,i #aafth ,,congress #b;d ,session ,h4 ,r4 #hfab ,,in ,,the ,,house ,,of ,,representatives ,october #af1 #bjbj ,ms4 ,matsui 7for herself and ,mr4 ,langevin7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security1 and in addition to the ,committees on ,education and ,labor1 and ,science1 ,space1 and ,technology1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,a ,,bill ,to direct the ,director of the ,cybersecurity and ,infrastructure ,security ,agency to establish a ,school ,cybersecurity ,clearinghouse1 and for other purposes4 #a4 ,short title ,this ,act may cited as the ,enhancing ,k-#ab ,cybersecurity ,act4 #b4 ,school cybersecurity clearinghouse 7a7 ,establishment ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency shall establish a publicly accessible website 7to be known as the ,school ,cybersecurity ,clearinghouse7 to disseminate information1 best practices1 and grant opportunities in accordance with subsection 7b7 and section #b7;e74 7b7 ,duties ,in establishing the ,school ,cybersecurity ,clearinghouse under subsection 7a71 the ,secretary shall-- 7#a7 engage appropriate ,federal1 ,state1 local1 and nongovernmental organizations to identify1 promote1 and disseminate information and best practices for local educational agencies 7as defined in section #aja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #haja77 with respect to cybersecurity1 data protection1 remote learning security1 and student online privacy2 and 7#b7 maintain a searchable database for an elementary school1 secondary school1 local educational agency1 ,state educational agency1 and educational service agency to find and apply for funding opportunities 7including the opportunity provided under section #c7 to improve cybersecurity4 7c7 ,consultation ,in carrying out the duties under subsection 7b71 the ,secretary shall consult with the following3 7#a7 ,the ,secretary of ,education4 7#b7 ,the ,director of the ,national ,institute of ,standards and ,technology4 7#c7 ,the ,federal ,communication ,commission4 7#d7 ,the ,director of the ,national ,science ,foundation4 7#e7 ,the ,federal ,bureau of ,investigation4 7#f7 ,state and local leaders1 including1 when appropriate1 ,governors1 members of ,state legislatures and ,state boards of education1 local educational agencies1 representatives of ,indian tribes1 teachers1 principals1 other school leaders1 charter school leaders1 specialized instructional support personnel1 paraprofessionals1 administrators1 other staff1 and parents4 #c4 ,cybersecurity registry 7a7 ,in general ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency shall establish a voluntary registry of information relating to cyber attacks on elementary schools and secondary schools4 7b7 ,use ,information in the registry established pursuant to subsection 7a7 may be used to-- 7#a7 improve data collection and coordination activities related to the nationwide monitoring of the incidence and financial impact of cyber attacks on elementary schools and secondary schools2 7#b7 conduct analyses regarding trends in cyber attacks against such schools2 7#c7 develop systematic approaches to assist such schools in preventing and responding to cyber attacks2 7#d7 increase the awareness and preparedness of elementary school and secondary school administrators regarding the cybersecurity of such schools2 and 7#e7 identify1 prevent1 or investigate cyber attacks on elementary schools and secondary schools4 7c7 ,information collection ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency may collect information relating to cyber attacks on schools to store in the registry established pursuant to subsection 7a74 ,such information may be submitted by schools and may include the following3 7#a7 ,the dates of each cyber attack1 including the dates on which each such attack was initially detected and the dates on which each such attack was first reported4 7#b7 ,a description of each cyber attack which shall include whether each such attack was as a result of a breach1 malware1 distributed denial of service attack1 or other method designed to cause a vulnerability4 7#c7 ,the effects of each cyber attack1 including descriptions of the type and size of each such attack4 7#d7 ,other information determined relevant by the ,secretary4 7d7 ,access ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency may make information submitted to the registry established pursuant to subsection 7a7 available to relevant law enforcement agencies1 and ,state and local government agencies1 as determined appropriate1 for the purpose identified in subsection 7b77#e74 7e7 ,report ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency shall make available on the ,school ,cybersecurity ,clearinghouse established under section #a1 an annual report relating to cyber attacks on elementary schools and secondary schools which includes data1 and the analysis of such data1 in a manner that-- 7#a7 is-- 7,a7 de-identified2 and 7,b7 presented in the aggregate2 and 7#b7 at a minimum1 protects personal privacy to the extent required by applicable ,federal and ,state privacy laws4 #d4 ,k-#ab ,cybersecurity ,human ,capacity grant program 7a7 ,establishment ,the ,director of the ,national ,science ,foundation1 acting through the ,director of the ,office of ,advanced ,cyberinfrastructure1 shall establish a program 7to be known as the ,k-#ab ,cybersecurity ,human ,capacity grant program7 to make grants available to eligible entities to address cybersecurity risks and threats to information systems of elementary schools and secondary schools through-- 7#a7 expanded workforce capacity and development2 and 7#b7 improved network and cyberinfrastructure4 7b7 ,applications ,an eligible entity applying for a grant under the program shall submit to the ,director a proposal that includes the following3 7#a7 ,a description of how the proposed cybersecurity capacity improvements will be conceived1 designed1 and implemented to meet local needs4 ,such description shall take the form of a coherent cybersecurity strategy and approach for a school1 district1 or region such that such strategy and approach are integrated horizontally 7intra-school1 district1 or region7 and vertically 7regionally and nationally7 with cybersecurity investments and best practices4 7#b7 ,a plan for increasing the ability of educational leaders to prevent1 recognize1 and address cybersecurity threats4 7#c7 ,an assessment of the sustainability of the activities under such proposal in light of any recurring operational and engineering costs associated with such activities4 7#d7 ,a plan to address the relevant cybersecurity issues and challenges implicated by the activities under such plan which includes issues or challenges pertaining to data integrity1 privacy1 network security measures1 federated access and identity management1 and infrastructure monitoring4 7c7 ,federal share ,the ,director shall provide grants to eligible entities in an amount not to exceed #hj percent of the total cost of the plan4 7d7 ,selection ,in selecting recipients for grants under this section1 the ,director shall consider1 and give preference to the extent practicable1 the percentage of-- 7#a7 students in the eligible entity's jurisdiction eligible to receive free or reduced price lunch under the ,richard ,b4 ,russell ,national ,school ,lunch ,act 7#db ,u4,s4,c4 #agea et seq472 or 7#b7 household units in the eligible entity's jurisdiction receiving non-cash benefits under the supplemental nutrition assistance program under the ,food and ,nutrition ,act of #bjjh4 7e7 ,authorization of appropriations ,there are authorized to be appropriated for grants under this section #djj1jjj1jjj for fiscal year #bjbj1 to remain available through fiscal year #bjba4 #e4 ,definitions ,in this ,act3 7#a7 ,educational service agency ,the term educational service agency has the meaning given that term in section #haja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #ghja74 7#b7 ,elementary school ,the term elementary school has the meaning given that term in section #haja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #ghja74 7#c7 ,eligible entities ,the term eligible entities means-- 7,a7 an elementary school2 7,b7 a secondary school2 7,c7 a local educational agency2 7,d7 a ,state educational agency2 7,e7 an educational service agency2 and 7,f7 any combination of the entities listed in subparagraph consortia of such entities4 7#d7 ,local educational agency ,the term local educational agency has the meaning given that term in section #haja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #ghja74 7#e7 ,state educational agency ,the term ,state educational agency has the meaning given that term in section #haja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #ghja74 7#f7 ,secondary school ,the term secondary school has the meaning given that term in section #haja of the ,elementary and ,secondary ,education ,act of #aife 7#bj ,u4,s4,c4 #ghja74