H.R. 9918
Enhancing K–12 Cybersecurity Act
Sponsor: Doris O. Matsui
1 cosponsor
Official summary
Written by the Congressional Research Service.
Enhancing K-12 Cybersecurity Act
This bill establishes resources and a program to address cybersecurity of elementary and secondary schools.
First, the bill directs the Cybersecurity and Infrastructure Security Agency (CISA) to establish an information exchange to disseminate information, best practices, training, and resources to improve cybersecurity in elementary and secondary schools.
In addition, CISA must establish a registry to track cyber incidents affecting information technology systems that are owned or managed by schools and educational agencies. Schools and educational agencies may voluntarily submit information to the registry.
Finally, the bill requires CISA to establish a program to address cybersecurity threats to school information systems.
Text of the bill
(a) Establishment. The Director of the Cybersecurity and Infrastructure Security Agency shall establish, through partnerships with one or more information sharing and analysis organizations, a program (to be known as the K–12 Cybersecurity Technology Improvement Program) to deploy cybersecurity capabilities to address cybersecurity risks and threats to information systems of elementary schools and secondary schools through—
(1) developing cybersecurity strategies and installation of effective cybersecurity tools tailored for K–12 schools;
(2) making available cybersecurity services that enhance the ability of K–12 schools to protect themselves from ransomware and other cybersecurity threats; and
(3) continuing training opportunities on cybersecurity threats, best practices, and relevant technologies for K–12 schools.
(b) Report. The Director of the Cybersecurity and Infrastructure Security Agency shall make available on the School Cybersecurity Information Exchange established under section 2 an annual report relating to the impact of the K–12 Cybersecurity Technology Improvement Program, including information on the cybersecurity capabilities made available to information technology systems owned or managed by elementary schools, secondary schools, local educational agencies, State educational agencies, and educational service agencies, the number of students served, and cybersecurity incidents identified or prevented.