S. 3635 — Introduced in Senate

II 118th CONGRESS 2d Session S. 3635 IN THE SENATE OF THE UNITED STATES January 22, 2024Mr. Peters (for himself and Mr. Braun) introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs A BILL To improve the President's Cup Cybersecurity Competitions. 1. Short title This Act may be cited as the Industrial Control Systems Cybersecurity Competition Act. 2. President's Cup Cybersecurity Competitions Section 7121(d) of the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023 (6 U.S.C. 665m(d)) is amended— (1) by striking paragraph (3); (2) by redesignating paragraphs (1), (2), and (4) as subparagraphs (A), (B), and (C), respectively, and adjusting the margin accordingly; (3) by striking Each competition and inserting the following: (1) In general Each competition ; (4) in subparagraph (C) of paragraph (1), as so redesignated, by striking paragraphs (1), (2), or (3) and inserting subparagraph (A) or (B); and (5) by adding at the end the following: (2) Biennial requirements Not less frequently than every second competition, the competition shall incorporate categories demonstrating offensive and defensive cyber operations involving— (A) information technology (as defined in section 11101 of title 40, United States Code), such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, and obfuscated coding; (B) operational technology (as defined in section 3 of the IoT Cybersecurity Improvement Act of 2020 (15 U.S.C. 278g–3a)) or industrial control systems (as defined in section 2220C of the Homeland Security Act of 2002 (6 U.S.C. 665i)), such as knowledge of supervisory control and data acquisition systems and the protocols and communication methods used in these systems, detection of anomalies, and responding to and recovering after incidents involving such systems; or (C) any other category of technological system requiring cybersecurity or information security, as determined appropriate by the Director. .