II 

115TH CONGRESS 

1ST SESSION S. 594 

To authorize the Secretary of Homeland Security to work with cybersecurity 

consortia for training, and for other purposes. 

IN THE SENATE OF THE UNITED STATES 

MARCH 9, 2017 

Mr. CORNYN (for himself, Mr. CRUZ, and Mr. LEAHY) introduced the following bill; which was read twice and referred to the Committee on 

Homeland Security and Governmental Affairs 

A BILL 

To authorize the Secretary of Homeland Security to work 

with cybersecurity consortia for training, and for other 

purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘National Cybersecurity 

5 Preparedness Consortium Act of 2017’’. 

6 SEC. 2. DEFINITIONS. 

7 In this Act— 

8 (1) the term ‘‘consortium’’ means a group pri9 marily composed of nonprofit entities, including acaVerDate Sep 11 2014 22:27 Mar 16, 2017 Jkt 069200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S594.IS S594

srobinson on DSK5SPTVN1PROD with BILLS
2 

•S 594 IS

1 demic institutions, that develop, update, and deliver 

2 cybersecurity training in support of homeland secu3 rity; 

4 (2) the terms ‘‘cybersecurity risk’’ and ‘‘inci5 dent’’ have the meanings given those terms in sec6 tion 227(a) of the Homeland Security Act of 2002 

7 (6 U.S.C. 148(a)); 

8 (3) the term ‘‘Department’’ means the Depart9 ment of Homeland Security; and 

10 (4) the term ‘‘Secretary’’ means the Secretary 

11 of Homeland Security. 

12 SEC. 3. NATIONAL CYBERSECURITY PREPAREDNESS CON13 SORTIUM. 

14 (a) IN GENERAL.—The Secretary may work with a 

15 consortium, including the National Cybersecurity Pre16 paredness Consortium, to support efforts to address cyber17 security risks and incidents, including threats of terrorism 

18 and acts of terrorism. 

19 (b) ASSISTANCE TO THE NCCIC.—The Secretary 

20 may work with a consortium to assist the national cyberse21 curity and communications integration center of the De22 partment (established under section 227 of the Homeland 

23 Security Act of 2002 (6 U.S.C. 148)) to— 

24 (1) provide training to State and local first re25 sponders and officials specifically for preparing for 


srobinson on DSK5SPTVN1PROD with BILLS
3 

•S 594 IS

1 and responding to cybersecurity risks and incidents, 

2 including threats of terrorism and acts of terrorism, 

3 in accordance with applicable law; 

4 (2) develop and update a curriculum utilizing 

5 existing programs and models in accordance with 

6 such section 227, for State and local first responders 

7 and officials, related to cybersecurity risks and inci8 dents, including threats of terrorism and acts of ter9 rorism; 

10 (3) provide technical assistance services to build 

11 and sustain capabilities in support of preparedness 

12 for and response to cybersecurity risks and inci13 dents, including threats of terrorism and acts of ter14 rorism, in accordance with such section 227; 

15 (4) conduct cross-sector cybersecurity training 

16 and simulation exercises for entities, including State 

17 and local governments, critical infrastructure owners 

18 and operators, and private industry, to encourage 

19 community-wide coordination in defending against 

20 and responding to cybersecurity risks and incidents, 

21 including threats of terrorism and acts of terrorism, 

22 in accordance with section 228(c) of the Homeland 

23 Security Act of 2002 (6 U.S.C. 149(c)); 

24 (5) help States and communities develop cyber25 security information sharing programs, in accordVerDate Sep 11 2014 22:27 Mar 16, 2017 Jkt 069200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S594.IS S594

srobinson on DSK5SPTVN1PROD with BILLS
4 

•S 594 IS

1 ance with section 227 of the Homeland Security Act 

2 of 2002 (6 U.S.C. 148), for the dissemination of 

3 homeland security information related to cybersecu4 rity risks and incidents, including threats of ter5 rorism and acts of terrorism; and 

6 (6) help incorporate cybersecurity risk and inci7 dent prevention and response (including related to 

8 threats of terrorism and acts of terrorism) into ex9 isting State and local emergency plans, including 

10 continuity of operations plans. 

11 (c) PROHIBITION ON DUPLICATION.—In carrying out 

12 the functions under subsection (b), the Secretary shall, to 

13 the greatest extent practicable, seek to prevent unneces14 sary duplication of existing programs or efforts of the De15 partment. 

16 (d) CONSIDERATIONS REGARDING SELECTION OF A

17 CONSORTIUM.—In selecting a consortium with which to 

18 work under this Act, the Secretary shall take into consid19 eration the following: 

20 (1) Any prior experience conducting cybersecu21 rity training and exercises for State and local enti22 ties. 

23 (2) Geographic diversity of the members of any 

24 such consortium so as to cover different regions 

25 throughout the United States. 


srobinson on DSK5SPTVN1PROD with BILLS
5 

•S 594 IS

1 (e) METRICS.—If the Secretary works with a consor2 tium under subsection (a), the Secretary shall measure the 

3 effectiveness of the activities undertaken by the consor4 tium under this Act. 

5 (f) OUTREACH.—The Secretary shall conduct out6 reach to universities and colleges, including historically 

7 Black colleges and universities, Hispanic-serving institu8 tions, Tribal Colleges and Universities, and other minor9 ity-serving institutions, regarding opportunities to support 

10 efforts to address cybersecurity risks and incidents, in11 cluding threats of terrorism and acts of terrorism, by 

12 working with the Secretary under subsection (a). 

13 (g) TERMINATION.—The authority to carry out this 

14 Act shall terminate on the date that is 5 years after the 

15 date of enactment of this Act. 

Æ 


srobinson on DSK5SPTVN1PROD with BILLS