[117th Congress Public Law 122]
[From the U.S. Government Publishing Office]



[[Page 136 STAT. 1193]]

Public Law 117-122
117th Congress

                                 An Act


 
      To authorize the Secretary of Homeland Security to work with 
          cybersecurity consortia for training, and for other 
              purposes. <<NOTE: May 12, 2022 -  [S. 658]>> 

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress 
assembled, <<NOTE: National Cybersecurity Preparedness Consortium Act of 
2021. 6 USC 652 note.>> 
SECTION 1. SHORT TITLE.

    This Act may be cited as the ``National Cybersecurity Preparedness 
Consortium Act of 2021''.
SEC. 2. NATIONAL CYBERSECURITY PREPAREDNESS CONSORTIUM.

    (a) In General.--The Secretary may work with one or more consortia 
to support efforts to address cybersecurity risks and incidents.
    (b) Assistance to DHS.--The Secretary may work with one or more 
consortia to carry out the Secretary's responsibility pursuant to 
section 2202(e)(1)(P) of the Homeland Security Act of 2002 (6 U.S.C. 
652(e)(1)(P)) to--
            (1) provide training and education to State, Tribal, and 
        local first responders and officials specifically for preparing 
        for and responding to cybersecurity risks and incidents, in 
        accordance with applicable law;
            (2) <<NOTE: Update.>>  develop and update a curriculum 
        utilizing existing training and educational programs and models 
        in accordance with section 2209 of the Homeland Security Act of 
        2002 (6 U.S.C. 659), for State, Tribal, and local first 
        responders and officials, related to cybersecurity risks and 
        incidents;
            (3) provide technical assistance services, training, and 
        educational programs to build and sustain capabilities in 
        support of preparedness for and response to cybersecurity risks 
        and incidents, including threats of acts of terrorism, in 
        accordance with such section 2209;
            (4) conduct cross-sector cybersecurity training, education, 
        and simulation exercises for entities, including State and local 
        governments and Tribal organizations, critical infrastructure 
        owners and operators, and private industry, to encourage 
        community-wide coordination in defending against and responding 
        to cybersecurity risks and incidents, in accordance with section 
        2210(c) of the Homeland Security Act of 2002 (6 U.S.C. 660(c));
            (5) help States, Tribal organizations, and communities 
        develop cybersecurity information sharing programs, in 
        accordance with section 2209 of the Homeland Security Act of 
        2002 (6 U.S.C. 659), for the dissemination of homeland security 
        information related to cybersecurity risks and incidents;

[[Page 136 STAT. 1194]]

            (6) help incorporate cybersecurity risk and incident 
        prevention and response into existing State, Tribal, and local 
        emergency plans, including continuity of operations plans; and
            (7) <<NOTE: Plans.>>  assist State governments and Tribal 
        organizations in developing cybersecurity plans.

    (c) Considerations Regarding Selection of a Consortium.--In 
selecting a consortium with which to work under this Act, the Secretary 
shall take into consideration the following:
            (1) Prior experience conducting cybersecurity training, 
        education, and exercises for State and local entities.
            (2) Geographic diversity of the members of any such 
        consortium so as to maximize coverage of the different regions 
        of the United States.
            (3) The participation in such consortium of one or more 
        historically Black colleges and universities, Hispanic-serving 
        institutions, Tribal Colleges and Universities, other minority-
        serving institutions, and community colleges that participate in 
        the National Centers of Excellence in Cybersecurity program, as 
        carried out by the Department of Homeland Security.

    (d) Metrics.--If the Secretary works with a consortium under 
subsection (a), the Secretary shall measure the effectiveness of the 
activities undertaken by the consortium under this Act.
    (e) Outreach.--The Secretary shall conduct outreach to universities 
and colleges, including, in particular, outreach to historically Black 
colleges and universities, Hispanic-serving institutions, Tribal 
Colleges and Universities, other minority-serving institutions, and 
community colleges, regarding opportunities to support efforts to 
address cybersecurity risks and incidents, by working with the Secretary 
under subsection (a).
    (f) Rule of Construction.--Nothing in this section may be construed 
to authorize a consortium to control or direct any law enforcement 
agency in the exercise of the duties of the law enforcement agency.
    (g) Definitions.--In this section--
            (1) the term ``community college'' has the meaning given the 
        term ``junior or community college'' in section 312 of the 
        Higher Education Act of 1965 (20 U.S.C. 1058);
            (2) the term ``consortium'' means a group primarily composed 
        of nonprofit entities, including academic institutions, that 
        develop, update, and deliver cybersecurity training and 
        education in support of homeland security;
            (3) the terms ``cybersecurity risk'' and ``incident'' have 
        the meanings given those terms in section 2209(a) of the 
        Homeland Security Act of 2002 (6 U.S.C. 659(a));
            (4) the term ``Department'' means the Department of Homeland 
        Security;
            (5) the term ``Hispanic-serving institution'' has the 
        meaning given the term in section 502 of the Higher Education 
        Act of 1965 (20 U.S.C. 1101a);
            (6) the term ``historically Black college and university'' 
        has the meaning given the term ``part B institution'' in section 
        322 of the Higher Education Act of 1965 (20 U.S.C. 1061);
            (7) the term ``minority-serving institution'' means an 
        institution of higher education described in section 371(a) of 
        the Higher Education Act of 1965 (20 U.S.C. 1067q(a));
            (8) the term ``Secretary'' means the Secretary of Homeland 
        Security;

[[Page 136 STAT. 1195]]

            (9) The term ``State'' means any State of the United States, 
        the District of Columbia, the Commonwealth of Puerto Rico, the 
        United States Virgin Islands, Guam, American Samoa, the 
        Commonwealth of the Northern Mariana Islands, and any possession 
        of the United States;
            (10) the term ``Tribal Colleges and Universities'' has the 
        meaning given the term in section 316 of the Higher Education 
        Act of 1965 (20 U.S.C. 1059c); and
            (11) the term ``Tribal organization'' has the meaning given 
        the term in section 4(e) of the Indian Self-Determination and 
        Education Assistance Act (25 U.S.C. 5304(e)).

    Approved May 12, 2022.

LEGISLATIVE HISTORY--S. 658:
---------------------------------------------------------------------------

SENATE REPORTS: No. 117-24 (Comm. on Homeland Security and
Governmental Affairs).
CONGRESSIONAL RECORD:
                                                        Vol. 167 (2021):
                                    July 15, considered and passed 
                                        Senate.
                                                        Vol. 168 (2022):
                                    Mar. 7, considered and passed House, 
                                        amended.
                                    Apr. 7, Senate concurred in House 
                                        amendment.

                                  <all>