II
119THCONGRESS
1
STSESSION S. 438
To amend the Homeland Security Act of 2002 to provide for education
and training programs and resources of the Cybersecurity and Infrastruc-
ture Security Agency of the Department of Homeland Security, and
for other purposes.
IN THE SENATE OF THE UNITED STATES
FEBRUARY5, 2025
Mr. R
OUNDS(for himself and Mr. PETERS) introduced the following bill;
which was read twice and referred to the Committee on Homeland Secu-
rity and Governmental Affairs
A BILL
To amend the Homeland Security Act of 2002 to provide
for education and training programs and resources of
the Cybersecurity and Infrastructure Security Agency of
the Department of Homeland Security, and for other
purposes.
Be it enacted by the Senate and House of Representa-1
tives of the United States of America in Congress assembled, 2
SECTION 1. SHORT TITLE. 3
This Act may be cited as the ‘‘Providing Individuals 4
Various Opportunities for Technical Training to Build a 5
Skills-Based Cyber Workforce Act of 2025’’ or the ‘‘Cyber 6
PIVOTT Act of 2025’’. 7
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 2
•S 438 IS
SEC. 2. CISA EDUCATION AND TRAINING PROGRAMS AND 1
RESOURCES. 2
(a) I
NGENERAL.—Subtitle D of title XIII of the 3
Homeland Security Act of 2002 (Public Law 107–296; 4
116 Stat. 2298 et seq.) is amended by adding at the end 5
the following new section: 6
‘‘SEC. 1334. CISA EDUCATION AND TRAINING PROGRAMS 7
AND RESOURCES. 8
‘‘(a) D
EFINITIONS.—In this section: 9
‘‘(1) A
RMED FORCES .—The term ‘Armed 10
Forces’ has the meaning given the term ‘armed 11
forces’ in section 101 of title 10, United States 12
Code. 13
‘‘(2) C
OMMUNITY COLLEGE .—The term ‘com-14
munity college’ has the meaning given the term in 15
section 5002 of the William M. (Mac) Thornberry 16
National Defense Authorization Act for Fiscal Year 17
2021 (15 U.S.C. 9401). 18
‘‘(3) C
YBER-RELEVANT.—The term ‘cyber-rel-19
evant’ means an area of national security that would 20
impact the cyber resiliency of the United States, in-21
cluding relating to operational technology, critical in-22
frastructure, artificial intelligence, quantum com-23
puting, security awareness, or computer science. 24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 3
•S 438 IS
‘‘(4) DIRECTOR.—The term ‘Director’ means 1
the Director of the Cybersecurity and Infrastructure 2
Security Agency. 3
‘‘(5) E
XECUTIVE AGENCY.—The term ‘Execu-4
tive agency’ has the meaning given the term in sec-5
tion 105 of title 5, United States Code. 6
‘‘(6) I
NSTITUTION OF HIGHER EDUCATION .— 7
The term ‘institution of higher education’ has the 8
meaning given the term in section 101(a) of the 9
Higher Education Act of 1965 (20 U.S.C. 1001(a)). 10
‘‘(7) NICE
CYBERSECURITY WORKFORCE 11
FRAMEWORK.—The term ‘NICE Cybersecurity 12
Workforce Framework’ means the National Initia-13
tive for Cybersecurity Education (NICE) Cybersecu-14
rity Workforce Framework (NIST Special Publica-15
tion 800–181, revision 1, published November 16, 16
2020). 17
‘‘(8) P
ARTICIPATING INSTITUTION .—The term 18
‘participating institution’ means a community col-19
lege, technical school, or other institution of higher 20
education offering 2-year programs with which the 21
Director has entered into a partnership or other ar-22
rangement as described in subsection (b)(1)(A). 23
‘‘(9) P
ROGRAM.—The term ‘Program’ means 24
the ‘Providing Individuals Various Opportunities for 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 4
•S 438 IS
Technical Training to Build a Skills-Based Cyber 1
Workforce Program’ or the ‘PIVOTT Program’ es-2
tablished under subsection (b)(1). 3
‘‘(10) S
KILLS-BASED EXERCISE .—The term 4
‘skills-based exercise’ means a condensed program 5
lasting not less than 1 day that focuses on practice 6
and application, rather than research and study. 7
‘‘(11) T
ECHNICAL SCHOOL .—The term ‘tech-8
nical school’ has the meaning given the term in sec-9
tion 411.167 of title 20, Code of Federal Regula-10
tions. 11
‘‘(12) U
NIVERSITY-LEVEL EDUCATOR .—The 12
term ‘university-level educator’ means an educator 13
that teaches at the level of an institution of higher 14
education. 15
‘‘(b) E
XPANDINGEDUCATION AND TRAININGPRO-16
GRAMS AND RESOURCES TO COMMUNITYCOLLEGES, 17
T
ECHNICALSCHOOLS, ANDOTHERINSTITUTIONS OF 18
H
IGHEREDUCATIONOFFERING2-YEARPROGRAMS.— 19
‘‘(1) E
STABLISHMENT OF PIVOTT PROGRAM .— 20
Not later than 1 year after the date of enactment 21
of this subsection, the Director shall establish a pro-22
gram— 23
‘‘(A) under which the Director shall seek 24
to enter into partnerships or other arrange-25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 5
•S 438 IS
ments with community colleges, technical 1
schools, and other institutions of higher edu-2
cation offering 2-year programs to establish 3
educational and training programs and facili-4
tate internship and post-graduation Federal job 5
opportunities at participating institutions; and 6
‘‘(B) that shall be known as the ‘Providing 7
Individuals Various Opportunities for Technical 8
Training to Build a Skills-Based Cyber Work-9
force Program’ or the ‘PIVOTT Program’. 10
‘‘(2) S
TUDENT QUALIFICATIONS .— 11
‘‘(A) E
LIGIBILITY.—The following cat-12
egories of students shall be eligible to partici-13
pate in the Program: 14
‘‘(i) Students who are enrolled in but 15
who have not yet started a 2-year cyber or 16
cyber-relevant associate’s degree program 17
or comparable technical certification, as 18
determined by the Director, at a partici-19
pating institution. 20
‘‘(ii) Students who are currently en-21
rolled in their first semester of a 2-year 22
cyber or cyber-relevant associate’s degree 23
program or comparable technical certifi-24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 6
•S 438 IS
cation, as determined by the Director, at a 1
participating institution. 2
‘‘(iii) Students identified by the Direc-3
tor who are eligible and qualified to enroll 4
in a 2-year degree cyber or cyber-relevant 5
associate’s degree program or comparable 6
technical certification at a participating in-7
stitution, such as individuals who are pur-8
suing a career change, have a high school 9
diploma or equivalent, or would be consid-10
ered entry-level employees. 11
‘‘(iv) Students enrolled in technical 12
certifications at participating institutions 13
that are less than 2 years in duration 14
but— 15
‘‘(I) align with Tasks, Knowl-16
edge, and Skills, as described in the 17
NICE Cybersecurity Workforce 18
Framework; and 19
‘‘(II) prepare students to serve in 20
Federal, State, local, Tribal, or terri-21
torial government cyber or cyber-rel-22
evant roles. 23
‘‘(B) S
CHOLARSHIPS.—The Secretary, act-24
ing through the Director, shall provide students 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 7
•S 438 IS
participating in the Program with full tuition 1
scholarships, including academic fees, lab fees, 2
travel, lodging, per diem, stipends, internship 3
costs, costs associated with virtual participa-4
tion, certification testing fees, and any other ex-5
penses the Director determines necessary to 6
complete any requirement under the Program, 7
including for participation in 1 in-person skills- 8
based exercise in accordance with paragraph 9
(4)(B), including travel, lodging, meals, in-per-10
son or in-laboratory post-course assessments 11
fees, and other necessary expenses as deter-12
mined by the Director. 13
‘‘(C) S
ERVICE OBLIGATION.— 14
‘‘(i) I
N GENERAL.—Each student who 15
participates in and completes the Program 16
shall fulfill a 2-year service obligation in a 17
cyber or cyber-relevant role, as described in 18
the NICE Cybersecurity Workforce Frame-19
work or the Department of Defense Cyber 20
Workforce Framework, to advance the 21
cyber mission of an Executive agency or a 22
State, local, Tribal, or territorial govern-23
ment. 24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 8
•S 438 IS
‘‘(ii) EXCEPTION.—The service obliga-1
tion specified in clause (i) shall not apply 2
to any student who— 3
‘‘(I) has completed a term of 4
service in the Armed Forces that is 5
equal to the service obligation speci-6
fied in clause (i); 7
‘‘(II) is currently serving in the 8
Armed Forces; or 9
‘‘(III) pursues service in the 10
Armed Forces in a cyber or cyber-rel-11
evant role during or immediately after 12
the date on which the student com-13
pletes the Program. 14
‘‘(iii) D
ELAYED SERVICE.—Any stu-15
dent who, immediately after the date on 16
which the student completes the Program, 17
enrolls in a 4-year degree program may 18
complete the service obligation specified in 19
clause (i) after receiving such 4-year de-20
gree. 21
‘‘(D) P
ROGRAM COMPLETION TIMELINE .— 22
‘‘(i) I
N GENERAL.—Each student who 23
participates in the Program shall complete 24
participation in the Program not later than 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 9
•S 438 IS
4 years after the date on which the student 1
begins the Program, or pursuant to rules 2
of the relevant participating institution if 3
such rules are in effect at the time the stu-4
dent begins such participation. 5
‘‘(ii) P
ROCESS FOR UPDATED COM -6
PLETION TIMELINE.— 7
‘‘(I) A
PPLICATION FOR WAIV -8
ER.—Any student who experiences ex-9
treme hardship during participation in 10
the Program may submit to the Di-11
rector an application to waive the ap-12
plication of the timeline specified in 13
clause (i). 14
‘‘(II) D
ETERMINATION.—The Di-15
rector, in consultation with the appro-16
priate participating institution, shall 17
determine on a case-by-case basis 18
whether a student who submits an ap-19
plication for a waiver under subclause 20
(I) may be granted additional time to 21
complete the Program. 22
‘‘(3) I
NSTITUTIONAL REQUIREMENTS .—A com-23
munity college, technical school, or other institution 24
of higher education is eligible to participate in the 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 10
•S 438 IS
Program if the community college, technical school, 1
or institution of higher education is— 2
‘‘(A) a participant in the National Centers 3
of Academic Excellence in Cybersecurity pro-4
gram; or 5
‘‘(B) determined eligible by the Director, 6
taking into consideration— 7
‘‘(i) whether the virtual or in-person 8
course offerings of the community college, 9
technical school, or institution of higher 10
education align with career pathways, as 11
described in the NICE Cybersecurity 12
Workforce Framework; and 13
‘‘(ii) the presence of a cybersecurity 14
clinic on campus. 15
‘‘(4) P
ROGRAM COMPONENTS .— 16
‘‘(A) I
N GENERAL.—In accordance with 17
subparagraph (C), students participating in the 18
Program shall complete a minimum of 4 eligible 19
skills-based exercises described in subparagraph 20
(B). 21
‘‘(B) E
LIGIBLE SKILLS-BASED EXER -22
CISES.—Eligible skills-based exercises described 23
in this subparagraph may include the following: 24
‘‘(i) Laboratory work. 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 11
•S 438 IS
‘‘(ii) Competitions such as 1
hackathons, challenges, and capture the 2
flag. 3
‘‘(iii) Virtual programming. 4
‘‘(iv) Table-top exercises. 5
‘‘(v) Industry training workshops. 6
‘‘(vi) Exercises in a box. 7
‘‘(C) P
ROVISION.— 8
‘‘(i) I
N GENERAL.—The Director shall 9
coordinate with participating institutions 10
to provide not fewer than 1 skills-based ex-11
ercise required under subparagraph (A) 12
each semester. 13
‘‘(ii) S
TUDENT REQUIREMENTS .—Stu-14
dents participating in the Program shall 15
complete not fewer than 1 of the 4 skills- 16
based exercises required under subpara-17
graph (A) in person. 18
‘‘(iii) A
DMINISTRATION OF EXER -19
CISES.—The Director, in coordination with 20
participating institutions, shall offer not 21
fewer than 1 in-person skills-based exercise 22
to Program participants every 2 years. 23
‘‘(iv) C
OORDINATION.—The Director 24
shall coordinate and may jointly offer the 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 12
•S 438 IS
skills-based exercises required under sub-1
paragraph (A) with the following: 2
‘‘(I) Other Federal agencies, such 3
as the Department of Defense, the 4
Federal Bureau of Investigation, the 5
National Security Agency, and the Of-6
fice of the National Cyber Director, as 7
appropriate. 8
‘‘(II) Non-Federal entities with 9
cyber or cyber-relevant expertise, in-10
cluding cybersecurity clinics. 11
‘‘(v) E
XCEPTION.—A student partici-12
pating in the Program who is unable to 13
complete a skills-based exercise required 14
under subparagraph (A) may submit to the 15
participating institution a proposal for a 16
comparable skills-based exercise, as deter-17
mined by the Director. 18
‘‘(D) I
NTERNSHIPS.— 19
‘‘(i) I
N GENERAL.—The Director and 20
participating institutions shall, as a core 21
requirement of the Program, coordinate 22
with appropriate entities to place students 23
participating in the Program in an ap-24
proved cyber or cyber-relevant internship, 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00012 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 13
•S 438 IS
as determined by the Director, with any of 1
the following: 2
‘‘(I) A State, local, Tribal, or ter-3
ritorial government entity. 4
‘‘(II) A critical infrastructure 5
owner or operator that is located in a 6
rural community or is considered to 7
be a high-risk sector, as determined 8
by the Director. 9
‘‘(III) A Federal department or 10
agency, including with the Regional 11
Security Advisors program of the Cy-12
bersecurity and Infrastructure Secu-13
rity Agency. 14
‘‘(ii) P
RIORITIZATION.—A student 15
who has communicated in writing to the 16
Director or the appropriate participating 17
institution during the internship placement 18
process that the student intends to serve in 19
a Federal Government position beyond the 20
obligations of the student under paragraph 21
(2)(C) shall be prioritized for Federal 22
cyber internship opportunities that require 23
a security clearance. 24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00013 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 14
•S 438 IS
‘‘(iii) CURRENT FEDERAL EMPLOY -1
EES.—The Director shall coordinate with 2
the heads of appropriate Federal agencies 3
to establish an approved cyber or cyber-rel-4
evant internship program for students par-5
ticipating in the Program who are Federal 6
employees. 7
‘‘(iv) S
ECURITY CLEARANCES .—The 8
Director shall take such actions as may be 9
necessary to begin, not later than 1 year 10
before an appropriate student under this 11
subparagraph completes participation in 12
the Program, the process to provide the 13
student with an appropriate security clear-14
ance. 15
‘‘(5) O
UTREACH INITIATIVES.— 16
‘‘(A) CISA.— 17
‘‘(i) R
ESPONSIBILITIES OF DIREC -18
TOR.—The Director shall— 19
‘‘(I) conduct regional outreach 20
initiatives, including at institutions 21
designated as National Centers of 22
Academic Excellence in Cybersecurity, 23
and provide informational materials 24
about the Program— 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00014 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 15
•S 438 IS
‘‘(aa) at each regional office 1
of the Cybersecurity and Infra-2
structure Security Agency; and 3
‘‘(bb) to industry partners 4
to promote the Program; and 5
‘‘(II) seek to engage with indus-6
try stakeholders to produce an annual 7
report— 8
‘‘(aa) on industry-relevant 9
skills intended to inform the 10
skills-based exercises offered 11
under the Program; and 12
‘‘(bb) that— 13
‘‘(AA) may include 14
input from an advisory com-15
mittee, established by the 16
Director and composed of 17
university-level educators; 18
and 19
‘‘(BB) shall be sub-20
mitted to the Committee on 21
Homeland Security and Gov-22
ernmental Affairs of the 23
Senate and the Committee 24
on Homeland Security of the 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00015 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 16
•S 438 IS
House of Representatives 1
not later than 1 year after 2
the date of enactment of 3
this section, and each year 4
thereafter. 5
‘‘(ii) FACA
EXEMPTION.—Chapter 10 6
of title 5, United States Code, shall not 7
apply to the advisory committee estab-8
lished by the Director under clause 9
(i)(II)(bb)(AA). 10
‘‘(B) R
ECRUITMENT FAIR.— 11
‘‘(i) I
N GENERAL.—Each fiscal year, 12
the Director, in coordination with the Na-13
tional Cyber Director, shall host a vol-14
untary Federal Government recruitment 15
fair that includes Federal Government 16
agency representatives who seek to recruit 17
for vacant cybersecurity positions. 18
‘‘(ii) I
NFORMATION REGARDING RE -19
CRUITMENT FAIR.—The Director shall post 20
information regarding the recruitment fair 21
required under clause (i) on a dedicated 22
website of the Cybersecurity and Infra-23
structure Security Agency. 24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00016 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 17
•S 438 IS
‘‘(iii) HOSTING OF RECRUITMENT 1
FAIR.—Each recruitment fair required 2
under clause (i)— 3
‘‘(I) may be hosted online or in- 4
person; and 5
‘‘(II) shall be hosted at not fewer 6
than 5 participating institutions. 7
‘‘(6) P
ROGRAM COMPLETION BENEFITS .— 8
‘‘(A) D
ATABASE.—The Director, 9
leveraging existing educational content reposi-10
tories, shall maintain an online database that 11
shall— 12
‘‘(i) provide cyber training and edu-13
cation resources, mapped to job roles set 14
forth in the NICE Cybersecurity Work-15
force Framework, and information relating 16
to Federal job opportunities in cyber or 17
cyber-relevant fields; and 18
‘‘(ii) be made available for access by, 19
as appropriate, students who have success-20
fully completed the Program. 21
‘‘(B) C
ERTIFICATION PROGRAM .— 22
‘‘(i) L
IST OF CERTIFICATION PRO -23
GRAMS.—The Director shall establish and 24
update annually a list of existing cyber cer-25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00017 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 18
•S 438 IS
tification programs developed or offered by 1
entities in the private sector, academia, 2
nonprofits, or other institutions, as deter-3
mined by the Director. 4
‘‘(ii) F
UNDING.—The Secretary, act-5
ing through the Director, may fund, 6
through vouchers requested by a student 7
participating in the program, not more 8
than 3 certifications and associated certifi-9
cation examinations per student from the 10
list established under clause (i), provided 11
that any such student shall have completed 12
the Program and requested the voucher 13
not later than 10 years after the date on 14
which the student completed the Program. 15
‘‘(C) A
DDITIONAL SCHOLARSHIP OPPORTU -16
NITIES FOR STUDENTS WHO COMPLETE THE 17
PROGRAM.— 18
‘‘(i) I
N GENERAL.—The Director may 19
select, pursuant to an application process 20
designed by Director, not more than 10 21
students per year who have completed the 22
Program and have been employed by the 23
Federal Government for not less than 7 24
years to be eligible for scholarships to be 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00018 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 19
•S 438 IS
applied to cyber or cyber-relevant degree 1
programs offered at institutions designated 2
as National Centers of Academic Excel-3
lence in Cybersecurity. 4
‘‘(ii) A
MOUNTS.—Scholarship 5
amounts under this subparagraph shall be 6
determined by the Director, subject to the 7
availability of appropriations for such pur-8
pose. 9
‘‘(7) T
ERMS OF PROGRAM SCHOLARSHIP .— 10
‘‘(A) I
N GENERAL.—Except as provided in 11
subparagraph (B), a scholarship recipient under 12
this section shall be liable to the United States 13
for repayment of a scholarship awarded to the 14
recipient as provided under subsection (e) if the 15
recipient— 16
‘‘(i) fails to maintain an acceptable 17
level of academic standing at the partici-18
pating institution, as determined by the 19
Director; 20
‘‘(ii) is dismissed from the partici-21
pating institution for disciplinary reasons; 22
‘‘(iii) withdraws from the eligible de-23
gree program before completing the Pro-24
gram; 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00019 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 20
•S 438 IS
‘‘(iv) declares that the recipient does 1
not intend to fulfill the post-award employ-2
ment obligation under this section; or 3
‘‘(v) fails to maintain or fulfill the 4
post-graduation government service or 5
post-award obligations or requirements of 6
such recipient. 7
‘‘(B) E
XCEPTION.—The Director may, on 8
a case-by-case basis, exempt from liability for 9
repayment a scholarship awarded to a student 10
who is participating or has participated in the 11
Program if the relevant student— 12
‘‘(i) enlists or commissions in the 13
Armed Forces prior to completion of the 14
Program; or 15
‘‘(ii) has a documented history of 16
demonstrated effort to secure a position 17
with a Federal, State, local, Tribal, or ter-18
ritorial government within 2 years after 19
the date on which the student completes 20
the Program but who is not offered such 21
a position. 22
‘‘(c) M
ONITORINGCOMPLIANCE.—As a condition of 23
participation in the Program, a participating institution 24
shall enter into an agreement with the Director to monitor 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00020 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 21
•S 438 IS
the compliance of recipients of scholarships awarded under 1
this section with respect to the post-award employment ob-2
ligations of such recipients. 3
‘‘(d) A
MOUNT OFREPAYMENT.—If a circumstance 4
described in subsection (b)(7)(A) occurs before the com-5
pletion of 1 year of a post-scholarship employment obliga-6
tion under this section, the total amount of scholarship 7
awards received by an individual under this section shall— 8
‘‘(1) be repaid to the Department immediately; 9
or 10
‘‘(2) be treated as a loan to be repaid in accord-11
ance with subsection (e). 12
‘‘(e) R
EPAYMENTS.—A loan referred to subsection 13
(d)(2) shall— 14
‘‘(1) be treated as a Federal Direct Unsub-15
sidized Stafford Loan under part D of title IV of the 16
Higher Education Act of 1965 (20 U.S.C. 1087a et 17
seq.); and 18
‘‘(2) be subject to repayment, together with in-19
terest thereon accruing from the date of the scholar-20
ship award, in accordance with terms and conditions 21
specified by the Secretary (in consultation with the 22
Secretary of Education) in regulations promulgated 23
to carry out this subsection. 24
‘‘(f) C
OLLECTION OFREPAYMENT.— 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00021 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 22
•S 438 IS
‘‘(1) IN GENERAL.—If a scholarship recipient is 1
required to repay a scholarship under this section— 2
‘‘(A) the Secretary shall determine the re-3
payment amounts and notify such recipient of 4
the amount owed; and 5
‘‘(B) the Secretary, or a participating in-6
stitution acting on behalf of the Secretary, shall 7
collect such amount within a period of time as 8
determined by the Secretary, or such amount 9
shall be treated as a loan in accordance with 10
subsection (e). 11
‘‘(2) R
ETURNED TO THE DEPARTMENT .—Ex-12
cept as provided in paragraph (3), any repayment 13
under this subsection shall be returned to the De-14
partment. 15
‘‘(3) R
ETENTION OF PERCENTAGE .— 16
‘‘(A) I
N GENERAL.—A participating insti-17
tution may retain a percentage of any repay-18
ment the participating institution collects under 19
this subsection to defray administrative costs 20
associated with the collection of such repay-21
ment. 22
‘‘(B) P
ERCENTAGE APPLICABLE .—The 23
Secretary shall establish a single, fixed percent-24
age that participating institutions may retain 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00022 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 23
•S 438 IS
from repayments collected under subparagraph 1
(A) that shall be applicable to all participating 2
institutions. 3
‘‘(g) E
XCEPTIONS.—The Secretary may provide for 4
the partial or total waiver or suspension of any repayment 5
obligation by a scholarship recipient under this section if 6
compliance by the scholarship recipient with the repay-7
ment obligation is impossible or would involve extreme 8
hardship to the scholarship recipient. 9
‘‘(h) T
IMELINE FORIMPLEMENTATION.— 10
‘‘(1) I
N GENERAL.—The Director and partici-11
pating institutions shall seek to enroll in the Pro-12
gram, subject to the availability of appropriations, 13
not fewer than 250 students for the first full aca-14
demic year of the Program that begins 1 year after 15
the date of the enactment of this section. 16
‘‘(2) G
ROWTH OF PROGRAM .—Beginning with 17
the second full academic year of the Program, the 18
Director and participating institutions shall seek to 19
enroll in the Program each full academic year, sub-20
ject to the availability of appropriations, not fewer 21
than double the number of students enrolled in the 22
immediately preceding full academic year until the 23
number of such students reaches 1,000 each full 24
academic year. 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00023 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 24
•S 438 IS
‘‘(3) PLAN FOR 10,000 STUDENTS.— 1
‘‘(A) D
EVELOPMENT OF PLAN .—Not later 2
than 90 days after the date of the enactment of 3
this section, the Director and participating in-4
stitutions shall develop a plan, subject to capac-5
ity and administrative capabilities, to enroll by 6
not later than 10 years after the date of the es-7
tablishment of the Program not fewer than 8
10,000 students in the Program each academic 9
year. 10
‘‘(B) B
RIEFING.—The Director shall brief 11
the Committee on Homeland Security and Gov-12
ernmental Affairs of the Senate and the Com-13
mittee on Homeland Security of the House of 14
Representatives regarding such plan. 15
‘‘(i) R
EPORT ONENROLLMENTGOALS.—If the Di-16
rector and participating institutions fail in any academic 17
year to meet the minimum quota specified in paragraph 18
(1) or (2), as the case may be, of subsection (h), the Direc-19
tor shall brief the Committee on Homeland Security and 20
Governmental Affairs of the Senate and the Committee 21
on Homeland Security of the House of Representatives not 22
later than 30 days after the conclusion of that academic 23
year.’’. 24
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00024 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 25
•S 438 IS
(b) CLERICALAMENDMENT.—The table of contents 1
in section 1(b) of the Homeland Security Act of 2002 2
(Public Law 107–296; 116 Stat. 2135) is amended by in-3
serting after the item relating to section 1333 the fol-4
lowing new item: 5
‘‘Sec. 1334. CISA education and training programs and resources.’’.
(c) REVIEW OFCISA EDUCATION, TRAININGPRO-6
GRAMS ANDRESOURCES.—Not later than 90 days after 7
the date of enactment of this Act, the Director of the Cy-8
bersecurity and Infrastructure Security Agency shall sub-9
mit to the Committee on Homeland Security and Govern-10
mental Affairs of the Senate and the Committee on Home-11
land Security of the House of Representatives a review 12
of the education and training programs of the Cybersecu-13
rity and Infrastructure Security Agency, which shall 14
evaluate the cost, reach, and current demand of those pro-15
grams, including relating to any resource gaps in any of 16
those programs. 17
(d) P
ROMOTINGCYBERCORPSSCHOLARSHIP FOR 18
S
ERVICE AS AGOLDSTANDARDPROGRAM.—The Sec-19
retary of Homeland Security shall submit to the Com-20
mittee on Homeland Security and Governmental Affairs 21
and the Committee on Commerce, Science, and Transpor-22
tation of the Senate and the Committee on Homeland Se-23
curity and the Committee on Science, Space, and Tech-24
nology of the House of Representatives a report on current 25
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00025 Fmt 6652 Sfmt 6201 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS 26
•S 438 IS
support provided by the Department of Homeland Secu-1
rity to the CyberCorps Scholarship for Service Program, 2
including opportunities to provide additional funding to 3
the CyberCorps Scholarship for Service Program under 4
existing training and education programs of the Depart-5
ment of Homeland Security. 6
Æ
VerDate Sep 11 2014 17:19 Mar 07, 2025 Jkt 059200 PO 00000 Frm 00026 Fmt 6652 Sfmt 6301 E:\BILLS\S438.IS S438
ssavage on LAPJG3WLY3PROD with BILLS