II 

117TH CONGRESS 

1ST SESSION S. 658 

To authorize the Secretary of Homeland Security to work with cybersecurity 

consortia for training, and for other purposes. 

IN THE SENATE OF THE UNITED STATES 

MARCH 10, 2021 

Mr. CORNYN (for himself and Mr. LEAHY) introduced the following bill; which 

was read twice and referred to the Committee on Homeland Security and 

Governmental Affairs 

A BILL 

To authorize the Secretary of Homeland Security to work 

with cybersecurity consortia for training, and for other 

purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘National Cybersecurity 

5 Preparedness Consortium Act of 2021’’. 

6 SEC. 2. DEFINITIONS. 

7 In this Act— 

8 (1) the term ‘‘consortium’’ means a group pri9 marily composed of nonprofit entities, including acaVerDate Sep 11 2014 21:41 Apr 04, 2021 Jkt 019200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S658.IS S658

kjohnson on DSK79L0C42PROD with BILLS
2 

•S 658 IS

1 demic institutions, that develop, update, and deliver 

2 cybersecurity training in support of homeland secu3 rity; 

4 (2) the terms ‘‘cybersecurity risk’’ and ‘‘inci5 dent’’ have the meanings given those terms in sec6 tion 2209(a) of the Homeland Security Act of 2002 

7 (6 U.S.C. 659(a)); 

8 (3) the term ‘‘Department’’ means the Depart9 ment of Homeland Security; and 

10 (4) the term ‘‘Secretary’’ means the Secretary 

11 of Homeland Security. 

12 SEC. 3. NATIONAL CYBERSECURITY PREPAREDNESS CON13 SORTIUM. 

14 (a) IN GENERAL.—The Secretary may work with a 

15 consortium to support efforts to address cybersecurity 

16 risks and incidents. 

17 (b) ASSISTANCE TO THE NCCIC.—The Secretary 

18 may work with a consortium to assist the national cyberse19 curity and communications integration center of the De20 partment (established under section 2209 of the Home21 land Security Act of 2002 (6 U.S.C. 659)) to— 

22 (1) provide training to State and local first re23 sponders and officials specifically for preparing for 

24 and responding to cybersecurity risks and incidents, 

25 in accordance with applicable law; 


kjohnson on DSK79L0C42PROD with BILLS
3 

•S 658 IS

1 (2) develop and update a curriculum utilizing 

2 existing programs and models in accordance with 

3 such section 2209, for State and local first respond4 ers and officials, related to cybersecurity risks and 

5 incidents; 

6 (3) provide technical assistance services to build 

7 and sustain capabilities in support of preparedness 

8 for and response to cybersecurity risks and inci9 dents, including threats of terrorism and acts of ter10 rorism, in accordance with such section 2209; 

11 (4) conduct cross-sector cybersecurity training 

12 and simulation exercises for entities, including State 

13 and local governments, critical infrastructure owners 

14 and operators, and private industry, to encourage 

15 community-wide coordination in defending against 

16 and responding to cybersecurity risks and incidents, 

17 in accordance with section 2210(c) of the Homeland 

18 Security Act of 2002 (6 U.S.C. 660(c)); 

19 (5) help States and communities develop cyber20 security information sharing programs, in accord21 ance with section 2209 of the Homeland Security 

22 Act of 2002 (6 U.S.C. 659), for the dissemination 

23 of homeland security information related to cyberse24 curity risks and incidents; and 


kjohnson on DSK79L0C42PROD with BILLS
4 

•S 658 IS

1 (6) help incorporate cybersecurity risk and inci2 dent prevention and response into existing State and 

3 local emergency plans, including continuity of oper4 ations plans. 

5 (c) CONSIDERATIONS REGARDING SELECTION OF A

6 CONSORTIUM.—In selecting a consortium with which to 

7 work under this Act, the Secretary shall take into consid8 eration the following: 

9 (1) Any prior experience conducting cybersecu10 rity training and exercises for State and local enti11 ties. 

12 (2) Geographic diversity of the members of any 

13 such consortium so as to cover different regions 

14 throughout the United States. 

15 (d) METRICS.—If the Secretary works with a consor16 tium under subsection (a), the Secretary shall measure the 

17 effectiveness of the activities undertaken by the consor18 tium under this Act. 

19 (e) OUTREACH.—The Secretary shall conduct out20 reach to universities and colleges, including historically 

21 Black colleges and universities, Hispanic-serving institu22 tions, Tribal Colleges and Universities, and other minor23 ity-serving institutions, regarding opportunities to support 

24 efforts to address cybersecurity risks and incidents, by 

25 working with the Secretary under subsection (a). 


kjohnson on DSK79L0C42PROD with BILLS
5 

•S 658 IS

1 SEC. 4. RULE OF CONSTRUCTION. 

2 Nothing in this Act may be construed to authorize 

3 a consortium to control or direct any law enforcement 

4 agency in the exercise of the duties of the law enforcement 

5 agency. 

Æ 


kjohnson on DSK79L0C42PROD with BILLS