HB 319 — AN ACT relating to the KentuckyCYBER Program and making an appropriation therefor.

UNOFFICIAL COPY 24 RS BRHB 296319/GA AN ACT relating to the KentuckyCYBER Program and making an appropriation therefor.

(a) "Board" means the KentuckyCYBER Governing Board established in Section 2 of this Act;

(d) "Participating institution" means an institution within the postsecondary education system or an institution licensed by the council that chooses to participate in the KentuckyCYBER program;Program;

(a) CreateFacilitate cooperation among Kentucky public and private universities, public elementary and secondary schools, and businesses to create a network of cyber centers across theKentucky Commonwealth;and strengthen and grow Kentucky's cybersecurity workforce, including identifying potential nonacademic, industry-based credentialing and training programs to complement academic programs;

(b)Page Facilitate1 cooperationof among5 KentuckyHB031910.100 public- universities,296 public- elementaryXXXX and2/29/2024 secondary3:03 educationPM facilities,GA UNOFFICIAL COPY 24 RS HB 319/GA (b) Provide educational and businessesprofessional development opportunities to createstate aand local agencies and private sector participants about how to maintain secure cyberinfrastructure;

(c) EducateEngage statemilitary, andlaw localenforcement, agencieseducational andinstitutions, private sector participantscompanies, aboutand state, federal, and local governments, on how to maintainbest securedevelop cyberinfrastructure;and support Kentucky's cybersecurity ecosystem;

and Page 1 of 4 XXXX 12/22/2023 4:23 PM Jacketed UNOFFICIAL COPY 24 RS BR 296 (d) AccelerateProvide thenonpartisan adoption of cybersecurity systemsadvice in the state by combining the assets of higher education, state and federalrecommendations agencies,to andKentucky privatepolicymakers; companies.

(4)and The(e) councilAccelerate shallthe determineadoption of cybersecurity systems in the terms,state conditions,by andcombining requirementsthe forassets applicationsof submittedhigher undereducation, Sectionstate 3and offederal thisagencies, Act.and private sector companies.

(4) With advice from the board, the council shall adopt the terms, conditions, and requirements of applications submitted for grants awarded under Section 3 of this Act.

(1) The KentuckyCYBER Governing Board is hereby created and attached to the council.

(2) The board shall be composed ofof: the president or designee of any participating institution.

A(a) postsecondaryThe educationcommissioner systemfor that chooses to participate in the programDepartment shall submit a letter of intentEducation toor thedesignee; president of the council and tender a copy of the letter to the Legislative Research Commission.

(b) The adjunct general for the Kentucky Department of Military Affairs or designee;

(c) The executive director for the Kentucky Office of Homeland Security or designee;

Page 2 of 5 HB031910.100 - 296 - XXXX 2/29/2024 3:03 PM GA UNOFFICIAL COPY 24 RS HB 319/GA (d) The president of the Council on Postsecondary Education or designee;

(e) The president for the Association of Independent Kentucky Colleges or designee;

and (f) The president of any participating institution or designee.

(5) TheGrants dutiesfrom ofthe everyKentuckyCYBER fund shall be made available to participating institutioninstitutions shallbased includeon butthe notcriteria beadopted limitedby to:the council with advice from the board.

(a)Eligible Traininggrant-funded andprograms upskilling a workforce to provide cybersecurity solutions for Kentucky businesses, state and localactivities government,shall andinclude federal,but state,not andbe locallimited lawto: enforcement;

Page(a) 2Training ofand 4upskilling XXXXa 12/22/2023workforce 4:23to PMprovide Jacketed UNOFFICIAL COPY 24 RS BR 296 (b) Providing cybersecurity resources,solutions includingfor butKentucky notbusinesses, limited to cyber ranges and incident response teams, to assist state and local government,governments, majorand economicfederal, sectorsstate, including healthcare and manufacturing,local andlaw criticalenforcement; infrastructure systems operators throughout Kentucky;

(b) Providing cybersecurity resources, including but not limited to cyber ranges and incident response teams, to assist state and local governments, major economic sectors including healthcare and manufacturing, and critical infrastructure systems operators throughout Kentucky;

(d) Creating a cyber-innovation ecosystem for the state and federal government, law enforcement, the private sector, and K-12 and higher education institutions to innovate rapidly and strengthen Kentucky’s cybersecurity defenses with a qualified workforce;

(e) Establishing cybersecurity research centers and provide(e) supportBuilding to build the research capacity necessary to successfully compete for Page 3 of 5 HB031910.100 - 296 - XXXX 2/29/2024 3:03 PM GA UNOFFICIAL COPY 24 RS HB 319/GA projects funded by the federal government and private industry participants;participants.

and(6) (f)Nothing Providingin nonpartisanSections cybersecurity1 adviceto and3 recommendationsof this Act shall require any postsecondary education system institution or private institution not participating in the KentuckyCYBER Program to Kentuckycooperate policymakers.with the board in carrying out the programs or activities prescribed in subsection (5) of this section.

(6) Nothing in this section shall require any postsecondary education system institution not participating in the KentuckyCYBER Program to cooperate with the board in carrying out the provisions of subsection (5) of this section.

Any allocationsgrants madeawarded to a participating institution from this fund shall be excluded from the comprehensive funding model established in KRS 164.092.

Page 3 of 4 XXXX 12/22/2023 4:23 PM Jacketed UNOFFICIAL COPY 24 RS BR 296 (3) Amounts deposited in the fund shall be allocated based on the application by a participating institution to the council and subject to approval by the board.

(7) Any state or federal funds appropriated or other moniesmoneys granted to a participating institution for enhancement of other cyber security programs shall not be subject to the provisions of this section.

(8) The implementation of the KentuckyCYBER Program is contingent upon the Page 4 of 45 HB031910.100 - 296 - XXXX 12/22/20232/29/2024 4:233:03 PM JacketedGA UNOFFICIAL COPY 24 RS HB 319/GA availability of funds specifically allocated for such purpose through the KentuckyCYBER fund.

HB031910.100 - 296 - XXXX 2/29/2024 3:03 PMof 5 GA