National Cybersecurity Preparedness Consortium Act of 2019

I 116TH CONGRESS 1ST SESSION H. R. 1062 To authorize the Secretary of Homeland Security to work with cybersecurity consortia for training, and for other purposes. IN THE HOUSE OF REPRESENTATIVES FEBRUARY 7, 2019 Mr. CASTRO of Texas (for himself, Mr. HURD of Texas, Mr. DOGGETT, and Mr. CUELLAR) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To authorize the Secretary of Homeland Security to work with cybersecurity consortia for training, and for other purposes. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘National Cybersecurity 4 Preparedness Consortium Act of 2019’’. 5 SEC. 2. DEFINITIONS. 6 In this Act— 7 (1) the term ‘‘consortium’’ means a group pri- 8 marily composed of nonprofit entities, including aca- 9 VerDate Sep 11 2014 00:53 Feb 20, 2019 Jkt 089200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\H1062.IH H1062 pamtmann on DSKBFK8HB2PROD with BILLS 2 •HR 1062 IH demic institutions, that develop, update, and deliver 1 cybersecurity training in support of homeland secu- 2 rity; 3 (2) the terms ‘‘cybersecurity risk’’ and ‘‘inci- 4 dent’’ have the meanings given those terms in sec- 5 tion 2209(a) of the Homeland Security Act of 2002 6 (6 U.S.C. 659(a)); 7 (3) the term ‘‘Department’’ means the Depart- 8 ment of Homeland Security; and 9 (4) the term ‘‘Secretary’’ means the Secretary 10 of Homeland Security. 11 SEC. 3. NATIONAL CYBERSECURITY PREPAREDNESS CON- 12 SORTIUM. 13 (a) IN GENERAL.—The Secretary may work with a 14 consortium to support efforts to address cybersecurity 15 risks and incidents. 16 (b) ASSISTANCE TO THE NCCIC.—The Secretary 17 may work with a consortium to assist the national cyberse- 18 curity and communications integration center of the De- 19 partment (established under section 2209 of the Home- 20 land Security Act of 2002 (6 U.S.C. 659)) to— 21 (1) provide training to State and local first re- 22 sponders and officials specifically for preparing for 23 and responding to cybersecurity risks and incidents, 24 in accordance with applicable law; 25 VerDate Sep 11 2014 00:53 Feb 20, 2019 Jkt 089200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H1062.IH H1062 pamtmann on DSKBFK8HB2PROD with BILLS 3 •HR 1062 IH (2) develop and update a curriculum utilizing 1 existing programs and models in accordance with 2 such section 2209, for State and local first respond- 3 ers and officials, related to cybersecurity risks and 4 incidents; 5 (3) provide technical assistance services to build 6 and sustain capabilities in support of preparedness 7 for and response to cybersecurity risks and inci- 8 dents, including threats of terrorism and acts of ter- 9 rorism, in accordance with such section 2209; 10 (4) conduct cross-sector cybersecurity training 11 and simulation exercises for entities, including State 12 and local governments, critical infrastructure owners 13 and operators, and private industry, to encourage 14 community-wide coordination in defending against 15 and responding to cybersecurity risks and incidents, 16 in accordance with section 2210(c) of the Homeland 17 Security Act of 2002 (6 U.S.C. 660(c)); 18 (5) help States and communities develop cyber- 19 security information sharing programs, in accord- 20 ance with section 2209 of the Homeland Security 21 Act of 2002 (6 U.S.C. 659), for the dissemination 22 of homeland security information related to cyberse- 23 curity risks and incidents; and 24 VerDate Sep 11 2014 00:53 Feb 20, 2019 Jkt 089200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H1062.IH H1062 pamtmann on DSKBFK8HB2PROD with BILLS 4 •HR 1062 IH (6) help incorporate cybersecurity risk and inci- 1 dent prevention and response into existing State and 2 local emergency plans, including continuity of oper- 3 ations plans. 4 (c) CONSIDERATIONS REGARDING SELECTION OF A 5 CONSORTIUM.—In selecting a consortium with which to 6 work under this Act, the Secretary shall take into consid- 7 eration the following: 8 (1) Any prior experience conducting cybersecu- 9 rity training and exercises for State and local enti- 10 ties. 11 (2) Geographic diversity of the members of any 12 such consortium so as to cover different regions 13 throughout the United States. 14 (d) METRICS.—If the Secretary works with a consor- 15 tium under subsection (a), the Secretary shall measure the 16 effectiveness of the activities undertaken by the consor- 17 tium under this Act. 18 (e) OUTREACH.—The Secretary shall conduct out- 19 reach to universities and colleges, including historically 20 Black colleges and universities, Hispanic-serving institu- 21 tions, Tribal Colleges and Universities, and other minor- 22 ity-serving institutions, regarding opportunities to support 23 efforts to address cybersecurity risks and incidents, by 24 working with the Secretary under subsection (a). 25 VerDate Sep 11 2014 00:53 Feb 20, 2019 Jkt 089200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\H1062.IH H1062 pamtmann on DSKBFK8HB2PROD with BILLS 5 •HR 1062 IH SEC. 4. RULE OF CONSTRUCTION. 1 Nothing in this Act may be construed to authorize 2 a consortium to control or direct any law enforcement 3 agency in the exercise of the duties of the law enforcement 4 agency. 5 Æ VerDate Sep 11 2014 00:53 Feb 20, 2019 Jkt 089200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6301 E:\BILLS\H1062.IH H1062 pamtmann on DSKBFK8HB2PROD with BILLS