PROTECT Act of 2020

II 116TH CONGRESS 2D SESSION S. 4195 To authorize the Cybersecurity Education Training Assistance Program. IN THE SENATE OF THE UNITED STATES JULY 2, 2020 Ms. ROSEN (for herself and Mr. CASSIDY) introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs A BILL To authorize the Cybersecurity Education Training Assistance Program. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘Providing Resources 4 for Ongoing Training and Education in Cyber Tech- 5 nologies Act of 2020’’ or the ‘‘PROTECT Act of 2020’’. 6 SEC. 2. CYBERSECURITY EDUCATION AND TRAINING AS- 7 SISTANCE PROGRAM. 8 (a) SENSE OF CONGRESS.—It is the sense of Con- 9 gress that— 10 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 2 •S 4195 IS (1) the United States continues to face critical 1 shortages in the national cybersecurity workforce; 2 (2) the Cybersecurity and Infrastructure Secu- 3 rity Agency within the Department of Homeland Se- 4 curity has the responsibility to manage cyber and 5 physical risks to our critical infrastructure, including 6 by ensuring a national workforce supply to support 7 cybersecurity through education, training, and ca- 8 pacity development efforts; 9 (3) to reestablish the technology leadership, se- 10 curity, and economic competitiveness of the United 11 States, the Cybersecurity and Infrastructure Secu- 12 rity Agency should create a sustainable pipeline by 13 strengthening elementary and secondary cybersecu- 14 rity outreach and education nationwide. 15 (b) AUTHORITIES.—Section 2202(e)(1) of the Home- 16 land Security Act of 2002 (6 U.S.C. 652(e)(1)) is amend- 17 ed by adding at the end the following: 18 ‘‘(R) To encourage and build cybersecurity 19 awareness and competency across the United 20 States and to develop, attract, and retain the 21 cybersecurity workforce necessary for the cyber- 22 security related missions of the Department, in- 23 cluding by— 24 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 3 •S 4195 IS ‘‘(i) overseeing elementary and sec- 1 ondary cybersecurity education and aware- 2 ness related programs at the Department; 3 ‘‘(ii) leading efforts to develop, at- 4 tract, and retain the cybersecurity work- 5 force necessary for the cybersecurity re- 6 lated missions of the Department; 7 ‘‘(iii) encouraging and building cyber- 8 security awareness and competency across 9 the United States; and 10 ‘‘(iv) carrying out cybersecurity re- 11 lated workforce development activities, in- 12 cluding through— 13 ‘‘(I) increasing the pipeline of fu- 14 ture cybersecurity professionals 15 through programs focused on elemen- 16 tary and secondary education, higher 17 education, and underrepresented stu- 18 dents in science and engineering, in- 19 cluding women and racial and ethnic 20 minorities; and 21 ‘‘(II) building awareness of and 22 competency in cybersecurity across 23 the civilian Federal government work- 24 force.’’. 25 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 4 •S 4195 IS (c) EDUCATION, TRAINING, AND CAPACITY DEVEL- 1 OPMENT.—Section 2202(c) of the Homeland Security Act 2 of 2002 (6 U.S.C. 652(c)) is amended— 3 (1) by redesignating paragraph (11) as para- 4 graph (12); 5 (2) in paragraph (10), by striking ‘‘and’’ at the 6 end; and 7 (3) by inserting after paragraph (10) the fol- 8 lowing: 9 ‘‘(11) provide education, training, and capacity 10 development for Federal and non-Federal entities to 11 enhance the security and resiliency of domestic and 12 global cybersecurity and infrastructure security; 13 and’’. 14 (d) ESTABLISHMENT OF TRAINING PROGRAMS.— 15 Subtitle A of title XXII of the Homeland Security Act of 16 2002 (6 U.S.C. 651 et seq.) is amended by adding at the 17 end the following: 18 ‘‘SEC. 2215. CYBERSECURITY EDUCATION AND TRAINING 19 PROGRAMS. 20 ‘‘(a) ESTABLISHMENT.— 21 ‘‘(1) IN GENERAL.—The Cybersecurity Edu- 22 cation and Training Assistance Program (referred to 23 in this section as ‘CETAP’) is established within the 24 Agency. 25 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 5 •S 4195 IS ‘‘(2) PURPOSE.—The purpose of CETAP shall 1 be to support the effort of the Agency in building 2 and strengthening a national cybersecurity workforce 3 pipeline capacity through supporting elementary and 4 secondary cybersecurity education, including by— 5 ‘‘(A) providing foundational cybersecurity 6 awareness and literacy; 7 ‘‘(B) encouraging cybersecurity career ex- 8 ploration; and 9 ‘‘(C) supporting the teaching of cybersecu- 10 rity skills in elementary and secondary schools. 11 ‘‘(b) REQUIREMENTS.—In carrying out CETAP, the 12 Director shall— 13 ‘‘(1) implement a program that— 14 ‘‘(A) conducts professional development 15 sessions for educators in elementary and sec- 16 ondary schools; 17 ‘‘(B) develops resources for the teaching of 18 elementary and secondary education cybersecu- 19 rity-focused curricula; 20 ‘‘(C) provides direct student engagement 21 opportunities through camps and other pro- 22 gramming; 23 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 6 •S 4195 IS ‘‘(D) engages with local educational agen- 1 cies and State education agencies to promote 2 awareness of the program; 3 ‘‘(E) integrates with existing post-sec- 4 ondary education and workforce development 5 programs at the Department; 6 ‘‘(F) partners with cybersecurity and edu- 7 cation stakeholder groups to expand outreach; a 8 ‘‘(G) increases the participation of women 9 or racial and ethnic minorities underrepresented 10 in science and engineering, or both, in cyberse- 11 curity education activities; and 12 ‘‘(H) any other activity the Director deter- 13 mines necessary to meet the purpose described 14 in subsection (a)(2); and 15 ‘‘(2) enable the deployment of CETAP nation- 16 wide. 17 ‘‘(c) BRIEFINGS.— 18 ‘‘(1) IN GENERAL.—Not later than 1 year after 19 the establishment of CETAP, and annually there- 20 after, the Secretary shall brief the Committee on 21 Homeland Security and Governmental Affairs of the 22 Senate and the Committee on Homeland Security of 23 the House of Representatives on the program. 24 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 7 •S 4195 IS ‘‘(2) CONTENTS.—Each briefing conducted 1 under paragraph (1) shall include— 2 ‘‘(A) estimated figures on the number of 3 students reached and educators engaged, in- 4 cluding underrepresented students in science 5 and engineering, including women and racial 6 and ethnic minorities; 7 ‘‘(B) information on community outreach 8 and State engagement efforts; 9 ‘‘(C) information on new curricula offer- 10 ings and educator professional development 11 platforms; and 12 ‘‘(D) information on coordination with 13 post-secondary education and workforce devel- 14 opment programs at the Department. 15 ‘‘(d) MISSION PROMOTION.—The Director may use 16 appropriated amounts to purchase promotional and rec- 17 ognition items and marketing and advertising services to 18 publicize and promote the mission and services of the 19 Agency, support the activities of the Agency, and to re- 20 cruit and retain Agency personnel. 21 ‘‘(e) DEFINITIONS.—The terms ‘elementary school’, 22 ‘local educational agency’, ‘professional development’, ‘sec- 23 ondary school’, and ‘State educational agency’ have the 24 meaning given the terms in section 8101 of the Elemen- 25 VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS 8 •S 4195 IS tary and Secondary Education Act of 1965 (20 U.S.C. 1 7801).’’. 2 (e) TECHNICAL AND CONFORMING AMENDMENT.— 3 The table of contents in section 1(b) of the Homeland Se- 4 curity Act of 2002 (Public Law 107–296; 116 Stat. 2135) 5 is amended by inserting after the item relating to section 6 2214 the following: 7 ‘‘Sec. 2215. Cybersecurity Education and Training Programs.’’. Æ VerDate Sep 11 2014 21:42 Jul 12, 2020 Jkt 099200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6301 E:\BILLS\S4195.IS S4195 pbinns on DSKJLVW7X2PROD with BILLS