Title: PROTECT Act of 2020
Policy area: Science, Technology, Communications

Summary:
Providing Resources for Ongoing Training and Education in Cyber Technologies Act of 2020 or the PROTECT Act of 2020
This bill provides statutory authority for the Cybersecurity Education and Training Assistance Program.

[Congressional Bills 116th Congress]
[From the U.S. Government Publishing Office]
[S. 4195 Introduced in Senate (IS)]

<DOC>






116th CONGRESS
  2d Session
                                S. 4195

 To authorize the Cybersecurity Education Training Assistance Program.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                              July 2, 2020

Ms. Rosen (for herself and Mr. Cassidy) introduced the following bill; 
which was read twice and referred to the Committee on Homeland Security 
                        and Governmental Affairs

_______________________________________________________________________

                                 A BILL


 
 To authorize the Cybersecurity Education Training Assistance Program.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Providing Resources for Ongoing 
Training and Education in Cyber Technologies Act of 2020'' or the 
``PROTECT Act of 2020''.

SEC. 2. CYBERSECURITY EDUCATION AND TRAINING ASSISTANCE PROGRAM.

    (a) Sense of Congress.--It is the sense of Congress that--
            (1) the United States continues to face critical shortages 
        in the national cybersecurity workforce;
            (2) the Cybersecurity and Infrastructure Security Agency 
        within the Department of Homeland Security has the 
        responsibility to manage cyber and physical risks to our 
        critical infrastructure, including by ensuring a national 
        workforce supply to support cybersecurity through education, 
        training, and capacity development efforts;
            (3) to reestablish the technology leadership, security, and 
        economic competitiveness of the United States, the 
        Cybersecurity and Infrastructure Security Agency should create 
        a sustainable pipeline by strengthening elementary and 
        secondary cybersecurity outreach and education nationwide.
    (b) Authorities.--Section 2202(e)(1) of the Homeland Security Act 
of 2002 (6 U.S.C. 652(e)(1)) is amended by adding at the end the 
following:
                    ``(R) To encourage and build cybersecurity 
                awareness and competency across the United States and 
                to develop, attract, and retain the cybersecurity 
                workforce necessary for the cybersecurity related 
                missions of the Department, including by--
                            ``(i) overseeing elementary and secondary 
                        cybersecurity education and awareness related 
                        programs at the Department;
                            ``(ii) leading efforts to develop, attract, 
                        and retain the cybersecurity workforce 
                        necessary for the cybersecurity related 
                        missions of the Department;
                            ``(iii) encouraging and building 
                        cybersecurity awareness and competency across 
                        the United States; and
                            ``(iv) carrying out cybersecurity related 
                        workforce development activities, including 
                        through--
                                    ``(I) increasing the pipeline of 
                                future cybersecurity professionals 
                                through programs focused on elementary 
                                and secondary education, higher 
                                education, and underrepresented 
                                students in science and engineering, 
                                including women and racial and ethnic 
                                minorities; and
                                    ``(II) building awareness of and 
                                competency in cybersecurity across the 
                                civilian Federal government 
                                workforce.''.
    (c) Education, Training, and Capacity Development.--Section 2202(c) 
of the Homeland Security Act of 2002 (6 U.S.C. 652(c)) is amended--
            (1) by redesignating paragraph (11) as paragraph (12);
            (2) in paragraph (10), by striking ``and'' at the end; and
            (3) by inserting after paragraph (10) the following:
            ``(11) provide education, training, and capacity 
        development for Federal and non-Federal entities to enhance the 
        security and resiliency of domestic and global cybersecurity 
        and infrastructure security; and''.
    (d) Establishment of Training Programs.--Subtitle A of title XXII 
of the Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) is amended 
by adding at the end the following:

``SEC. 2215. CYBERSECURITY EDUCATION AND TRAINING PROGRAMS.

    ``(a) Establishment.--
            ``(1) In general.--The Cybersecurity Education and Training 
        Assistance Program (referred to in this section as `CETAP') is 
        established within the Agency.
            ``(2) Purpose.--The purpose of CETAP shall be to support 
        the effort of the Agency in building and strengthening a 
        national cybersecurity workforce pipeline capacity through 
        supporting elementary and secondary cybersecurity education, 
        including by--
                    ``(A) providing foundational cybersecurity 
                awareness and literacy;
                    ``(B) encouraging cybersecurity career exploration; 
                and
                    ``(C) supporting the teaching of cybersecurity 
                skills in elementary and secondary schools.
    ``(b) Requirements.--In carrying out CETAP, the Director shall--
            ``(1) implement a program that--
                    ``(A) conducts professional development sessions 
                for educators in elementary and secondary schools;
                    ``(B) develops resources for the teaching of 
                elementary and secondary education cybersecurity-
                focused curricula;
                    ``(C) provides direct student engagement 
                opportunities through camps and other programming;
                    ``(D) engages with local educational agencies and 
                State education agencies to promote awareness of the 
                program;
                    ``(E) integrates with existing post-secondary 
                education and workforce development programs at the 
                Department;
                    ``(F) partners with cybersecurity and education 
                stakeholder groups to expand outreach; a
                    ``(G) increases the participation of women or 
                racial and ethnic minorities underrepresented in 
                science and engineering, or both, in cybersecurity 
                education activities; and
                    ``(H) any other activity the Director determines 
                necessary to meet the purpose described in subsection 
                (a)(2); and
            ``(2) enable the deployment of CETAP nationwide.
    ``(c) Briefings.--
            ``(1) In general.--Not later than 1 year after the 
        establishment of CETAP, and annually thereafter, the Secretary 
        shall brief the Committee on Homeland Security and Governmental 
        Affairs of the Senate and the Committee on Homeland Security of 
        the House of Representatives on the program.
            ``(2) Contents.--Each briefing conducted under paragraph 
        (1) shall include--
                    ``(A) estimated figures on the number of students 
                reached and educators engaged, including 
                underrepresented students in science and engineering, 
                including women and racial and ethnic minorities;
                    ``(B) information on community outreach and State 
                engagement efforts;
                    ``(C) information on new curricula offerings and 
                educator professional development platforms; and
                    ``(D) information on coordination with post-
                secondary education and workforce development programs 
                at the Department.
    ``(d) Mission Promotion.--The Director may use appropriated amounts 
to purchase promotional and recognition items and marketing and 
advertising services to publicize and promote the mission and services 
of the Agency, support the activities of the Agency, and to recruit and 
retain Agency personnel.
    ``(e) Definitions.--The terms `elementary school', `local 
educational agency', `professional development', `secondary school', 
and `State educational agency' have the meaning given the terms in 
section 8101 of the Elementary and Secondary Education Act of 1965 (20 
U.S.C. 7801).''.
    (e) Technical and Conforming Amendment.--The table of contents in 
section 1(b) of the Homeland Security Act of 2002 (Public Law 107-296; 
116 Stat. 2135) is amended by inserting after the item relating to 
section 2214 the following:

``Sec. 2215. Cybersecurity Education and Training Programs.''.
                                 <all>