National Cybersecurity Preparedness Consortium Act of 2016

Bill: 114-hr-4743
Sponsor: full_name: Rep. Castro, Joaquin [D-TX-20]
Introduced: 2016-03-15
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft

Emergency planning and evacuation

First responders and emergency personnel

Public-private cooperation

State and local government operations

Terrorism
Latest action: action_date: 2016-05-17
text: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Summaries:
action_date: 2016-03-15
action_desc: Introduced in House
text: <p><b>National Cybersecurity Preparedness Consortium Act of 2016</b></p> <p>This bill authorizes the Department of Homeland Security (DHS) to establish a National Cybersecurity Preparedness Consortium to engage academic, nonprofit, private industry, and federal, state, and local government partners to address cybersecurity risks and incidents, including threats or acts of terrorism. </p> <p>The consortium may:</p> <ul> <li>provide training to state and local first responders and officials, develop curriculums, and provide technical assistance;</li> <li>conduct cross-sector cybersecurity training and simulation exercises, including for state and local governments, critical infrastructure owners and operators, and private industry;</li> <li>coordinate with DHS's national cybersecurity and communications integration center to help states and communities develop cybersecurity information sharing programs; and </li> <li>assist in the incorporation of cybersecurity risk and incident prevention and response into existing state and local emergency plans. </li> </ul> <p>The consortium shall terminate five years after enactment of this Act.</p>

action_date: 2016-05-13
action_desc: Reported to House with amendment(s)
text: <p><b>National Cybersecurity Preparedness Consortium Act of 2016</b></p> <p>(Sec. 2) This bill authorizes the Department of Homeland Security (DHS) to work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents, including threats or acts of terrorism. </p> <p>Such a consortium must be composed primarily of nonprofit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.</p> <p>DHS may work with such a consortium to assist its national cybersecurity and communications integration center to:</p> <ul> <li>provide training to state and local first responders and officials, develop curriculums, and provide technical assistance;</li> <li>conduct cross-sector cybersecurity training and simulation exercises, including for state and local governments, critical infrastructure owners and operators, and private industry;</li> <li>help states and communities develop cybersecurity information sharing programs; and </li> <li>help incorporate cybersecurity risk and incident prevention and response into existing state and local emergency plans and continuity of operations plans. </li> </ul> <p> In selecting a consortium, DHS must consider: (1) any prior experience conducting cybersecurity training and exercises for state and local entities, and (2) the geographic diversity of its members to cover different regions across the United States.</p> <p>DHS must conduct outreach to universities and colleges regarding opportunities to support efforts to address cybersecurity risks and incidents. </p> <p>DHS's authority to carry out this bill terminates five years after its enactment.</p>

action_date: 2016-05-16
action_desc: Passed House amended
text: <p><b>National Cybersecurity Preparedness Consortium Act of 2016</b></p> <p>(Sec. 2) This bill authorizes the Department of Homeland Security (DHS) to work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents, including threats or acts of terrorism. </p> <p>Such a consortium must be composed primarily of nonprofit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.</p> <p>DHS may work with such a consortium to assist its national cybersecurity and communications integration center to:</p> <ul> <li>provide training to state and local first responders and officials, develop curriculums, and provide technical assistance;</li> <li>conduct cross-sector cybersecurity training and simulation exercises, including for state and local governments, critical infrastructure owners and operators, and private industry;</li> <li>help states and communities develop cybersecurity information sharing programs; and </li> <li>help incorporate cybersecurity risk and incident prevention and response into existing state and local emergency plans and continuity of operations plans. </li> </ul> <p> In selecting a consortium, DHS must consider: (1) any prior experience conducting cybersecurity training and exercises for state and local entities, and (2) the geographic diversity of its members to cover different regions across the United States.</p> <p>DHS must conduct outreach to universities and colleges regarding opportunities to support efforts to address cybersecurity risks and incidents. </p> <p>DHS's authority to carry out this bill terminates five years after its enactment.</p>

tv_txt: I 114th CONGRESS 2d Session H. R. 4743 IN THE HOUSE OF REPRESENTATIVES March 15, 2016 Mr. Castro of Texas (for himself, Mr. Richmond , Mr. Hurd of Texas , Mr. Doggett , Mr. Cuellar , Mr. Smith of Texas , and Mr. Welch ) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To authorize the Secretary of Homeland Security to establish a National Cybersecurity Preparedness Consortium, and for other purposes.

1. Short title This Act may be cited as the National Cybersecurity Preparedness Consortium Act of 2016 . 2. National Cybersecurity Preparedness Consortium (a) In general The Secretary of Homeland Security may establish a consortium to be known as the National Cybersecurity Preparedness Consortium (in this section referred to as the Consortium ). (b) Purpose The purpose of the Consortium is to engage a range of academic, nonprofit, private industry, and Federal, State, and local government partners to support efforts to address cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002), including threats of terrorism and acts of terrorism. (c) Functions The Consortium may— (1) provide training to State and local first responders and officials specifically for preparing for and responding to cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 )), including threats of terrorism and acts of terrorism, in accordance with current law; (2) develop and update a curriculum utilizing existing programs and models in accordance with section 227 of the Homeland Security Act of 2002, for State and local first responders and officials, related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; (3) provide technical assistance services to build and sustain capabilities in support of preparedness for and response to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with section 227 of the Homeland Security Act of 2002; (4) conduct cross-sector cybersecurity training and simulation exercises for entities, including State and local governments, critical infrastructure owners and operators, and private industry, to encourage community-wide coordination in defending against and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with subsection (c) of section 228 of the Homeland Security Act of 2002 ( 6 U.S.C. 149 ); (5) coordinate with the national cybersecurity and communications integration center of the Department of Homeland Security to help States and communities develop cybersecurity information sharing programs, in accordance with section 227 of the Homeland Security Act of 2002, for the dissemination of homeland security information related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; and (6) coordinate with appropriate Department of Homeland Security cybersecurity and training officials to assist in the incorporation of cybersecurity risk and incident prevention and response (including related to threats of terrorism and acts of terrorism) into existing State and local emergency plans. (d) Prohibition on duplication In carrying out the functions under subsection (c), the Consortium may not duplicate existing programs or efforts. (e) Membership The Consortium shall consist of academic, nonprofit, industry, and government partners that develop, update, and deliver cybersecurity training in support of homeland security. Members shall have prior experience conducting cybersecurity training and exercises for State and local entities and shall be geographically diverse so as to cover different regions across the United States. (f) Termination The Consortium shall terminate on the date that is five years after the date of the enactment of this Act.

tv_txt: I 114th CONGRESS 2d Session H. R. 4743 IN THE HOUSE OF REPRESENTATIVES AN ACT To authorize the Secretary of Homeland Security to work with cybersecurity consortia for training, and for other purposes.

1. Short title This Act may be cited as the National Cybersecurity Preparedness Consortium Act of 2016 . 2. National Cybersecurity Preparedness Consortium (a) In general The Secretary of Homeland Security may work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 )), including threats of terrorism and acts of terrorism. (b) Assistance to the NCCIC The Secretary of Homeland Security may work with a consortium to assist the national cybersecurity and communications integration center of the Department of Homeland Security (established pursuant to section 227 of the Homeland Security Act of 2002) to— (1) provide training to State and local first responders and officials specifically for preparing for and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with current law; (2) develop and update a curriculum utilizing existing programs and models in accordance with such section 227, for State and local first responders and officials, related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; (3) provide technical assistance services to build and sustain capabilities in support of preparedness for and response to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with such section 227; (4) conduct cross-sector cybersecurity training and simulation exercises for entities, including State and local governments, critical infrastructure owners and operators, and private industry, to encourage community-wide coordination in defending against and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with subsection (c) of section 228 of the Homeland Security Act of 2002 ( 6 U.S.C. 149 ); (5) help States and communities develop cybersecurity information sharing programs, in accordance with section 227 of the Homeland Security Act of 2002, for the dissemination of homeland security information related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; and (6) help incorporate cybersecurity risk and incident prevention and response (including related to threats of terrorism and acts of terrorism) into existing State and local emergency plans, including continuity of operations plans. (c) Prohibition on duplication In carrying out the functions under subsection (b), the Secretary of Homeland Security shall, to the greatest extent practicable, seek to prevent unnecessary duplication of existing programs or efforts of the Department of Homeland Security. (d) Considerations regarding selection of a consortium In selecting a consortium with which to work under this Act, the Secretary of Homeland Security shall take into consideration the following: (1) Any prior experience conducting cybersecurity training and exercises for State and local entities. (2) Geographic diversity of the members of any such consortium so as to cover different regions across the United States. (e) Metrics If the Secretary of Homeland Security works with a consortium pursuant to subsection (a), the Secretary shall measure the effectiveness of the activities undertaken by such consortium under this Act. (f) Outreach The Secretary of Homeland Security shall conduct outreach to universities and colleges, including historically Black colleges and universities, Hispanic-serving institutions, Tribal Colleges and Universities, and other minority-serving institutions, regarding opportunities to support efforts to address cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, by working with the Secretary pursuant to subsection (a). (g) Termination The authority to carry out this Act shall terminate on the date that is 5 years after the date of the enactment of this Act. (h) Consortium defined In this Act, the term consortium means a group primarily composed of non-profit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.

Passed the House of Representatives May 16, 2016. Karen L. Haas, Clerk.

tv_txt: IIB 114th CONGRESS 2d Session H. R. 4743 IN THE SENATE OF THE UNITED STATES May 17, 2016 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs AN ACT To authorize the Secretary of Homeland Security to work with cybersecurity consortia for training, and for other purposes.

1. Short title This Act may be cited as the National Cybersecurity Preparedness Consortium Act of 2016 . 2. National Cybersecurity Preparedness Consortium (a) In general The Secretary of Homeland Security may work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 )), including threats of terrorism and acts of terrorism. (b) Assistance to the NCCIC The Secretary of Homeland Security may work with a consortium to assist the national cybersecurity and communications integration center of the Department of Homeland Security (established pursuant to section 227 of the Homeland Security Act of 2002) to— (1) provide training to State and local first responders and officials specifically for preparing for and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with current law; (2) develop and update a curriculum utilizing existing programs and models in accordance with such section 227, for State and local first responders and officials, related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; (3) provide technical assistance services to build and sustain capabilities in support of preparedness for and response to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with such section 227; (4) conduct cross-sector cybersecurity training and simulation exercises for entities, including State and local governments, critical infrastructure owners and operators, and private industry, to encourage community-wide coordination in defending against and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with subsection (c) of section 228 of the Homeland Security Act of 2002 ( 6 U.S.C. 149 ); (5) help States and communities develop cybersecurity information sharing programs, in accordance with section 227 of the Homeland Security Act of 2002, for the dissemination of homeland security information related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; and (6) help incorporate cybersecurity risk and incident prevention and response (including related to threats of terrorism and acts of terrorism) into existing State and local emergency plans, including continuity of operations plans. (c) Prohibition on duplication In carrying out the functions under subsection (b), the Secretary of Homeland Security shall, to the greatest extent practicable, seek to prevent unnecessary duplication of existing programs or efforts of the Department of Homeland Security. (d) Considerations regarding selection of a consortium In selecting a consortium with which to work under this Act, the Secretary of Homeland Security shall take into consideration the following: (1) Any prior experience conducting cybersecurity training and exercises for State and local entities. (2) Geographic diversity of the members of any such consortium so as to cover different regions across the United States. (e) Metrics If the Secretary of Homeland Security works with a consortium pursuant to subsection (a), the Secretary shall measure the effectiveness of the activities undertaken by such consortium under this Act. (f) Outreach The Secretary of Homeland Security shall conduct outreach to universities and colleges, including historically Black colleges and universities, Hispanic-serving institutions, Tribal Colleges and Universities, and other minority-serving institutions, regarding opportunities to support efforts to address cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, by working with the Secretary pursuant to subsection (a). (g) Termination The authority to carry out this Act shall terminate on the date that is 5 years after the date of the enactment of this Act. (h) Consortium defined In this Act, the term consortium means a group primarily composed of non-profit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.

Passed the House of Representatives May 16, 2016. Karen L. Haas, Clerk

tv_txt: IB Union Calendar No. 438 114th CONGRESS 2d Session H. R. 4743 [Report No. 114–565] IN THE HOUSE OF REPRESENTATIVES March 15, 2016 Mr. Castro of Texas (for himself, Mr. Richmond , Mr. Hurd of Texas , Mr. Doggett , Mr. Cuellar , Mr. Smith of Texas , and Mr. Welch ) introduced the following bill; which was referred to the Committee on Homeland Security May 13, 2016 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed Strike out all after the enacting clause and insert the part printed in italic For text of introduced bill, see copy of bill as introduced on March 15, 2016 A BILL To authorize the Secretary of Homeland Security to establish a National Cybersecurity Preparedness Consortium, and for other purposes.

1. Short title This Act may be cited as the National Cybersecurity Preparedness Consortium Act of 2016 . 2. National Cybersecurity Preparedness Consortium (a) In general The Secretary of Homeland Security may work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 )), including threats of terrorism and acts of terrorism. (b) Assistance to the NCCIC The Secretary of Homeland Security may work with a consortium to assist the national cybersecurity and communications integration center of the Department of Homeland Security (established pursuant to section 227 of the Homeland Security Act of 2002) to— (1) provide training to State and local first responders and officials specifically for preparing for and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with current law; (2) develop and update a curriculum utilizing existing programs and models in accordance with such section 227, for State and local first responders and officials, related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; (3) provide technical assistance services to build and sustain capabilities in support of preparedness for and response to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with such section 227; (4) conduct cross-sector cybersecurity training and simulation exercises for entities, including State and local governments, critical infrastructure owners and operators, and private industry, to encourage community-wide coordination in defending against and responding to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, in accordance with subsection (c) of section 228 of the Homeland Security Act of 2002 ( 6 U.S.C. 149 ); (5) help States and communities develop cybersecurity information sharing programs, in accordance with section 227 of the Homeland Security Act of 2002, for the dissemination of homeland security information related to cybersecurity risks and incidents, including threats of terrorism and acts of terrorism; and (6) help incorporate cybersecurity risk and incident prevention and response (including related to threats of terrorism and acts of terrorism) into existing State and local emergency plans, including continuity of operations plans. (c) Prohibition on duplication In carrying out the functions under subsection (b), the Secretary of Homeland Security shall, to the greatest extent practicable, seek to prevent unnecessary duplication of existing programs or efforts of the Department of Homeland Security. (d) Considerations regarding selection of a consortium In selecting a consortium with which to work under this Act, the Secretary of Homeland Security shall take into consideration the following: (1) Any prior experience conducting cybersecurity training and exercises for State and local entities. (2) Geographic diversity of the members of any such consortium so as to cover different regions across the United States. (e) Metrics If the Secretary of Homeland Security works with a consortium pursuant to subsection (a), the Secretary shall measure the effectiveness of the activities undertaken by such consortium under this Act. (f) Outreach The Secretary of Homeland Security shall conduct outreach to universities and colleges, including historically Black colleges and universities, Hispanic-serving institutions, Tribal Colleges and Universities, and other minority-serving institutions, regarding opportunities to support efforts to address cybersecurity risks and incidents, including threats of terrorism and acts of terrorism, by working with the Secretary pursuant to subsection (a). (g) Termination The authority to carry out this Act shall terminate on the date that is five years after the date of the enactment of this Act. (h) Consortium defined In this Act, the term consortium means a group primarily composed of non-profit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.

May 13, 2016 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed