2958 
profit entity or State or local government agency to admin-
ister the competition. 
(d) COMPETITION PARAMETERS.—Each competition 
shall incorporate the following elements: 
(1) Cybersecurity skills outlined in the National 
Initiative for Cybersecurity Education Framework, or 
any successor framework. 
(2) Individual and team events. 
(3) Categories demonstrating offensive and defen-
sive cyber operations, such as software reverse engi-
neering 
and 
exploitation, 
network 
operations, 
forensics, big data analysis, cyber analysis, cyber de-
fense, cyber exploitation, secure programming, obfus-
cated coding, or cyber-physical systems. 
(4) Any other elements related to paragraphs (1), 
(2), or (3), as determined necessary by the Director. 
(e) USE OF FUNDS.— 
(1) IN GENERAL.—In order to further the goals 
and objectives of the competition, the Director may 
use amounts made available to the Director for the 
competition for reasonable expenses for the following: 
(A) Advertising, marketing, and promoting 
the competition. 
(B) Meals for participants and organizers 
of the competition if attendance at the meal dur-
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02958
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE
2959 
ing the competition is necessary to maintain the 
integrity of the competition. 
(C) Promotional items, including merchan-
dise and apparel. 
(D) Consistent with section 4503 of title 5, 
United States Code, necessary expenses for the 
honorary recognition of competition partici-
pants, including members of the uniformed serv-
ices. 
(E) Monetary and nonmonetary awards for 
competition participants, including members of 
the uniformed services, subject to subsection (f). 
(2) APPLICATION.—This subsection shall apply 
to amounts appropriated on or after the date of the 
enactment of this Act. 
(f) PRIZE LIMITATION.— 
(1) AWARDS BY THE DIRECTOR.—The Director 
may make one or more awards per competition, ex-
cept that the amount or value of each shall not exceed 
$10,000. 
(2) AWARDS BY THE SECRETARY OF HOMELAND 
SECURITY.—The Secretary of Homeland Security 
may make one or more awards per competition, ex-
cept the amount or the value of each shall not exceed 
$25,000. 
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02959
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE
2960 
(3) REGULAR PAY.—A monetary award under 
this section shall be in addition to the regular pay of 
the recipient. 
(4) OVERALL YEARLY AWARD LIMIT.—The total 
amount or value of awards made under this Act dur-
ing a fiscal year may not exceed $100,000. 
(g) REPORTING REQUIREMENTS.—The Director shall 
annually provide to the Committee on Homeland Security 
of the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Senate 
a report that includes the following with respect to each 
competition conducted in the preceding year: 
(1) A description of available amounts. 
(2) A description of authorized expenditures. 
(3) Information relating to participation. 
(4) Information relating to lessons learned, and 
how such lessons may be applied to improve cyberse-
curity operations and recruitment of the Cybersecu-
rity and Infrastructure Security Agency of the De-
partment of Homeland Security. 
SEC. 7122. INDUSTRIAL CONTROL SYSTEMS CYBERSECU-
RITY TRAINING. 
(a) IN GENERAL.—Subtitle A of title XXII of the 
Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) is 
amended by adding at the end the following new section: 
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02960
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE
2961 
‘‘SEC. 2220E. INDUSTRIAL CONTROL SYSTEMS CYBERSECU-
RITY TRAINING INITIATIVE. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—The Industrial Control Sys-
tems Cybersecurity Training Initiative (in this sec-
tion referred to as the ‘Initiative’) is established with-
in the Agency. 
‘‘(2) PURPOSE.—The purpose of the Initiative is 
to develop and strengthen the skills of the cybersecu-
rity workforce related to securing industrial control 
systems. 
‘‘(b) REQUIREMENTS.—In carrying out the Initiative, 
the Director shall— 
‘‘(1) ensure the Initiative includes— 
‘‘(A) virtual and in-person trainings and 
courses provided at no cost to participants; 
‘‘(B) trainings and courses available at dif-
ferent skill levels, including introductory level 
courses; 
‘‘(C) trainings and courses that cover cyber 
defense strategies for industrial control systems, 
including an understanding of the unique cyber 
threats facing industrial control systems and the 
mitigation of security vulnerabilities in indus-
trial control systems technology; and 
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02961
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE
2968 
penses of recipients of education and training provided pur-
suant to subsection (a). 
‘‘(h) ANNUAL REPORTS TO CONGRESS.— 
‘‘(1) IN GENERAL.—The Secretary shall include 
in the annual report required under section 1116 of 
title 31, United States Code, information regarding 
the activities of the Institute, including, where pos-
sible, the following: 
‘‘(A) An identification of jurisdictions with 
recipients of the education and training provided 
pursuant to subsection (a) during such year. 
‘‘(B) Information relating to the costs asso-
ciated with that education and training. 
‘‘(C) Any information regarding projected 
future demand for the education and training 
provided pursuant to subsection (a). 
‘‘(D) Impacts of the activities of the Insti-
tute on the capability of jurisdictions to inves-
tigate and prevent cybersecurity incidents, elec-
tronic crimes, and related cybersecurity threats. 
‘‘(E) A description of the nomination proc-
ess for potential recipients of the information 
and training provided pursuant to subsection 
(a). 
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02968
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE
2980 
program at such foreign last point of departure air-
port pursuant to subsection (b) and mitigation plans 
to address such potential security vulnerabilities. 
(4) An assessment of the impacts such pilot pro-
gram will have on aviation security. 
(5) An assessment of the screening performed at 
such foreign last point of departure airport, including 
the feasibility of TSA personnel monitoring screening, 
security protocols, and standards. 
(6) Information regarding identifying the entity 
or entities responsible for screening passengers and 
property at such foreign last point of departure air-
port. 
(7) The name of the entity or local authority and 
any contractor or subcontractor. 
(8) Information regarding the screening require-
ments relating to such aviation security screening 
agreement. 
(9) Details regarding information sharing mech-
anisms between the TSA and such foreign last point 
of departure airport, screening authority, or entity 
responsible for screening provided for under such 
aviation security screening agreement. 
(10) A copy of the aviation security screening 
agreement, which shall identify the foreign last point 
VerDate Sep 11 2014 
00:43 Dec 08, 2022
Jkt 000000
PO 00000
Frm 02980
Fmt 6652
Sfmt 6203
Z:\XMLBILLS\H7776.EAH
NODE