a consortium to control or direct any law enforcement agency in the exercise of the duties of the law enforcement agency.</text></section></legis-body><attestation><attestation-group><attestation-date date="20210715" chamber="Senate">Passed the Senate July 15, 2021.</attestation-date><attestor display="yes">Sonceria Ann Berry,</attestor><role>Secretary</role></attestation-group></attestation></bill>


