S 1917 — K-12 Cybersecurity Act of 2021

[Congressional[117th BillsCongress 117thPublic Congress]Law 47] [From the U.S.

Government Publishing Office] [S.[[Page 135 STAT.

1917397]] EngrossedPublic inLaw Senate117-47 (ES)]117th <DOC>Congress 117thAn CONGRESSAct 1stTo Sessionestablish S.a K-12 education cybersecurity initiative, and for other purposes.

1917<<NOTE: _______________________________________________________________________ AN ACT To establish a K-12 education cybersecurity initiative, and for other purposes.

BeOct. it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1.

8, 2021 - [S.

1917]>> Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, <<NOTE:

K-12 Cybersecurity Act of 2021.

6 USC 652 note.>> SECTION 1.

(b) Study.--<<NOTE: (1) In general.--Not later than 120 days after the date of enactment of this Act, the Director, in accordance with subsection (g)(1), shall conduct a study on the specific cybersecurity risks facing K-12 educational institutions that-- (A) analyzes how identified cybersecurity risks specifically impact K-12 educational institutions;

(B)Deadlines.>> includesStudy.-- an(1) evaluation<<NOTE: of the challenges K-12 educational institutions face in-- (i) securing-- (I) information systems owned, leased, or relied upon by K-12 educational institutions;

Evaluations.>> In general.--Not later than 120 days after the date of enactment of this Act, the Director, in accordance with subsection (g)(1), shall conduct a study on the specific cybersecurity risks facing K-12 educational institutions that-- (A) <<NOTE:

Analysis.>> analyzes how identified cybersecurity risks specifically impact K-12 educational institutions;

[[Page 135 STAT.

398]] (B) includes an evaluation of the challenges K-12 educational institutions face in-- (i) securing-- (I) information systems owned, leased, or relied upon by K-12 educational institutions;

(c) Cybersecurity<<NOTE: Recommendations.--Not later than 60 days after the completion of the study required under subsection (b)(1), the Director, in accordance with subsection (g)(1), shall develop recommendations that include cybersecurity guidelines designed to assist K-12 educational institutions in facing the cybersecurity risks described in subsection (b)(1), using the findings of the study.

(d)Deadline. Online Training Toolkit.--Not later than 120 days after the completion of the development of the recommendations required under subsection (c), the Director shall develop an online training toolkit designed for officials at K-12 educational institutions to-- (1) educate the officials about the cybersecurity recommendations developed under subsection (c);

andGuidelines.>> (2)Cybersecurity provideRecommendations.--Not strategieslater forthan 60 days after the officialscompletion toof implementthe study required under subsection (b)(1), the Director, in accordance with subsection (g)(1), shall develop recommendations developedthat underinclude cybersecurity guidelines designed to assist K-12 educational institutions in facing the cybersecurity risks described in subsection (c).(b)(1), using the findings of the study.

(e)(d) Public<<NOTE: Availability.--The Director shall make available on the website of the Department of Homeland Security with other information relating to school safety the following:

Deadline.>> Online Training Toolkit.--Not later than 120 days after the completion of the development of the recommendations required under subsection (c), the Director shall develop an online training toolkit designed for officials at K-12 educational institutions to-- (1) educate the officials about the cybersecurity recommendations developed under subsection (c);

and (2) <<NOTE:

Strategy.>> provide strategies for the officials to implement the recommendations developed under subsection (c).

(e) <<NOTE:

Web posting.>> Public Availability.--The Director shall make available on the website of the Department of Homeland Security with other information relating to school safety the following:

(2)[[Page Inapplicability135 ofSTAT. faca.--The Federal Advisory Committee Act (5 U.S.C App.) shall not apply to any consultation under paragraph (1).

Passed399]] the(2) SenateInapplicability Augustof 9,faca.--The 2021.Federal Advisory Committee Act (5 U.S.C App.) shall not apply to any consultation under paragraph (1).

Attest:Approved October 8, 2021.

Secretary.LEGISLATIVE HISTORY--S.

117th1917 CONGRESS(H.R. 1st Session S.

19174691): _______________________________________________________________________ AN ACT To establish a K-12 education cybersecurity initiative, and for other purposes.

--------------------------------------------------------------------------- HOUSE REPORTS:

No.

117-122 (Comm.

on Homeland Security) accompanying H.R.

4691.

SENATE REPORTS:

No.

117-32 (Comm.

on Homeland Security and Governmental Affairs).

CONGRESSIONAL RECORD, Vol.