,i  #aah? ,,congress  #a/ ,session  ,h4 
,r4 #bhde  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,april #be1 #bjbc,ms4 
,matsui 7= h]self & ,mr4 ,nunn ( ,i[a7  
introduc$ ! foll[+ bill2 :i* 0 ref]r$ to
 ! ,committee on ,homel& ,security1 & 9 
addition to ! ,committee on ,education &
 ! ,work=ce1 = a p]iod to be subsequ5tly
 det]m9$ by ! ,speak]1 9 ea* case =     
consid]ation ( su* provisions z fall )9 
! jurisdiction ( ! committee conc]n$  ,a
 ,,bill  ,to direct ! ,director ( !     
,cyb]security & ,infra/ructure ,security
 ,ag5cy to e/abli% a ,s*ool             
,cyb]security ,improvem5t ,program1 & = 
o!r purposes4  #a4 ,%ort title ,?is ,act
 may cit$ z ! ,enhanc+ ,k-#ab           
,cyb]security ,act4  #b4 ,s*ool         
cyb]security in=mation ex*ange  7a7     
,e/abli%m5t ,! ,director ( !            
,cyb]security & ,infra/ructure ,security
 ,ag5cy %all enhance exi/+ in=mation    
ex*ange ef=ts implem5t$ ?r\gh p>tn]%ips 
) "o or m in=mation %>+ & analysis      
organizations to focus specific att5tion

 on ! ne$s ( ,k-#ab organizations )     
reg>d to cyb]security1 includ+ a new    
publicly accessible website 7to be kn[n 
z ! ,s*ool ,cyb]security ,in=mation     
,ex*ange7 to dissem9ate in=mation1      
cyb]security be/ practices1 tra9+1 &    
lessons le>n$ tailor$ to ! specific     
ne$s1 te*nical exp]tise1 & res\rces     
available to ,k-#ab organizations 9     
accordance ) subsection 7b74  7b7       
,duties ,9 e/abli%+ ! ,s*ool            
,cyb]security ,in=mation ,ex*ange "u    
subsection 7a71 ! ,director %all-- 7#a7 
engage appropriate ,f$]al1 ,/ate1 local1
 & nongov]nm5tal organizations to       
id5tify1 promote1 & dissem9ate in=mation
 & be/ practices = local educational    
ag5cies1 ,/ate educational ag5cies1 &   
educational s]vice ag5cies 7z su* t]ms  
are def9$ 9 section #haja ( ! ,elem5t>y 
& ,second>y ,education ,act ( #aife 7#bj
 ,u4,s4,c4 #ghja77 ) respect to         
cyb]security1 data protection1 remote   
le>n+ security1 & /ud5t onl9e privacy2  
7#b7 ma9ta9 a database = an elem5t>y    

s*ool1 second>y s*ool1 local educational
 ag5cy1 ,/ate educational ag5cy1 &      
educational s]vice ag5cy to id5tify     
cyb]security security tools & s]vices   
fund$ by ! ,f$]al ,gov]nm5t1 z well z   
tools & s]vices recomm5d$ = pur*ase )   
,/ate & local gov]nm5t fund+2 &  7#c7   
provide a se>*able database = an        
elem5t>y s*ool1 second>y s*ool1 local   
educational ag5cy1 ,/ate educational    
ag5cy1 & educational s]vice ag5cy to f9d
 & apply = fund+ opportunities to       
improve cyb]security4  7c7 ,consultation
 ,9 c>ry+ out ! duties "u subsection    
7b71 ! ,director %all consult ) !       
foll[+3 7#a7 ,! ,secret>y ( ,education4 
7#b7 ,! ,director ( ! ,national         
,in/itute ( ,/&>ds & ,te*nology4  7#c7  
,! ,f$]al ,communication ,commission4   
7#d7 ,! ,director ( ! ,national ,sci5ce 
,f\ndation4  7#e7 ,! ,f$]al ,bureau (   
,inve/igation4  7#f7 ,/ate & local      
lead]s1 includ+1 :5 appropriate1        
,gov]nors1 employees ( ,/ate gov]nm5t   
dep>tm5ts & ag5cies1 memb]s ( ,/ate     

legislatures & ,/ate bo>ds ( education1 
local educational ag5cies1 ,/ate        
educational ag5cies1 repres5tatives (   
,indian tribes1 tea*]s1 pr9cipals1 o!r  
s*ool lead]s1 *>t] s*ool lead]s1        
specializ$ in/ructional support         
p]sonnel1 p>apr(essionals1 adm9i/rators1
 o!r /aff1 & p>5ts4  7#g7 ,:5 det]m9$   
appropriate by ! ,director1             
subject-matt] exp]ts & exp]t            
organizations1 includ+ nongov]nm5tal    
organizations1 v5dors ( s*ool in=mation 
te*nology products & s]vices1           
cyb]security insurance companies1 &     
cyb]security ?reat companies4  #c4      
,cyb]security incid5t regi/ry  7a7 ,9   
g5]al ,! ,director ( ! ,cyb]security &  
,infra/ructure ,security ,ag5cy %all    
e/abli%1 ?r\gh p>tn]%ips ) "o or m      
in=mation %>+ & analysis organizations1 
a volunt>y regi/ry ( in=mation relat+ to
 cyb] incid5ts affect+ in=mation        
te*nology sy/ems own$ or manag$ by a    
cov]$ entity1 & det]m9e ! scope ( cyb]  
incid5ts to be includ$ 9 ! regi/ry &    

processes by :i* incid5ts c be report$ =
 collection 9 ! regi/ry4  7b7 ,use      
,in=mation 9 ! regi/ry e/abli%$ pursuant
 to subsection 7a7 may be us$ to-- 7#a7 
improve data collection & coord9ation   
activities relat$ to ! nationwide       
monitor+ ( ! incid5ce & impact ( cyb]   
incid5ts affect+ a cov]$ entity2  7#b7  
conduct analyses reg>d+ tr5ds 9 cyb]    
incid5ts aga9/ su* entity2  7#c7 develop
 sy/ematic approa*es to assi/ su* entity
 9 prev5t+ & respond+ to cyb] incid5ts2 
7#d7 increase ! aw>5ess & prep>$ness ( a
 cov]$ entity reg>d+ ! cyb]security (   
su* cov]$ entity2 &  7#e7 id5tify1      
prev5t1 or inve/igate cyb] incid5ts     
t>get+ a cov]$ entity4  7c7 ,in=mation  
collection ,! ,director ( !             
,cyb]security & ,infra/ructure ,security
 ,ag5cy may collect in=mation relat+ to 
cyb] incid5ts to /ore 9 ! regi/ry       
e/abli%$ pursuant to subsection 7a74    
,su* in=mation may be submitt$ by a     
cov]$ entity & may include ! foll[+3    
7#a7 ,! dates ( ea* cyb] incid5t1       

includ+ ! dates on :i* ea* su* incid5t 0
 initially detect$ & ! dates on :i* ea* 
su* incid5t 0 fir/ publicly report$ or  
disclos$ to ano!r entity4  7#b7 ,a      
description ( ea* cyb] incid5t1 :i* %all
 include :e!r ea* su* incid5t 0 z a     
result ( a brea*1 malw>e1 di/ribut$     
d5ial ( s]vice attack1 or o!r me?od     
design$ to cause a vuln]ability4  7#c7  
,! effects ( ea* cyb] incid5t1 includ+  
descriptions ( ! type & size ( ea* su*  
incid5t4  7#d7 ,o!r in=mation det]m9$   
relevant by ! ,director4  7d7 ,report ,!
 ,director ( ! ,cyb]security &          
,infra/ructure ,security ,ag5cy %all    
make available on ! ,s*ool ,cyb]security
 ,in=mation ,ex*ange e/abli%$ "u section
 #b an annual report relat+ to cyb]     
incid5ts affect+ elem5t>y s*ools &      
second>y s*ools :i* includes data1 & !  
analysis ( su* data1 9 a mann] t-- 7#a7 
is-- 7,a7 de-id5tifi$2 &  7,b7 pres5t$ 9
 ! aggregate2 &  7#b7 at a m9imum1      
protects p]sonal privacy to ! ext5t     
requir$ by applicable ,f$]al & ,/ate    

privacy laws4  7e7 ,cov]$ entity def9$  
,9 ?is section1 ! t]m cov]$ entity means
 ! foll[+3 7#a7 ,an elem5t>y s*ool4     
7#b7 ,a second>y s*ool4  7#c7 ,a local  
educational ag5cy4  7#d7 ,a ,/ate       
educational ag5cy4  7#e7 ,an educational
 s]vice ag5cy4  #d4 ,k-#ab ,cyb]security
 ,te*nology ,improvem5t program  7a7    
,e/abli%m5t ,! ,director ( !            
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 %all e/abli%1 ?r\gh p>tn]%ips )
 "o or m in=mation %>+ & analysis       
organizations1 a program 7to be kn[n z !
 ,k-#ab ,cyb]security ,te*nology        
,improvem5t program7 to deploy          
cyb]security capabilities to address    
cyb]security risks & ?reats to in=mation
 sy/ems ( elem5t>y s*ools & second>y    
s*ools ?r\gh-- 7#a7 develop+            
cyb]security /rategies & in/allation (  
effective cyb]security tools tailor$ =  
,k-#ab s*ools2  7#b7 mak+ available     
cyb]security s]vices t enhance ! ability
 ( ,k-#ab s*ools to protect !mselves f  
ransomw>e & o!r cyb]security ?reats2 &  

7#c7 cont9u+ tra9+ opportunities on     
cyb]security ?reats1 be/ practices1 &   
relevant te*nologies = ,k-#ab s*ools4   
7b7 ,report ,! ,director ( !            
,cyb]security & ,infra/ructure ,security
 ,ag5cy %all make available on ! ,s*ool 
,cyb]security ,in=mation ,ex*ange       
e/abli%$ "u section #b an annual report 
relat+ to ! impact ( ! ,k-#ab           
,cyb]security ,te*nology ,improvem5t    
,program1 includ+ in=mation on !        
cyb]security capabilities made available
 to in=mation te*nology sy/ems own$ or  
manag$ by elem5t>y s*ools1 second>y     
s*ools1 local educational ag5cies1 ,/ate
 educational ag5cies1 & educational     
s]vice ag5cies1 ! numb] ( /ud5ts s]v$1 &
 cyb]security incid5ts id5tifi$ or      
prev5t$4  #e4 ,au?orization (           
appropriations ,!re are au?oriz$ to be  
appropriat$ to c>ry out ?is ,act        
#aj1jjj1jjj = ea* ( fiscal ye>s #bjbd & 
#bjbe4  #f4 ,def9itions ,9 ?is ,act3    
7#a7 ,educational s]vice ag5cy ,! t]m   
educational s]vice ag5cy has ! mean+    

giv5 t t]m 9 section #haja ( ! ,elem5t>y
 & ,second>y ,education ,act ( #aife    
7#bj ,u4,s4,c4 #ghja74  7#b7 ,elem5t>y  
s*ool ,! t]m elem5t>y s*ool has ! mean+ 
giv5 t t]m 9 section #haja ( ! ,elem5t>y
 & ,second>y ,education ,act ( #aife    
7#bj ,u4,s4,c4 #ghja74  7#c7 ,in=mation 
%>+ & analysis organization ,! t]m      
in=mation %>+ & analysis organization   
has ! mean+ giv5 t t]m 9 section #bbjj (
 ! ,homel& ,security ,act ( #bjjb 7#f   
,u4,s4,c4 #fej74  7#d7 ,local           
educational ag5cy ,! t]m local          
educational ag5cy has ! mean+ giv5 t t]m
 9 section #haja ( ! ,elem5t>y &        
,second>y ,education ,act ( #aife 7#bj  
,u4,s4,c4 #ghja74  7#e7 ,/ate           
educational ag5cy ,! t]m ,/ate          
educational ag5cy has ! mean+ giv5 t t]m
 9 section #haja ( ! ,elem5t>y &        
,second>y ,education ,act ( #aife 7#bj  
,u4,s4,c4 #ghja74  7#f7 ,second>y s*ool 
,! t]m second>y s*ool has ! mean+ giv5 t
 t]m 9 section #haja ( ! ,elem5t>y &    
,second>y ,education ,act ( #aife 7#bj  

,u4,s4,c4 #ghja74