[Congressional Record Volume 167, Number 194 (Thursday, November 4, 2021)]
[Senate]
[Page S7949]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 4460. Mr. CORNYN (for himself and Mr. Leahy) submitted an 
amendment intended to be proposed to amendment SA 3867 submitted by Mr. 
Reed and intended to be proposed to the bill H.R. 4350, to authorize 
appropriations for fiscal year 2022 for military activities of the 
Department of Defense, for military construction, and for defense 
activities of the Department of Energy, to prescribe military personnel 
strengths for such fiscal year, and for other purposes; which was 
ordered to lie on the table; as follows:

        At the appropriate place in title X, insert the following:

    Subtitle __--National Cybersecurity Preparedness Consortium Act

     SEC. __01. SHORT TITLE.

       This subtitle may be cited as the ``National Cybersecurity 
     Preparedness Consortium Act of 2021''.

     SEC. __02. DEFINITIONS.

       In this subtitle--
       (1) the term ``community college'' has the meaning given 
     the term ``junior or community college'' in section 312 of 
     the Higher Education Act of 1965 (20 U.S.C. 1058);
       (2) the term ``consortium'' means a group primarily 
     composed of nonprofit entities, including academic 
     institutions, that develop, update, and deliver cybersecurity 
     training in support of homeland security;
       (3) the terms ``cybersecurity risk'' and ``incident'' have 
     the meanings given those terms in section 2209(a) of the 
     Homeland Security Act of 2002 (6 U.S.C. 659(a));
       (4) the term ``Department'' means the Department of 
     Homeland Security;
       (5) the term ``Hispanic-serving institution'' has the 
     meaning given the term in section 502 of the Higher Education 
     Act of 1965 (20 U.S.C. 1101a);
       (6) the term ``historically Black college and university'' 
     has the meaning given the term ``part B institution'' in 
     section 322 of the Higher Education Act of 1965 (20 U.S.C. 
     1061);
       (7) the term ``minority-serving institution'' means an 
     institution of higher education described in section 371(a) 
     of the Higher Education Act of 1965 (20 U.S.C. 1067q(a));
       (8) the term ``Secretary'' means the Secretary of Homeland 
     Security;
       (9) The term ``State'' means any State of the United 
     States, the District of Columbia, the Commonwealth of Puerto 
     Rico, the United States Virgin Islands, Guam, American Samoa, 
     the Commonwealth of the Northern Mariana Islands, and any 
     possession of the United States;
       (10) the term ``Tribal Colleges and Universities'' has the 
     meaning given the term in section 316 of the Higher Education 
     Act of 1965 (20 U.S.C. 1059c); and
       (11) the term ``Tribal organization'' has the meaning given 
     the term in section 4(e) of the Indian Self-Determination and 
     Education Assistance Act (25 U.S.C. 5304(e)).

     SEC. __03. NATIONAL CYBERSECURITY PREPAREDNESS CONSORTIUM.

       (a) In General.--The Secretary may work with 1 or more 
     consortia to support efforts to address cybersecurity risks 
     and incidents.
       (b) Assistance to DHS.--The Secretary may work with 1 or 
     more consortia to carry out the responsibility of the 
     Secretary under section 2209(e)(1)(P) of the Homeland 
     Security Act of 2002 (6 U.S.C. 659(e)(1)(P)) to--
       (1) provide training and education to State, Tribal, and 
     local first responders and officials specifically for 
     preparing for and responding to cybersecurity risks and 
     incidents, in accordance with applicable law;
       (2) develop and update a curriculum utilizing existing 
     training and educational programs and models in accordance 
     with section 2209 of the Homeland Security Act of 2002 (6 
     U.S.C. 659), for State, Tribal, and local first responders 
     and officials, related to cybersecurity risks and incidents;
       (3) provide technical assistance services, training, and 
     educational programs to build and sustain capabilities in 
     support of preparedness for and response to cybersecurity 
     risks and incidents, including threats and acts of terrorism, 
     in accordance with such section 2209;
       (4) conduct cross-sector cybersecurity training, education, 
     and simulation exercises for entities, including State and 
     local governments and Tribal organizations, critical 
     infrastructure owners and operators, and private industry, to 
     encourage community-wide coordination in defending against 
     and responding to cybersecurity risks and incidents, in 
     accordance with section 2210(c) of the Homeland Security Act 
     of 2002 (6 U.S.C. 660(c));
       (5) help States, Tribal organizations, and communities 
     develop cybersecurity information sharing programs, in 
     accordance with section 2209 of the Homeland Security Act of 
     2002 (6 U.S.C. 659), for the dissemination of homeland 
     security information related to cybersecurity risks and 
     incidents;
       (6) help incorporate cybersecurity risk and incident 
     prevention and response into existing State, Tribal, and 
     local emergency plans, including continuity of operations 
     plans; and
       (7) assist States and Tribal organizations in developing 
     cybersecurity plans.
       (c) Considerations Regarding Selection of a Consortium.--In 
     selecting a consortium with which to work under this 
     subtitle, the Secretary shall take into consideration the 
     following:
       (1) Prior experience conducting cybersecurity training, 
     education, and exercises for State and local entities.
       (2) Geographic diversity of the members of any such 
     consortium so as to maximize coverage of the different 
     regions of the United States.
       (3) The participation in such consortium of 1 or more 
     historically Black colleges and universities, Hispanic-
     serving institutions, Tribal Colleges and Universities, other 
     minority-serving institutions, and community colleges that 
     participate in the National Centers of Excellence in 
     Cybersecurity program, as carried out by the Department.
       (d) Metrics.--If the Secretary works with a consortium 
     under subsection (a), the Secretary shall measure the 
     effectiveness of the activities undertaken by the consortium 
     under this subtitle.
       (e) Outreach.--The Secretary shall conduct outreach to 
     universities and colleges, including, in particular, outreach 
     to historically Black colleges and universities, Hispanic-
     serving institutions, Tribal Colleges and Universities, other 
     minority-serving institutions, and community colleges, 
     regarding opportunities to support efforts to address 
     cybersecurity risks and incidents, by working with the 
     Secretary under subsection (a).

     SEC. __04. RULE OF CONSTRUCTION.

       Nothing in this subtitle may be construed to authorize a 
     consortium to control or direct any law enforcement agency in 
     the exercise of the duties of the law enforcement agency.
                                 ______