,,ii #aah? ,,congress #a/ ,session ,s4 #aaia ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,april #ai1 #bjbc,mrs4 ,blackburn 7= h]self & ,mr4 ,w>n]7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to direct ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy to e/abli% a ,k-#ab ,cyb]security ,te*nology ,improvem5t ,program1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may cit$ z ! ,enhanc+ ,k-#ab ,cyb]security ,act4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,cov]$ entity ,! t]m cov]$ entity means ! foll[+3 7,a7 ,an elem5t>y s*ool4 7,b7 ,a second>y s*ool4 7,c7 ,a local educational ag5cy4 7,d7 ,a ,/ate educational ag5cy4 7,e7 ,an educational s]vice ag5cy4 7#b7 ,director ,! t]m ,director means ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#c7 ,educational s]vice ag5cy ,! t]m educational s]vice ag5cy has ! mean+ giv5 t t]m 9 section #haja ( ! ,elem5t>y & ,second>y ,education ,act ( #aife 7#bj ,u4,s4,c4 #ghja74 7#d7 ,elem5t>y s*ool ,! t]m elem5t>y s*ool has ! mean+ giv5 t t]m 9 section #haja ( ! ,elem5t>y & ,second>y ,education ,act ( #aife 7#bj ,u4,s4,c4 #ghja74 7#e7 ,in=mation ,ex*ange ,! t]m ,in=mation ,ex*ange means ! ,s*ool ,cyb]security ,in=mation ,ex*ange e/abli%$ "u section #c7;a74 7#f7 ,in=mation ,%>+ & ,analysis ,organization ,! t]m ,in=mation ,%>+ & ,analysis ,organization has ! mean+ giv5 t t]m 9 section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej74 7#g7 ,local educational ag5cy ,! t]m local educational ag5cy has ! mean+ giv5 t t]m 9 section #haja ( ! ,elem5t>y & ,second>y ,education ,act ( #aife 7#bj ,u4,s4,c4 #ghja74 7#h7 ,second>y s*ool ,! t]m second>y s*ool has ! mean+ giv5 t t]m 9 section #haja ( ! ,elem5t>y & ,second>y ,education ,act ( #aife 7#bj ,u4,s4,c4 #ghja74 7#i7 ,/ate educational ag5cy ,! t]m ,/ate educational ag5cy has ! mean+ giv5 t t]m 9 section #haja ( ! ,elem5t>y & ,second>y ,education ,act ( #aife 7#bj ,u4,s4,c4 #ghja74 #c4 ,s*ool cyb]security in=mation ex*ange 7a7 ,e/abli%m5t ,! ,director %all enhance exi/+ in=mation ex*ange ef=ts implem5t$ ?r\gh p>tn]%ips ) #a or m ,in=mation ,%>+ & ,analysis ,organizations to focus specific att5tion on ! ne$s ( cov]$ entities ) reg>d to cyb]security1 includ+ a new publicly accessible website 7to be kn[n z ! ,s*ool ,cyb]security ,in=mation ,ex*ange7 to dissem9ate in=mation1 cyb]security be/ practices1 tra9+1 & lessons le>n$ tailor$ to ! specific ne$s (1 te*nical exp]tise (1 & res\rces available to cov]$ entities1 9 accordance ) subsection 7b74 7b7 ,duties ,9 e/abli%+ ! ,in=mation ,ex*ange1 ! ,director %all-- 7#a7 engage appropriate ,f$]al1 ,/ate1 local1 & nongov]nm5tal organizations to id5tify1 promote1 & dissem9ate in=mation & be/ practices = ,/ate educational ag5cies1 local educational ag5cies1 & educational s]vice ag5cies ) respect to cyb]security1 data protection1 remote le>n+ security1 & /ud5t onl9e privacy2 7#b7 ma9ta9 a database ?r\gh :i* an elem5t>y s*ool1 second>y s*ool1 local educational ag5cy1 ,/ate educational ag5cy1 or educational s]vice ag5cy may id5tify cyb]security tools & s]vices fund$ by ! ,f$]al ,gov]nm5t & tools & s]vices recomm5d$ = pur*ase ) ,/ate & local gov]nm5t fund+2 & 7#c7 provide a se>*able database ?r\gh :i* cov]$ entities may f9d & apply = fund+ opportunities to improve cyb]security4 7c7 ,consultation ,9 c>ry+ out ! duties "u subsection 7b71 ! ,director %all consult ) ! foll[+3 7#a7 ,! ,secret>y ( ,education4 7#b7 ,! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7#c7 ,! ,f$]al ,communications ,commission4 7#d7 ,! ,director ( ! ,national ,sci5ce ,f\ndation4 7#e7 ,! ,f$]al ,bureau ( ,inve/igation4 7#f7 ,/ate & local lead]s1 includ+1 :5 appropriate1 ,gov]nors1 employees ( ,/ate dep>tm5ts & ag5cies1 memb]s ( ,/ate legislatures & ,/ate bo>ds ( education1 local educational ag5cies1 ,/ate educational ag5cies1 repres5tatives ( ,indian ,tribes1 tea*]s1 pr9cipals1 o!r s*ool lead]s1 *>t] s*ool lead]s1 specializ$ in/ructional support p]sonnel1 p>apr(essionals1 s*ool adm9i/rators1 o!r s*ool /aff1 & p>5ts4 7#g7 ,:5 det]m9$ appropriate by ! ,director1 subject matt] exp]ts & exp]t organizations1 includ+ nongov]nm5tal organizations1 v5dors ( s*ool in=mation te*nology products & s]vices1 cyb]security insurance companies1 & cyb]security ?reat companies4 #d4 ,cyb]security incid5t regi/ry 7a7 ,9 g5]al ,! ,director %all-- 7#a7 e/abli%1 ?r\gh p>tn]%ips ) #a or m ,in=mation ,%>+ & ,analysis ,organizations1 a volunt>y regi/ry ( in=mation relat+ to cyb] incid5ts affect+ in=mation te*nology sy/ems own$ or manag$ by a cov]$ entity2 & 7#b7 det]m9e ! scope ( cyb] incid5ts to be includ$ 9 ! regi/ry & processes by :i* incid5ts c be report$ = collection 9 ! regi/ry4 7b7 ,use ,in=mation 9 ! regi/ry e/abli%$ pursuant "u subsection 7a7 may be us$ to-- 7#a7 improve data collection & coord9ation activities relat$ to ! nationwide monitor+ ( ! incid5ce & impact ( cyb] incid5ts affect+ a cov]$ entity2 7#b7 conduct analyses reg>d+ tr5ds 9 cyb] incid5ts affect+ a cov]$ entity2 7#c7 develop sy/ematic approa*es to assi/ a cov]$ entity 9 prev5t+ & respond+ to cyb] incid5ts2 7#d7 increase ! aw>5ess & prep>$ness ( a cov]$ entity reg>d+ ! cyb]security ( ! cov]$ entity2 & 7#e7 id5tify1 prev5t1 or inve/igate cyb] incid5ts t>get+ a cov]$ entity4 7c7 ,in=mation collection 7#a7 ,9 g5]al ,! ,director may collect in=mation relat+ to cyb] incid5ts to /ore 9 ! regi/ry e/abli%$ pursuant to subsection 7a74 7#b7 ,submission ( in=mation ,in=mation relat+ to a cyb] incid5t may be submitt$ by a cov]$ entity & may include ! foll[+3 7,a7 ,! date ( ! cyb] incid5t1 includ+ ! date on :i* ! incid5t 0 initially detect$ & ! date on :i* ! incid5t 0 fir/ publicly report$ or disclos$ to ano!r entity4 7,b7 ,a description ( ! cyb] incid5t1 :i* %all include :e!r ! incid5t 0 z a result ( a brea*1 malw>e1 di/ribut$ d5ial ( s]vice attack1 or o!r me?od design$ to cause a vuln]ability4 7,c7 ,! effects ( ! cyb] incid5t1 includ+ descriptions ( ! type & size ( ea* su* incid5t4 7,d7 ,o!r in=mation det]m9$ relevant by ! ,director4 7d7 ,report ,! ,director %all make available on ! ,in=mation ,ex*ange an annual report relat+ to cyb] incid5ts affect+ elem5t>y s*ools & second>y s*ools :i* includes data1 & ! analysis ( su* data1 9 a mann] t-- 7#a7 is-- 7,a7 de-id5tifi$2 & 7,b7 pres5t$ 9 ! aggregate2 & 7#b7 at a m9imum1 protects p]sonal privacy to ! ext5t requir$ by applicable ,f$]al & ,/ate privacy laws4 #e4 ,k-#ab ,cyb]security ,te*nology ,improvem5t program 7a7 ,e/abli%m5t ,! ,director %all e/abli%1 ?r\gh p>tn]%ips ) #a or m ,in=mation ,%>+ & ,analysis ,organizations1 a program 7to be kn[n z ! ,k-#ab ,cyb]security ,te*nology ,improvem5t ,program7 to deploy cyb]security capabilities to address cyb]security risks & ?reats to in=mation sy/ems ( elem5t>y s*ools & second>y s*ools ?r\gh-- 7#a7 ! developm5t ( cyb]security /rategies & in/allation ( effective cyb]security tools tailor$ = cov]$ entities2 7#b7 mak+ available cyb]security s]vices t enhance ! ability ( elem5t>y s*ools & second>y s*ools to protect !mselves f ransomw>e & o!r cyb]security ?reats2 & 7#c7 provid+ tra9+ opportunities on cyb]security ?reats1 be/ practices1 & relevant te*nologies = elem5t>y s*ools & second>y s*ools4 7b7 ,report ,! ,director %all make available on ! ,in=mation ,ex*ange an annual report relat+ to ! impact ( ! ,k-#ab ,cyb]security ,te*nology ,improvem5t ,program1 includ+ in=mation on ! cyb]security capabilities made available to in=mation te*nology sy/ems own$ or manag$ by cov]$ entities1 ! numb] ( /ud5ts s]v$1 & cyb]security incid5ts id5tifi$ or prev5t$4 #f4 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ to c>ry out ?is ,act #aj1jjj1jjj = ea* ( fiscal ye>s #bjbc & #bjbd4