President’s Cup Cybersecurity Competition Act

Bill: 117-hr-6824
Sponsor: full_name: Rep. Luria, Elaine G. [D-VA-2]
Introduced: 2022-02-25
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft

Congressional oversight

Government employee pay, benefits, personnel management

Public-private cooperation
Latest action: action_date: 2022-12-19
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 679.

Summaries:
action_date: 2022-02-25
action_desc: Introduced in House
text: <p><strong>President's Cup Cybersecurity Competition Act</strong></p> <p>This bill authorizes an annual competition to award prizes, including cash prizes, to U.S. government cybersecurity employees and teams.</p> <p>In designing the competition, the Cybersecurity and Infrastructure Security Agency (CISA) may consult, subject to some restrictions, with individuals or entities with expertise in developing or executing cybersecurity competitions. Additionally, CISA may enter into a grant, contract, or cooperative agreement with a nonprofit, a for-profit entity, or a state or local agency to administer the competition.</p> <p>The bill also specifies that funding for the competition may consist of congressional appropriations, as well as amounts provided by other federal agencies, states, territories, Indian tribes, nonprofits, and for-profit entities.</p>

action_date: 2022-05-13
action_desc: Reported to House
text: <p><strong>President's Cup Cybersecurity Competition Act</strong></p> <p>This bill authorizes an annual competition to award prizes, including cash prizes, to U.S. government cybersecurity employees and teams.</p> <p>In designing the competition, the Cybersecurity and Infrastructure Security Agency (CISA) may consult, subject to some restrictions, with individuals or entities with expertise in developing or executing cybersecurity competitions. Additionally, CISA may enter into a grant, contract, or cooperative agreement with a nonprofit, a for-profit entity, or a state or local agency to administer the competition.</p> <p>The bill also specifies that funding for the competition may consist of amounts appropriated by Congress for the competition, as well as amounts provided by other federal agencies.</p>

action_date: 2022-05-16
action_desc: Passed House
text: <p><strong>President's Cup Cybersecurity Competition Act</strong></p> <p>This bill authorizes an annual competition to award prizes, including cash prizes, to U.S. government cybersecurity employees and teams.</p> <p>In designing the competition, the Cybersecurity and Infrastructure Security Agency (CISA) may consult, subject to some restrictions, with individuals or entities with expertise in developing or executing cybersecurity competitions. Additionally, CISA may enter into a grant, contract, or cooperative agreement with a nonprofit, a for-profit entity, or a state or local agency to administer the competition.</p>

action_date: 2022-12-19
action_desc: Reported to Senate
text: <p><strong>President's Cup Cybersecurity Competition Act</strong></p> <p>This bill authorizes an annual competition to award prizes, including cash prizes, to U.S. government cybersecurity employees and teams.</p> <p>To carry out the competition, the Cybersecurity and Infrastructure Security Agency may enter into a grant, contract, or cooperative agreement with a nonprofit, a for-profit entity, or a state or local agency to administer the competition.</p>

tv_txt: I 117th CONGRESS 2d Session H. R. 6824 IN THE HOUSE OF REPRESENTATIVES February 25, 2022 Mrs. Luria (for herself and Mr. Connolly ) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s Cup Cybersecurity Competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (referred to in this section as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines. (b) Competition design (1) In general Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions. (2) Limitation The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section. (3) Prohibition A person with whom the Director consults under paragraph (1) may not— (A) receive pay by reason of being so consulted; or (B) be considered an employee of the Federal Government by reason of so consulting. (c) Eligibility To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (d) Competition administration The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (e) Funding (1) In general Support for the competition, including financial support for the design and administration of the competition or funds for a cash prize, may consist of— (A) amounts appropriated pursuant to appropriations Acts or otherwise made available for such purpose; and (B) in accordance with paragraph (2), funds provided by other Federal agencies, States, United States territories, local governments, federally recognized Tribal governments, or private sector for-profit or nonprofit entities. (2) Request The Director may request and accept funds from other Federal agencies, States, United States territories, local governments, federally recognized Tribal governments, and private sector for-profit and nonprofit entities. (3) Obligation and expenditure Funds accepted pursuant to paragraph (2) shall be credited to, and in addition to, any amounts appropriated or otherwise made available pursuant to paragraph (1)(A) to carry out this section, and the Secretary of Homeland Security, acting through the Director, may obligate and expend such funds for such purpose— (A) without regard to specific authorization relating thereto provided in advance in an appropriations Act; and (B) not subject to any condition or purpose relating thereto specified in such appropriations Act. (f) Use of funds Notwithstanding any other provision of law, the Director may use funds available for carrying out the competition authorized under this section for the following: (1) Advertising, marketing, and promoting the competition. (2) Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition. (3) Promotional items, including merchandise and apparel. (4) Monetary and nonmonetary awards for competition participants, including members of the uniformed services. (5) Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services. (6) Any other appropriate activity necessary to carry out the competition, as determined by the Director. (g) Prize limitation The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient.

tv_txt: I 117th CONGRESS 2d Session H. R. 6824 IN THE HOUSE OF REPRESENTATIVES AN ACT To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s cup cybersecurity competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (in this section referred to as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines. (b) Competition design (1) In general Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions. (2) Limitation The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section. (3) Prohibition A person with whom the Director consults under paragraph (1) may not— (A) receive pay by reason of being so consulted; or (B) be considered an employee of the Federal Government by reason of so consulting. (c) Eligibility To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (d) Competition administration The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (e) Competition parameters Each competition shall incorporate the following elements: (1) Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework. (2) Individual and team events. (3) Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems. (4) Any other elements related to paragraphs (1), (2), or (3) as determined necessary by the Director. (f) Use of funds (1) In general Notwithstanding any other provision of law, the Director may use amounts made available to the Director for the competition for the following: (A) Advertising, marketing, and promoting the competition. (B) Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition. (C) Promotional items, including merchandise and apparel. (D) Monetary and nonmonetary awards for competition participants, including members of the uniformed services. (E) Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services. (F) Any other appropriate activity necessary to carry out the competition, as determined by the Director. (2) Application This subsection shall apply to amounts appropriated on or after the date of the enactment of this Act. (g) Prize limitation The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient. (h) Reporting requirements The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) A description of available funds under subsection (f) for each competition conducted in the preceding year. (2) A description of expenditures authorized in subsection (g) for each competition. (3) Information relating to the participation of each competition. (4) Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

Passed the House of Representatives May 16, 2022. Cheryl L. Johnson, Clerk.

tv_txt: IB Union Calendar No. 243 117th CONGRESS 2d Session H. R. 6824 [Report No. 117–324] IN THE HOUSE OF REPRESENTATIVES February 25, 2022 Mrs. Luria (for herself and Mr. Connolly ) introduced the following bill; which was referred to the Committee on Homeland Security May 13, 2022 Additional sponsor: Mr. Garbarino May 13, 2022 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed Strike out all after the enacting clause and insert the part printed in italic For text of introduced bill, see copy of bill as introduced on February 25, 2022 A BILL To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s Cup Cybersecurity Competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (referred to in this section as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines. (b) Competition design (1) In general Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions. (2) Limitation The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section. (3) Prohibition A person with whom the Director consults under paragraph (1) may not— (A) receive pay by reason of being so consulted; or (B) be considered an employee of the Federal Government by reason of so consulting. (c) Eligibility To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (d) Competition administration The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (e) Competition parameters Each competition shall incorporate the following elements: (1) Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework. (2) Individual and team events. (3) Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems. (4) Any other elements related to paragraphs (1), (2), or (3) as determined necessary by the Director. (f) Funding Support for the competition, including financial support for the design and administration of the competition or funds for a cash prize, may consist of— (1) amounts appropriated pursuant to appropriations Acts or otherwise made available for such purpose; and (2) funds provided by other Federal agencies, which— (A) shall be credited to, and in addition to, any amounts appropriated or otherwise made available pursuant to paragraph (1) to carry out this section; and (B) may be obligated and expended for such purpose by the Secretary of the Homeland Security, acting through the Director. (g) Use of funds Notwithstanding any other provision of law, the Director may use funds available for carrying out the competition authorized under this section for the following: (1) Advertising, marketing, and promoting the competition. (2) Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition. (3) Promotional items, including merchandise and apparel. (4) Monetary and nonmonetary awards for competition participants, including members of the uniformed services. (5) Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services. (6) Any other appropriate activity necessary to carry out the competition, as determined by the Director. (h) Prize limitation The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient. (i) Reporting requirements The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) A description of available funds under subsection (f) for each competition conducted in the preceding year. (2) A description of expenditures authorized in subsection (g) for each competition. (3) Information relating to the participation of each competition. (4) Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

May 13, 2022 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

tv_txt: IIB 117th CONGRESS 2d Session H. R. 6824 IN THE SENATE OF THE UNITED STATES May 17, 2022 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs AN ACT To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s cup cybersecurity competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (in this section referred to as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines. (b) Competition design (1) In general Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions. (2) Limitation The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section. (3) Prohibition A person with whom the Director consults under paragraph (1) may not— (A) receive pay by reason of being so consulted; or (B) be considered an employee of the Federal Government by reason of so consulting. (c) Eligibility To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (d) Competition administration The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (e) Competition parameters Each competition shall incorporate the following elements: (1) Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework. (2) Individual and team events. (3) Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems. (4) Any other elements related to paragraphs (1), (2), or (3) as determined necessary by the Director. (f) Use of funds (1) In general Notwithstanding any other provision of law, the Director may use amounts made available to the Director for the competition for the following: (A) Advertising, marketing, and promoting the competition. (B) Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition. (C) Promotional items, including merchandise and apparel. (D) Monetary and nonmonetary awards for competition participants, including members of the uniformed services. (E) Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services. (F) Any other appropriate activity necessary to carry out the competition, as determined by the Director. (2) Application This subsection shall apply to amounts appropriated on or after the date of the enactment of this Act. (g) Prize limitation The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient. (h) Reporting requirements The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) A description of available funds under subsection (f) for each competition conducted in the preceding year. (2) A description of expenditures authorized in subsection (g) for each competition. (3) Information relating to the participation of each competition. (4) Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

Passed the House of Representatives May 16, 2022. Cheryl L. Johnson, Clerk.

tv_txt: II Calendar No. 679 117th CONGRESS 2d Session H. R. 6824 [Report No. 117–280] IN THE SENATE OF THE UNITED STATES May 17, 2022 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs December 19, 2022 Reported by Mr. Peters , with an amendment Strike out all after the enacting clause and insert the part printed in italic AN ACT To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s cup cybersecurity competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (in this section referred to as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines. (b) Competition design (1) In general Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions. (2) Limitation The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section. (3) Prohibition A person with whom the Director consults under paragraph (1) may not— (A) receive pay by reason of being so consulted; or (B) be considered an employee of the Federal Government by reason of so consulting. (c) Eligibility To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (d) Competition administration The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (e) Competition parameters Each competition shall incorporate the following elements: (1) Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework. (2) Individual and team events. (3) Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems. (4) Any other elements related to paragraphs (1), (2), or (3) as determined necessary by the Director. (f) Use of funds (1) In general Notwithstanding any other provision of law, the Director may use amounts made available to the Director for the competition for the following: (A) Advertising, marketing, and promoting the competition. (B) Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition. (C) Promotional items, including merchandise and apparel. (D) Monetary and nonmonetary awards for competition participants, including members of the uniformed services. (E) Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services. (F) Any other appropriate activity necessary to carry out the competition, as determined by the Director. (2) Application This subsection shall apply to amounts appropriated on or after the date of the enactment of this Act. (g) Prize limitation The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient. (h) Reporting requirements The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) A description of available funds under subsection (f) for each competition conducted in the preceding year. (2) A description of expenditures authorized in subsection (g) for each competition. (3) Information relating to the participation of each competition. (4) Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

1. Short title This Act may be cited as the President’s Cup Cybersecurity Competition Act . 2. President’s cup cybersecurity competition (a) In general The Director of the Cybersecurity and Infrastructure Security Agency (in this section referred to as the Director ) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition ) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the best cybersecurity practitioners and teams of the United States Government across offensive and defensive cybersecurity disciplines. (b) Eligibility To be eligible to participate in the competition, an individual shall be a Federal employee in a position of civil service or a member of the uniformed services (as such terms are defined in section 2101 of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition. (c) Competition administration The Director may award a grant to, or enter into a contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition. (d) Competition parameters Each competition shall incorporate the following elements: (1) Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework. (2) Individual and team events. (3) Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems. (4) Any other elements related to paragraph (1), (2), or (3) as determined necessary by the Director. (e) Use of funds (1) In general In order to further the goals and objectives of the competition, the Director may use amounts made available to the Director for the competition for reasonable expenses for— (A) advertising, marketing, and promoting the competition; (B) meals for participants in and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition; (C) promotional items, including merchandise and apparel; (D) consistent with section 4503 of title 5, United States Code, necessary expenses for the honorary recognition of competition participants, including members of the uniformed services, as defined in section 2101(3) of title 5, United States Code; and (E) subject to subsection (f), monetary and nonmonetary awards for competition participants, including members of the uniformed services. (2) Application This subsection shall apply to amounts appropriated on or after the date of enactment of this Act. (f) Prize limitation (1) Awards by the Director The Director may make 1 or more awards per competition in an amount or value not to exceed $10,000 per award. (2) Awards by the Secretary of Homeland Security The Secretary of Homeland Security may make 1 or more awards per competition in an amount or value not to exceed $25,000 per award. (3) Regular pay A monetary award under this section shall be in addition to the regular pay of the recipient. (4) Overall yearly award limit The total amount or value of awards made under this Act during a fiscal year may not exceed $100,000. (g) Reporting requirements The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) A description of funds used for expenses described in subsection (e)(1) for each competition conducted in the preceding fiscal year. (2) A description of awards authorized in subsection (f) for each competition. (3) Information relating to the participation in each competition. (4) Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

December 19, 2022 Reported with an amendment