United States S 1191: A bill to direct the Director of the Cybersecurity and Infrastructure Security Agency to establish a K-12 Cybersecurity Technology Improvement Program, and for other purposes.

Bill Text

II
118TH CONGRESS
1ST SESSION S. 1191
To direct the Director of the Cybersecurity and Infrastructure Security Agen-
cy to establish a K–12 Cybersecurity Technology Improvement Program,
and for other purposes.
IN THE SENATE OF THE UNITED STATES
APRIL 19, 2023
Mrs. BLACKBURN (for herself and Mr. WARNER) introduced the following bill;
which was read twice and referred to the Committee on Homeland Secu-
rity and Governmental Affairs
A BILL
To direct the Director of the Cybersecurity and Infrastruc-
ture Security Agency to establish a K–12 Cybersecurity
Technology Improvement Program, and for other pur-
poses.
Be it enacted by the Senate and House of Representa-1
tives of the United States of America in Congress assembled, 2
SECTION 1. SHORT TITLE. 3
This Act may cited as the ‘‘Enhancing K–12 Cyberse-4
curity Act’’. 5
SEC. 2. DEFINITIONS. 6
In this Act: 7
VerDate Sep 11 2014 03:13 Apr 21, 2023 Jkt 039200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S1191.IS S1191pbinns on DSKJLVW7X2PROD with $$_JOB

2
•S 1191 IS
(1) COVERED ENTITY.—The term ‘‘covered en-1
tity’’ means the following: 2
(A) An elementary school. 3
(B) A secondary school. 4
(C) A local educational agency. 5
(D) A State educational agency. 6
(E) An educational service agency. 7
(2) DIRECTOR.—The term ‘‘Director’’ means 8
the Director of the Cybersecurity and Infrastructure 9
Security Agency. 10
(3) EDUCATIONAL SERVICE AGENCY.—The 11
term ‘‘educational service agency’’ has the meaning 12
given that term in section 8101 of the Elementary 13
and Secondary Education Act of 1965 (20 U.S.C. 14
7801). 15
(4) ELEMENTARY SCHOOL.—The term ‘‘elemen-16
tary school’’ has the meaning given that term in sec-17
tion 8101 of the Elementary and Secondary Edu-18
cation Act of 1965 (20 U.S.C. 7801). 19
(5) INFORMATION EXCHANGE.—The term ‘‘In-20
formation Exchange’’ means the School Cybersecu-21
rity Information Exchange established under section 22
3(a). 23
(6) INFORMATION SHARING AND ANALYSIS OR-24
GANIZATION.—The term ‘‘Information Sharing and 25
VerDate Sep 11 2014 03:13 Apr 21, 2023 Jkt 039200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S1191.IS S1191pbinns on DSKJLVW7X2PROD with $$_JOB

3
•S 1191 IS
Analysis Organization’’ has the meaning given that 1
term in section 2200 of the Homeland Security Act 2
of 2002 (6 U.S.C. 650). 3
(7) LOCAL EDUCATIONAL AGENCY.—The term 4
‘‘local educational agency’’ has the meaning given 5
that term in section 8101 of the Elementary and 6
Secondary Education Act of 1965 (20 U.S.C. 7801). 7
(8) SECONDARY SCHOOL.—The term ‘‘sec-8
ondary school’’ has the meaning given that term in 9
section 8101 of the Elementary and Secondary Edu-10
cation Act of 1965 (20 U.S.C. 7801). 11
(9) STATE EDUCATIONAL AGENCY.—The term 12
‘‘State educational agency’’ has the meaning given 13
that term in section 8101 of the Elementary and 14
Secondary Education Act of 1965 (20 U.S.C. 7801). 15
SEC. 3. SCHOOL CYBERSECURITY INFORMATION EX-16
CHANGE. 17
(a) ESTABLISHMENT.—The Director shall enhance 18
existing information exchange efforts implemented 19
through partnerships with 1 or more Information Sharing 20
and Analysis Organizations to focus specific attention on 21
the needs of covered entities with regard to cybersecurity, 22
including a new publicly accessible website (to be known 23
as the ‘‘School Cybersecurity Information Exchange’’) to 24
disseminate information, cybersecurity best practices, 25
VerDate Sep 11 2014 03:13 Apr 21, 2023 Jkt 039200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S1191.IS S1191pbinns on DSKJLVW7X2PROD with $$_JOB

4
•S 1191 IS
training, and lessons learned tailored to the specific needs 1
of, technical expertise of, and resources available to cov-2
ered entities, in accordance with subsection (b). 3
(b) DUTIES.—In establishing the Information Ex-4
change, the Director shall— 5
(1) engage appropriate Federal, State, local, 6
and nongovernmental organizations to identify, pro-7
mote, and disseminate information and best prac-8
tices for State educational agencies, local educational 9
agencies, and educational service agencies with re-10
spect to cybersecurity, data protection, remote learn-11
ing security, and student online privacy; 12
(2) maintain a database through which an ele-13
mentary school, secondary school, local educational 14
agency, State educational agency, or educational 15
service agency may identify cybersecurity tools and 16
services funded by the Federal Government and 17
tools and services recommended for purchase with 18
State and local government funding; and 19
(3) provide a searchable database through 20
which covered entities may find and apply for fund-21
ing opportunities to improve cybersecurity. 22
(c) CONSULTATION.—In carrying out the duties 23
under subsection (b), the Director shall consult with the 24
following: 25
VerDate Sep 11 2014 03:13 Apr 21, 2023 Jkt 039200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S1191.IS S1191pbinns on DSKJLVW7X2PROD with $$_JOB

5
•S 1191 IS
(1) The Secreta