§665n Industrial Control Systems Cybersecurity Training Initiative

Summary

Creates an Industrial Control Systems Cybersecurity Training Initiative inside the Agency to build and strengthen skills for protecting industrial control systems. The Director must offer free virtual and in-person courses at different skill levels, including beginner classes. Courses must teach how to defend industrial control systems, the special threats those systems face, and how to fix security weaknesses. The Director must try to make trainings available in different U.S. regions. The Director must work with the Department of Energy National Laboratories under section 189, consult Sector Risk Management Agencies, consult private companies when needed, and, as much as possible, work with commercial trainers and schools so the training does not duplicate other programs. Not later than one year after December 23, 2022, and every year after, the Director must report to the House Committee on Homeland Security and the Senate Committee on Homeland Security and Governmental Affairs. Each report must describe the courses and outreach, give the number of participants and voluntary demographic information (sex, race, and residence), show participation by critical infrastructure sectors, explain plans to expand access (including to women and underrepresented groups and to more regions), and give recommendations to improve training.