Cybersecurity Clinics Grant Program Act

The Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency, shall establish a program to be known as the Cybersecurity Clinics Grant Program (in this section referred to as the Program). Under the Program, the Secretary shall make grants to fund university-based cybersecurity clinics at junior or community colleges, historically Black colleges and universities (HBCUs), Hispanic-serving institutions (HSIs), and other minority-serving institutions to allow such colleges, universities, and institutions to—

(1) develop interactive, personalized workshops to provide education on the importance of protecting devices, data, and identity from physical and digital compromise;

(2) develop experiential cybersecurity curriculums to provide education relating to how to increase cybersecurity resilience in organizations and defend against digital threats;

(3) offer high-potential paths to increase the number of experienced cybersecurity professionals by creating a talent pipeline of students with practical experience, and appropriate certifications, interested in joining the cybersecurity workforce; and

(4) help civil society organizations, State and local government agencies, critical infrastructure providers, small and medium-sized businesses, and other under-represented and under-resourced public interest organizations to improve their cyber preparedness and cyber workforces.

Not later than two years after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency, shall coordinate with the Director of the National Institute of Standards and Technology (NIST) and the Consortium of Cybersecurity Clinics to publish, in tandem with existing curriculum published by NIST, the experiential cybersecurity curriculums developed pursuant to subsection (a)(2) to carry out the Program.

The Administrator of the Federal Emergency Management Agency shall administer the Program to ensure the implementation of cybersecurity clinics colleges, universities, and institutions referred to in subsection (a).

Not later than two years after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency, shall issue guidance regarding the development of experiential cybersecurity curriculums pursuant to paragraph (2) of subsection (a).

The Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency, and in consultation with the Administrator of the Federal Emergency Management Agency, shall annually submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report containing information on the following:

(1) The expenditure by each grant recipient of grant funds made under the Program.

(2) Program participation, including the number of graduating students entering the cyber workforce.

There is authorized to be appropriated such sums as may be necessary to carry out the Program.

In this section:

The term Hispanic-serving institution has the meaning given such term in section 502 of the Higher Education Act of 1965 (20 U.S.C. 1101a).

The term historically Black colleges and universities has the meaning given the term part B institution in section 322 of the Higher Education Act of 1965 (20 U.S.C. 1061).

The term institution of higher education has the meaning given such term in section 101 of the Higher Education Act of 1965 (20 U.S.C. 1001).

The term junior or community college has the meaning given such term in section 312(f) of the Higher Education Act of 1965 (20 U.S.C. 1058(f)).

The term minority-serving institution means an institution of higher education described in section 371(a) of the Higher Education Act of 1965 (20 U.S.C. 1067q(a)).