Us Congress 2023-2024 Regular Session

Us Congress Senate Bill SB1191

Introduced
4/19/23  

Caption

A bill to direct the Director of the Cybersecurity and Infrastructure Security Agency to establish a K-12 Cybersecurity Technology Improvement Program, and for other purposes.

Impact

The legislative implications of SB1191 include the establishment of a Cybersecurity Incident Registry, which would serve as a voluntary repository for reporting cyber incidents impacting K-12 institutions. This registry aims to enhance nationwide data collection on cyber threats affecting educational entities and support the development of systematic preventative measures. Additionally, the introduction of training programs for school staff will promote broader awareness and preparedness against potential cyber risks, suggesting a foundational shift in how educational institutions approach cybersecurity.

Summary

SB1191, titled the Enhancing K–12 Cybersecurity Act, aims to establish a directed effort by the Cybersecurity and Infrastructure Security Agency (CISA) to improve the cybersecurity posture of K-12 educational institutions. The bill requires CISA to develop a comprehensive program designed to help elementary and secondary schools strengthen their defenses against cyber threats through various means, including strategic cybersecurity planning and the installation of pertinent tools. Notably, this program will leverage partnerships with Information Sharing and Analysis Organizations to deliver tailored cybersecurity solutions to these schools.

Contention

While many anticipate the positive effects of SB1191 in bolstering school cybersecurity frameworks, potential concerns include the allocation of federal funding for these initiatives. Some stakeholders worry about the effectiveness of funding distributions and the implications for local governance in managing cybersecurity protocols effectively. Moreover, ensuring that the information shared in these registries is adequately anonymized and protects students' privacy has been highlighted as an essential requirement to avoid misuse of sensitive data.

Companion Bills

US HB2845

Related Enhancing K–12 Cybersecurity Act

Previously Filed As

US HB2845

Enhancing K–12 Cybersecurity Act

US SB5449

A bill to create an Office of Cybersecurity at the Federal Trade Commission for supervision of data security at consumer reporting agencies, to require the promulgation of regulations establishing standards for effective cybersecurity at consumer reporting agencies, to impose penalties on credit reporting agencies for cybersecurity breaches that put sensitive consumer data at risk, and for other purposes.

US HB276

DHS Cybersecurity On-the-Job Training and Employment Apprentice Program Act This bill requires the Department of Homeland Security (DHS) to establish a DHS Cybersecurity On-the-Job Training and Employment Apprentice Program to identify and train DHS employees for cybersecurity work. The Cybersecurity and Infrastructure Security Agency within DHS must lead the program. Among other things, the agency must (1) track the status of cybersecurity positions at DHS, (2) develop a program curriculum, and (3) recruit DHS employees for the program.

US HB6124

Cybersecurity Skills Integration Act

US HB10455

To direct the Secretary of Health and Human Services to establish the Health Sector Cybersecurity Coordination Center, and for other purposes.

US SB2256

Federal Cybersecurity Workforce Expansion Act

US HB6524

Federal Cybersecurity Workforce Expansion Act

US SB5321

DHS Cybersecurity Internship Program Act

US HB9689

DHS Cybersecurity Internship Program Act

US HB285

Cybersecurity Vulnerability Remediation Act This bill authorizes the Department of Homeland Security to take certain actions with the goal of countering cybersecurity vulnerabilities. The Cybersecurity and Infrastructure Security Agency must report on its activities to coordinate disclosures of cybersecurity vulnerabilities. The report must address, among other topics, relevant policies and procedures; the degree to which disclosed information is acted upon by industry and other stakeholders; and the preservation of privacy and civil liberties when collecting, using, and sharing vulnerability disclosures. The National Cybersecurity and Communications Integration Center may disseminate protocols to counter cybersecurity vulnerabilities to information systems and industrial control systems, including in circumstances in which such vulnerabilities exist because software or hardware is no longer supported by a vendor. The Science and Technology Directorate may establish a competition to develop remedies for cybersecurity vulnerabilities.

Similar Bills

US HB2845

Enhancing K–12 Cybersecurity Act

NM SB98

Cybersecurity Act

NJ A1982

Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations.

NJ A2999

Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations.

NJ S3222

Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations.

PA HB739

In regulation of insurers and related persons generally, providing for insurance data security; in reserve liabilities, repealing provisions relating to small company exemption and providing for adoption of exemption standards of NAIC Valuation Manual; and imposing penalties.

MD SB816

Economic Development – Cyber Maryland Fund and Program – Alterations

MD HB1486

Economic Development – Cyber Maryland Fund and Program – Alterations