SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Industrial Control Sys-
tems Cybersecurity Training Act’’. 
SEC. 2. ESTABLISHMENT OF THE INDUSTRIAL CONTROL 
SYSTEMS TRAINING INITIATIVE. 
(a) IN GENERAL.—Subtitle A of title XXII of the 
Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) 
is amended by adding at the end the following new section: 
‘‘SEC. 2220D. INDUSTRIAL CONTROL SYSTEMS CYBERSECU-
RITY TRAINING INITIATIVE. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—The Industrial Control Sys-
tems Cybersecurity Training Initiative (in this sec-
tion referred to as the ‘Initiative’) is established 
within the Agency. 
‘‘(2) PURPOSE.—The purpose of the Initiative 
is to develop and strengthen the skills of the cyber-
security workforce related to securing industrial con-
trol systems. 
‘‘(b) REQUIREMENTS.—In carrying out the Initiative, 
the Director shall— 
‘‘(1) ensure the Initiative includes— 
‘‘(A) virtual and in-person trainings and 
courses provided at no cost to participants; 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6401
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(B) trainings and courses available at dif-
ferent skill levels, including introductory level 
courses; 
‘‘(C)
trainings
and
courses
that
cover 
cyber defense strategies for industrial control 
systems, including an understanding of the 
unique cyber threats facing industrial control 
systems
and
the
mitigation
of
security 
vulnerabilities
in
industrial
control
systems 
technology; and 
‘‘(D) appropriate consideration regarding 
the availability of trainings and courses in dif-
ferent regions of the United States; and 
‘‘(2) engage in— 
‘‘(A) collaboration with the National Lab-
oratories of the Department of Energy in ac-
cordance with section 309; 
‘‘(B) consultation with Sector Risk Man-
agement Agencies; and 
‘‘(C) as appropriate, consultation with pri-
vate sector entities with relevant expertise, such 
as vendors of industrial control systems tech-
nologies. 
‘‘(c) REPORTS.— 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6401
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(1) IN GENERAL.—Not later than one year 
after the date of the enactment of this section and 
annually thereafter, the Director shall submit to the 
Committee on Homeland Security of the House of 
Representatives and the Committee on Homeland 
Security and Governmental Affairs of the Senate a 
report on the Initiative. 
‘‘(2)
CONTENTS.—Each
report
under
para-
graph (1) shall include the following: 
‘‘(A) A description of the courses provided 
under the Initiative. 
‘‘(B) A description of outreach efforts to 
raise awareness of the availability of such 
courses. 
‘‘(C) Information on the number and de-
mographics of participants in such courses, in-
cluding by gender, race, and place of residence. 
‘‘(D) Information on the participation in 
such courses of workers from each critical in-
frastructure sector. 
‘‘(E) Plans for expanding access to indus-
trial control systems education and training, in-
cluding expanding access to women and under-
represented populations, and expanding access 
to different regions of the United States. 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6401
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(F)
Recommendations
on
how
to 
strengthen the state of industrial control sys-
tems cybersecurity education and training.’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
in section 1(b) of the Homeland Security Act of 2002 is 
amended by inserting after the item relating to section 
2220C the following new item: 
‘‘Sec. 2220D. Industrial Control Systems Cybersecurity Training Initiative.’’. 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Industrial Control Sys-
tems Cybersecurity Training Act’’. 
SEC. 2. ESTABLISHMENT OF THE INDUSTRIAL CONTROL 
SYSTEMS TRAINING INITIATIVE. 
(a) IN GENERAL.—Subtitle A of title XXII of the 
Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) is 
amended by adding at the end the following new section: 
‘‘SEC. 2220E. INDUSTRIAL CONTROL SYSTEMS CYBERSECU-
RITY TRAINING INITIATIVE. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—The Industrial Control Sys-
tems Cybersecurity Training Initiative (in this sec-
tion referred to as the ‘Initiative’) is established with-
in the Agency. 
‘‘(2) PURPOSE.—The purpose of the Initiative is 
to develop and strengthen the skills of the cybersecu-
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
rity workforce related to securing industrial control 
systems. 
‘‘(b) REQUIREMENTS.—In carrying out the Initiative, 
the Director shall— 
‘‘(1) ensure the Initiative includes— 
‘‘(A) virtual and in-person trainings and 
courses provided at no cost to participants; 
‘‘(B) trainings and courses available at dif-
ferent skill levels, including introductory level 
courses; 
‘‘(C) trainings and courses that cover cyber 
defense strategies for industrial control systems, 
including an understanding of the unique cyber 
threats facing industrial control systems and the 
mitigation of security vulnerabilities in indus-
trial control systems technology; and 
‘‘(D) appropriate consideration regarding 
the availability of trainings and courses in dif-
ferent regions of the United States; 
‘‘(2) engage in— 
‘‘(A) collaboration with the Department of 
Energy national laboratories in accordance with 
section 309; 
‘‘(B) consultation with Sector Risk Manage-
ment Agencies; and 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(C) as appropriate, consultation with pri-
vate sector entities with relevant expertise, such 
as vendors of industrial control systems tech-
nologies; and 
‘‘(3) consult, to the maximum extent practicable, 
with commercial training providers and academia to 
minimize the potential for duplication of other train-
ing opportunities. 
‘‘(c) REPORTS.— 
‘‘(1) IN GENERAL.—Not later than 1 year after 
the date of enactment of this section, and annually 
thereafter, the Director shall submit to the Committee 
on Homeland Security of the House of Representa-
tives and the Committee on Homeland Security and 
Governmental Affairs of the Senate a report on the 
Initiative. 
‘‘(2) CONTENTS.—Each report submitted under 
paragraph (1) shall include the following: 
‘‘(A) A description of the courses provided 
under the Initiative. 
‘‘(B) A description of outreach efforts to 
raise awareness of the availability of such 
courses. 
‘‘(C) The number of participants in each 
course. 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6203
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(D) Voluntarily provided information on 
the demographics of participants in such courses, 
including by gender, race, and place of residence. 
‘‘(E) Information on the participation in 
such courses of workers from each critical infra-
structure sector. 
‘‘(F) Plans for expanding access to indus-
trial control systems education and training, in-
cluding expanding access to women and under-
represented populations, and expanding access to 
different regions of the United States. 
‘‘(G) Recommendations on how to strength-
en the state of industrial control systems cyberse-
curity education and training.’’. 
(b) CLERICAL AMENDMENTS.—The table of contents in 
section 1(b) of the Homeland Security Act of 2002 (Public 
Law 107–296; 116 Stat. 2135) is amended— 
(1) by moving the item relating to section 2220D 
to appear after the item relating to section 2220C; 
and 
(2) by inserting after the item relating to section 
2220D the following: 
‘‘Sec. 2220E. Industrial Control Systems Cybersecurity Training Initiative.’’. 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6213
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6213
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB
Calendar No. 680 
117TH CONGRESS 
2D SESSION 
H. R. 7777 
[Report No. 117–281] 
AN ACT 
To amend the Homeland Security Act of 2002 to 
authorize the Cybersecurity and Infrastructure 
Security Agency to establish an industrial control 
systems cybersecurity training initiative, and for 
other purposes. 
DECEMBER 19, 2022 
Reported with an amendment 
VerDate Sep 11 2014 
05:35 Dec 20, 2022
Jkt 039200
PO 00000
Frm 00010
Fmt 6651
Sfmt 6651
E:\BILLS\H7777.RS
H7777
pbinns on DSKJLVW7X2PROD with $$_JOB