,,ii #aaith ,,congress #ast ,session ,s4 #dch ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,february #e1 #bjbe,mr4 ,rounds 7for himself and ,mr4 ,peters7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to provide for education and training programs and resources of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,providing ,individuals ,various ,opportunities for ,technical ,training to ,build a ,skills-,based ,cyber ,workforce ,act of #bjbe or the ,cyber ,,pivott ,act of #bjbe4 #b4 ,,cisa education and training programs and resources 7a7 ,in general ,subtitle ,d of title ,,xiii of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bbih et seq47 is amended by adding at the end the following new section3 #accd4 ,,cisa education and training programs and resources 7a7 ,definitions ,in this section3 7#a7 ,armed ,forces ,the term ,armed ,forces has the meaning given the term armed forces in section #aja of title #aj1 ,united ,states ,code4 7#b7 ,community college ,the term community college has the meaning given the term in section #ejjb of the ,william ,m4 7,mac7 ,thornberry ,national ,defense ,authorization ,act for ,fiscal ,year #bjba 7#ae ,u4,s4,c4 #idja74 7#c7 ,cyber-relevant ,the term cyber-relevant means an area of national security that would impact the cyber resiliency of the ,united ,states1 including relating to operational technology1 critical infrastructure1 artificial intelligence1 quantum computing1 security awareness1 or computer science4 7#d7 ,director ,the term ,director means the ,director of the ,cybersecurity and ,infrastructure ,security ,agency4 7#e7 ,executive agency ,the term ,executive agency has the meaning given the term in section #aje of title #e1 ,united ,states ,code4 7#f7 ,institution of higher education ,the term institution of higher education has the meaning given the term in section #aja7;a7 of the ,higher ,education ,act of #aife 7#bj ,u4,s4,c4 #ajja7;a774 7#g7 ,,nice ,cybersecurity ,workforce ,framework ,the term ,,nice ,cybersecurity ,workforce ,framework means the ,national ,initiative for ,cybersecurity ,education 7,,nice7 ,cybersecurity ,workforce ,framework 7,,nist ,special ,publication #hjj-aha1 revision #a1 published ,november #af1 #bjbj74 7#h7 ,participating institution ,the term participating institution means a community college1 technical school1 or other institution of higher education offering #b-year programs with which the ,director has entered into a partnership or other arrangement as described in subsection 7b77#a77;,a74 7#i7 ,program ,the term ,program means the ,providing ,individuals ,various ,opportunities for ,technical ,training to ,build a ,skills-,based ,cyber ,workforce ,program or the ,,pivott ,program established under subsection 7b77#a74 7#aj7 ,skills-based exercise ,the term skills-based exercise means a condensed program lasting not less than #a day that focuses on practice and application1 rather than research and study4 7#aa7 ,technical school ,the term technical school has the meaning given the term in section #daa4afg of title #bj1 ,code of ,federal ,regulations4 7#ab7 ,university-level educator ,the term university-level educator means an educator that teaches at the level of an institution of higher education4 7b7 ,expanding education and training programs and resources to community colleges1 technical schools1 and other institutions of higher education offering #b-,year programs 7#a7 ,establishment of ,,pivott ,program ,not later than #a year after the date of enactment of this subsection1 the ,director shall establish a program-- 7,a7 under which the ,director shall seek to enter into partnerships or other arrangements with community colleges1 technical schools1 and other institutions of higher education offering #b-year programs to establish educational and training programs and facilitate internship and post-graduation ,federal job opportunities at participating institutions2 and 7,b7 that shall be known as the ,providing ,individuals ,various ,opportunities for ,technical ,training to ,build a ,skills-,based ,cyber ,workforce ,program or the ,,pivott ,program4 7#b7 ,student qualifications 7,a7 ,eligibility ,the following categories of students shall be eligible to participate in the ,program3 7i7 ,students who are enrolled in but who have not yet started a #b-year cyber or cyber-relevant associate's degree program or comparable technical certification1 as determined by the ,director1 at a participating institution4 7ii7 ,students who are currently enrolled in their first semester of a #b-year cyber or cyber-relevant associate's degree program or comparable technical certification1 as determined by the ,director1 at a participating institution4 7iii7 ,students identified by the ,director who are eligible and qualified to enroll in a #b-year degree cyber or cyber-relevant associate's degree program or comparable technical certification at a participating institution1 such as individuals who are pursuing a career change1 have a high school diploma or equivalent1 or would be considered entry-level employees4 7iv7 ,students enrolled in technical certifications at participating institutions that are less than #b years in duration but-- 7,i7 align with ,tasks1 ,knowledge1 and ,skills1 as described in the ,,nice ,cybersecurity ,workforce ,framework2 and 7,,ii7 prepare students to serve in ,federal1 ,state1 local1 ,tribal1 or territorial government cyber or cyber-relevant roles4 7,b7 ,scholarships ,the ,secretary1 acting through the ,director1 shall provide students participating in the ,program with full tuition scholarships1 including academic fees1 lab fees1 travel1 lodging1 per diem1 stipends1 internship costs1 costs associated with virtual participation1 certification testing fees1 and any other expenses the ,director determines necessary to complete any requirement under the ,program1 including for participation in #a in-person skills-based exercise in accordance with paragraph 7#d77;,b71 including travel1 lodging1 meals1 in-person or in-laboratory post-course assessments fees1 and other necessary expenses as determined by the ,director4 7,c7 ,service obligation 7i7 ,in general ,each student who participates in and completes the ,program shall fulfill a #b-year service obligation in a cyber or cyber-relevant role1 as described in the ,,nice ,cybersecurity ,workforce ,framework or the ,department of ,defense ,cyber ,workforce ,framework1 to advance the cyber mission of an ,executive agency or a ,state1 local1 ,tribal1 or territorial government4 7ii7 ,exception ,the service obligation specified in clause 7i7 shall not apply to any student who-- 7,i7 has completed a term of service in the ,armed ,forces that is equal to the service obligation specified in clause 7i72 7,,ii7 is currently serving in the ,armed ,forces2 or 7,,iii7 pursues service in the ,armed ,forces in a cyber or cyber-relevant role during or immediately after the date on which the student completes the ,program4 7iii7 ,delayed service ,any student who1 immediately after the date on which the student completes the ,program1 enrolls in a #d-year degree program may complete the service obligation specified in clause 7i7 after receiving such #d-year degree4 7,d7 ,program completion timeline 7i7 ,in general ,each student who participates in the ,program shall complete participation in the ,program not later than #d years after the date on which the student begins the ,program1 or pursuant to rules of the relevant participating institution if such rules are in effect at the time the student begins such participation4 7ii7 ,process for updated completion timeline 7,i7 ,application for waiver ,any student who experiences extreme hardship during participation in the ,program may submit to the ,director an application to waive the application of the timeline specified in clause 7i74 7,,ii7 ,determination ,the ,director1 in consultation with the appropriate participating institution1 shall determine on a case-by-case basis whether a student who submits an application for a waiver under subclause 7,i7 may be granted additional time to complete the ,program4 7#c7 ,institutional requirements ,a community college1 technical school1 or other institution of higher education is eligible to participate in the ,program if the community college1 technical school1 or institution of higher education is-- 7,a7 a participant in the ,national ,centers of ,academic ,excellence in ,cybersecurity program2 or 7,b7 determined eligible by the ,director1 taking into consideration-- 7i7 whether the virtual or in-person course offerings of the community college1 technical school1 or institution of higher education align with career pathways1 as described in the ,,nice ,cybersecurity ,workforce ,framework2 and 7ii7 the presence of a cybersecurity clinic on campus4 7#d7 ,program components 7,a7 ,in general ,in accordance with subparagraph 7,c71 students participating in the ,program shall complete a minimum of #d eligible skills-based exercises described in subparagraph 7,b74 7,b7 ,eligible skills-based exercises ,eligible skills-based exercises described in this subparagraph may include the following3 7i7 ,laboratory work4 7ii7 ,competitions such as hackathons1 challenges1 and capture the flag4 7iii7 ,virtual programming4 7iv7 ,table-top exercises4 7v7 ,industry training workshops4 7vi7 ,exercises in a box4 7,c7 ,provision 7i7 ,in general ,the ,director shall coordinate with participating institutions to provide not fewer than #a skills-based exercise required under subparagraph 7,a7 each semester4 7ii7 ,student requirements ,students participating in the ,program shall complete not fewer than #a of the #d skills-based exercises required under subparagraph 7,a7 in person4 7iii7 ,administration of exercises ,the ,director1 in coordination with participating institutions1 shall offer not fewer than #a in-person skills-based exercise to ,program participants every #b years4 7iv7 ,coordination ,the ,director shall coordinate and may jointly offer the skills-based exercises required under subparagraph 7,a7 with the following3 7,i7 ,other ,federal agencies1 such as the ,department of ,defense1 the ,federal ,bureau of ,investigation1 the ,national ,security ,agency1 and the ,office of the ,national ,cyber ,director1 as appropriate4 7,,ii7 ,non-,federal entities with cyber or cyber-relevant expertise1 including cybersecurity clinics4 7v7 ,exception ,a student participating in the ,program who is unable to complete a skills-based exercise required under subparagraph 7,a7 may submit to the participating institution a proposal for a comparable skills-based exercise1 as determined by the ,director4 7,d7 ,internships 7i7 ,in general ,the ,director and participating institutions shall1 as a core requirement of the ,program1 coordinate with appropriate entities to place students participating in the ,program in an approved cyber or cyber-relevant internship1 as determined by the ,director1 with any of the following3 7,i7 ,a ,state1 local1 ,tribal1 or territorial government entity4 7,,ii7 ,a critical infrastructure owner or operator that is located in a rural community or is considered to be a high-risk sector1 as determined by the ,director4 7,,iii7 ,a ,federal department or agency1 including with the ,regional ,security ,advisors program of the ,cybersecurity and ,infrastructure ,security ,agency4 7ii7 ,prioritization ,a student who has communicated in writing to the ,director or the appropriate participating institution during the internship placement process that the student intends to serve in a ,federal ,government position beyond the obligations of the student under paragraph 7#b77;,c7 shall be prioritized for ,federal cyber internship opportunities that require a security clearance4 7iii7 ,current ,federal employees ,the ,director shall coordinate with the heads of appropriate ,federal agencies to establish an approved cyber or cyber-relevant internship program for students participating in the ,program who are ,federal employees4 7iv7 ,security clearances ,the ,director shall take such actions as may be necessary to begin1 not later than #a year before an appropriate student under this subparagraph completes participation in the ,program1 the process to provide the student with an appropriate security clearance4 7#e7 ,outreach initiatives 7,a7 ,,cisa 7i7 ,responsibilities of ,director ,the ,director shall-- 7,i7 conduct regional outreach initiatives1 including at institutions designated as ,national ,centers of ,academic ,excellence in ,cybersecurity1 and provide informational materials about the ,program-- 7aa7 at each regional office of the ,cybersecurity and ,infrastructure ,security ,agency2 and 7bb7 to industry partners to promote the ,program2 and 7,,ii7 seek to engage with industry stakeholders to produce an annual report-- 7aa7 on industry-relevant skills intended to inform the skills-based exercises offered under the ,program2 and 7bb7 that-- 7,,aa7 may include input from an advisory committee1 established by the ,director and composed of university-level educators2 and 7,,bb7 shall be submitted to the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives not later than #a year after the date of enactment of this section1 and each year thereafter4 7ii7 ,,faca exemption ,chapter #aj of title #e1 ,united ,states ,code1 shall not apply to the advisory committee established by the ,director under clause 7i77,,ii77bb77,,aa74 7,b7 ,recruitment fair 7i7 ,in general ,each fiscal year1 the ,director1 in coordination with the ,national ,cyber ,director1 shall host a voluntary ,federal ,government recruitment fair that includes ,federal ,government agency representatives who seek to recruit for vacant cybersecurity positions4 7ii7 ,information regarding recruitment fair ,the ,director shall post information regarding the recruitment fair required under clause 7i7 on a dedicated website of the ,cybersecurity and ,infrastructure ,security ,agency4 7iii7 ,hosting of recruitment fair ,each recruitment fair required under clause 7i7-- 7,i7 may be hosted online or in-person2 and 7,,ii7 shall be hosted at not fewer than #e participating institutions4 7#f7 ,program completion benefits 7,a7 ,database ,the ,director1 leveraging existing educational content repositories1 shall maintain an online database that shall-- 7i7 provide cyber training and education resources1 mapped to job roles set forth in the ,,nice ,cybersecurity ,workforce ,framework1 and information relating to ,federal job opportunities in cyber or cyber-relevant fields2 and 7ii7 be made available for access by1 as appropriate1 students who have successfully completed the ,program4 7,b7 ,certification program 7i7 ,list of certification programs ,the ,director shall establish and update annually a list of existing cyber certification programs developed or offered by entities in the private sector1 academia1 nonprofits1 or other institutions1 as determined by the ,director4 7ii7 ,funding ,the ,secretary1 acting through the ,director1 may fund1 through vouchers requested by a student participating in the program1 not more than #c certifications and associated certification examinations per student from the list established under clause 7i71 provided that any such student shall have completed the ,program and requested the voucher not later than #aj years after the date on which the student completed the ,program4 7,c7 ,additional scholarship opportunities for students who complete the program 7i7 ,in general ,the ,director may select1 pursuant to an application process designed by ,director1 not more than #aj students per year who have completed the ,program and have been employed by the ,federal ,government for not less than #g years to be eligible for scholarships to be applied to cyber or cyber-relevant degree programs offered at institutions designated as ,national ,centers of ,academic ,excellence in ,cybersecurity4 7ii7 ,amounts ,scholarship amounts under this subparagraph shall be determined by the ,director1 subject to the availability of appropriations for such purpose4 7#g7 ,terms of ,program scholarship 7,a7 ,in general ,except as provided in subparagraph 7,b71 a scholarship recipient under this section shall be liable to the ,united ,states for repayment of a scholarship awarded to the recipient as provided under subsection 7e7 if the recipient-- 7i7 fails to maintain an acceptable level of academic standing at the participating institution1 as determined by the ,director2 7ii7 is dismissed from the participating institution for disciplinary reasons2 7iii7 withdraws from the eligible degree program before completing the ,program2 7iv7 declares that the recipient does not intend to fulfill the post-award employment obligation under this section2 or 7v7 fails to maintain or fulfill the post-graduation government service or post-award obligations or requirements of such recipient4 7,b7 ,exception ,the ,director may1 on a case-by-case basis1 exempt from liability for repayment a scholarship awarded to a student who is participating or has participated in the ,program if the relevant student-- 7i7 enlists or commissions in the ,armed ,forces prior to completion of the ,program2 or 7ii7 has a documented history of demonstrated effort to secure a position with a ,federal1 ,state1 local1 ,tribal1 or territorial government within #b years after the date on which the student completes the ,program but who is not offered such a position4 7c7 ,monitoring compliance ,as a condition of participation in the ,program1 a participating institution shall enter into an agreement with the ,director to monitor the compliance of recipients of scholarships awarded under this section with respect to the post-award employment obligations of such recipients4 7d7 ,amount of repayment ,if a circumstance described in subsection 7b77#g77;,a7 occurs before the completion of #a year of a post-scholarship employment obligation under this section1 the total amount of scholarship awards received by an individual under this section shall-- 7#a7 be repaid to the ,department immediately2 or 7#b7 be treated as a loan to be repaid in accordance with subsection 7e74 7e7 ,repayments ,a loan referred to subsection 7d77#b7 shall-- 7#a7 be treated as a ,federal ,direct ,unsubsidized ,stafford ,loan under part ,d of title ,,iv of the ,higher ,education ,act of #aife 7#bj ,u4,s4,c4 #ajhg;a et seq472 and 7#b7 be subject to repayment1 together with interest thereon accruing from the date of the scholarship award1 in accordance with terms and conditions specified by the ,secretary 7in consultation with the ,secretary of ,education7 in regulations promulgated to carry out this subsection4 7f7 ,collection of repayment 7#a7 ,in general ,if a scholarship recipient is required to repay a scholarship under this section-- 7,a7 the ,secretary shall determine the repayment amounts and notify such recipient of the amount owed2 and 7,b7 the ,secretary1 or a participating institution acting on behalf of the ,secretary1 shall collect such amount within a period of time as determined by the ,secretary1 or such amount shall be treated as a loan in accordance with subsection 7e74 7#b7 ,returned to the ,department ,except as provided in paragraph 7#c71 any repayment under this subsection shall be returned to the ,department4 7#c7 ,retention of percentage 7,a7 ,in general ,a participating institution may retain a percentage of any repayment the participating institution collects under this subsection to defray administrative costs associated with the collection of such repayment4 7,b7 ,percentage applicable ,the ,secretary shall establish a single1 fixed percentage that participating institutions may retain from repayments collected under subparagraph 7,a7 that shall be applicable to all participating institutions4 7g7 ,exceptions ,the ,secretary may provide for the partial or total waiver or suspension of any repayment obligation by a scholarship recipient under this section if compliance by the scholarship recipient with the repayment obligation is impossible or would involve extreme hardship to the scholarship recipient4 7h7 ,timeline for implementation 7#a7 ,in general ,the ,director and participating institutions shall seek to enroll in the ,program1 subject to the availability of appropriations1 not fewer than #bej students for the first full academic year of the ,program that begins #a year after the date of the enactment of this section4 7#b7 ,growth of program ,beginning with the second full academic year of the ,program1 the ,director and participating institutions shall seek to enroll in the ,program each full academic year1 subject to the availability of appropriations1 not fewer than double the number of students enrolled in the immediately preceding full academic year until the number of such students reaches #a1jjj each full academic year4 7#c7 ,plan for #aj1jjj students 7,a7 ,development of plan ,not later than #ij days after the date of the enactment of this section1 the ,director and participating institutions shall develop a plan1 subject to capacity and administrative capabilities1 to enroll by not later than #aj years after the date of the establishment of the ,program not fewer than #aj1jjj students in the ,program each academic year4 7,b7 ,briefing ,the ,director shall brief the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives regarding such plan4 7i7 ,report on enrollment goals ,if the ,director and participating institutions fail in any academic year to meet the minimum quota specified in paragraph 7#a7 or 7#b71 as the case may be1 of subsection 7h71 the ,director shall brief the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives not later than #cj days after the conclusion of that academic year4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bace7 is amended by inserting after the item relating to section #accc the following new item3 ,sec4 #accd4 ,,cisa education and training programs and resources4 4 7c7 ,review of ,,cisa education1 training programs and resources ,not later than #ij days after the date of enactment of this ,act1 the ,director of the ,cybersecurity and ,infrastructure ,security ,agency shall submit to the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives a review of the education and training programs of the ,cybersecurity and ,infrastructure ,security ,agency1 which shall evaluate the cost1 reach1 and current demand of those programs1 including relating to any resource gaps in any of those programs4 7d7 ,promoting ,cybercorps ,scholarship for ,service as a gold standard program ,the ,secretary of ,homeland ,security shall submit to the ,committee on ,homeland ,security and ,governmental ,affairs and the ,committee on ,commerce1 ,science1 and ,transportation of the ,senate and the ,committee on ,homeland ,security and the ,committee on ,science1 ,space1 and ,technology of the ,house of ,representatives a report on current support provided by the ,department of ,homeland ,security to the ,cyber,corps ,scholarship for ,service ,program1 including opportunities to provide additional funding to the ,cyber,corps ,scholarship for ,service ,program under existing training and education programs of the ,department of ,homeland ,security4