I 
116TH CONGRESS 
2D SESSION 
H. R. 8612 
To direct the Director of the Cybersecurity and Infrastructure Security Agen-
cy to establish a School Cybersecurity Clearinghouse, and for other 
purposes. 
IN THE HOUSE OF REPRESENTATIVES 
OCTOBER 16, 2020 
Ms. MATSUI (for herself and Mr. LANGEVIN) introduced the following bill; 
which was referred to the Committee on Homeland Security, and in addi-
tion to the Committees on Education and Labor, and Science, Space, and 
Technology, for a period to be subsequently determined by the Speaker, 
in each case for consideration of such provisions as fall within the juris-
diction of the committee concerned 
A BILL 
To direct the Director of the Cybersecurity and Infrastruc-
ture Security Agency to establish a School Cybersecurity 
Clearinghouse, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may cited as the ‘‘Enhancing K–12 
Cybersecurity Act’’. 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
SEC. 2. SCHOOL CYBERSECURITY CLEARINGHOUSE. 
(a) 
ESTABLISHMENT.—The 
Director 
of 
the 
Cybersecurity and Infrastructure Security Agency shall es-
tablish a publicly accessible website (to be known as the 
‘‘School Cybersecurity Clearinghouse’’) to disseminate in-
formation, best practices, and grant opportunities in ac-
cordance with subsection (b) and section 2(e). 
(b) 
DUTIES.—In 
establishing 
the 
School 
Cybersecurity Clearinghouse under subsection (a), the 
Secretary shall— 
(1) engage appropriate Federal, State, local, 
and nongovernmental organizations to identify, pro-
mote, and disseminate information and best prac-
tices for local educational agencies (as defined in 
section 101 of the Elementary and Secondary Edu-
cation Act of 1965 (20 U.S.C. 8101)) with respect 
to cybersecurity, data protection, remote learning se-
curity, and student online privacy; and 
(2) maintain a searchable database for an ele-
mentary school, secondary school, local educational 
agency, State educational agency, and educational 
service agency to find and apply for funding oppor-
tunities (including the opportunity provided under 
section 3) to improve cybersecurity. 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
(c) CONSULTATION.—In carrying out the duties 
under subsection (b), the Secretary shall consult with the 
following: 
(1) The Secretary of Education. 
(2) The Director of the National Institute of 
Standards and Technology. 
(3) The Federal Communication Commission. 
(4) The Director of the National Science Foun-
dation. 
(5) The Federal Bureau of Investigation. 
(6) State and local leaders, including, when ap-
propriate, Governors, members of State legislatures 
and State boards of education, local educational 
agencies, representatives of Indian tribes, teachers, 
principals, other school leaders, charter school lead-
ers, specialized instructional support personnel, 
paraprofessionals, administrators, other staff, and 
parents. 
SEC. 3. CYBERSECURITY REGISTRY. 
(a) IN GENERAL.—The Director of the Cybersecurity 
and Infrastructure Security Agency shall establish a vol-
untary registry of information relating to cyber attacks 
on elementary schools and secondary schools. 
(b) USE.—Information in the registry established 
pursuant to subsection (a) may be used to— 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
(2) A description of each cyber attack which 
shall include whether each such attack was as a re-
sult of a breach, malware, distributed denial of serv-
ice attack, or other method designed to cause a vul-
nerability. 
(3) The effects of each cyber attack, including 
descriptions of the type and size of each such attack. 
(4) Other information determined relevant by 
the Secretary. 
(d) ACCESS.—The Director of the Cybersecurity and 
Infrastructure Security Agency may make information 
submitted to the registry established pursuant to sub-
section (a) available to relevant law enforcement agencies, 
and State and local government agencies, as determined 
appropriate, for the purpose identified in subsection 
(b)(5). 
(e) REPORT.—The Director of the Cybersecurity and 
Infrastructure Security Agency shall make available on 
the School Cybersecurity Clearinghouse established under 
section 1, an annual report relating to cyber attacks on 
elementary schools and secondary schools which includes 
data, and the analysis of such data, in a manner that— 
(1) is— 
(A) de-identified; and 
(B) presented in the aggregate; and 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
(2) at a minimum, protects personal privacy to 
the extent required by applicable Federal and State 
privacy laws. 
SEC. 4. K–12 CYBERSECURITY HUMAN CAPACITY GRANT 
PROGRAM. 
(a) ESTABLISHMENT.—The Director of the National 
Science Foundation, acting through the Director of the 
Office of Advanced Cyberinfrastructure, shall establish a 
program (to be known as the ‘‘K–12 Cybersecurity 
Human Capacity grant program’’) to make grants avail-
able to eligible entities to address cybersecurity risks and 
threats to information systems of elementary schools and 
secondary schools through— 
(1) expanded workforce capacity and develop-
ment; and 
(2) improved network and cyberinfrastructure. 
(b) APPLICATIONS.—An eligible entity applying for a 
grant under the program shall submit to the Director a 
proposal that includes the following: 
(1) A description of how the proposed 
cybersecurity capacity improvements will be con-
ceived, designed, and implemented to meet local 
needs. Such description shall take the form of a co-
herent cybersecurity strategy and approach for a 
school, district, or region such that such strategy 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
and approach are integrated horizontally (intra- 
school, district, or region) and vertically (regionally 
and nationally) with cybersecurity investments and 
best practices. 
(2) A plan for increasing the ability of edu-
cational leaders to prevent, recognize, and address 
cybersecurity threats. 
(3) An assessment of the sustainability of the 
activities under such proposal in light of any recur-
ring operational and engineering costs associated 
with such activities. 
(4) A plan to address the relevant cybersecurity 
issues and challenges implicated by the activities 
under such plan which includes issues or challenges 
pertaining to data integrity, privacy, network secu-
rity measures, federated access and identity manage-
ment, and infrastructure monitoring. 
(c) FEDERAL SHARE.—The Director shall provide 
grants to eligible entities in an amount not to exceed 80 
percent of the total cost of the plan. 
(d) SELECTION.—In selecting recipients for grants 
under this section, the Director shall consider, and give 
preference to the extent practicable, the percentage of— 
(1) students in the eligible entity’s jurisdiction 
eligible to receive free or reduced price lunch under 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
the Richard B. Russell National School Lunch Act 
(42 U.S.C. 1751 et seq.); or 
(2) household units in the eligible entity’s juris-
diction receiving non-cash benefits under the supple-
mental nutrition assistance program under the Food 
and Nutrition Act of 2008. 
(e) AUTHORIZATION
OF APPROPRIATIONS.—There 
are authorized to be appropriated for grants under this 
section $400,000,000 for fiscal year 2020, to remain avail-
able through fiscal year 2021. 
SEC. 5. DEFINITIONS. 
In this Act: 
(1) 
EDUCATIONAL
SERVICE
AGENCY.—The 
term ‘‘educational service agency’’ has the meaning 
given that term in section 8101 of the Elementary 
and Secondary Education Act of 1965 (20 U.S.C. 
7801). 
(2) ELEMENTARY SCHOOL.—The term ‘‘elemen-
tary school’’ has the meaning given that term in sec-
tion 8101 of the Elementary and Secondary Edu-
cation Act of 1965 (20 U.S.C. 7801). 
(3) ELIGIBLE
ENTITIES.—The term ‘‘eligible 
entities’’ means— 
(A) an elementary school; 
(B) a secondary school; 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS
(C) a local educational agency; 
(D) a State educational agency; 
(E) an educational service agency; and 
(F) any combination of the entities listed 
in subparagraph consortia of such entities. 
(4) LOCAL EDUCATIONAL AGENCY.—The term 
‘‘local educational agency’’ has the meaning given 
that term in section 8101 of the Elementary and 
Secondary Education Act of 1965 (20 U.S.C. 7801). 
(5) STATE EDUCATIONAL AGENCY.—The term 
‘‘State educational agency’’ has the meaning given 
that term in section 8101 of the Elementary and 
Secondary Education Act of 1965 (20 U.S.C. 7801). 
(6) SECONDARY
SCHOOL.—The term ‘‘sec-
ondary school’’ has the meaning given that term in 
section 8101 of the Elementary and Secondary Edu-
cation Act of 1965 (20 U.S.C. 7801). 
Æ 
VerDate Sep 11 2014 
02:31 Nov 11, 2020
Jkt 019200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6301
E:\BILLS\H8612.IH
H8612
kjohnson on DSK79L0C42PROD with BILLS