§665n Industrial Control Systems Cybersecurity Training Initiative

Summary

Sets up an Industrial Control Systems Cybersecurity Training Initiative inside the Agency to train and strengthen the cybersecurity workforce that protects industrial control systems. The Director must run the Initiative and make sure it offers free virtual and in-person courses at different skill levels, including beginner classes. Courses must teach cyber defense for industrial control systems, the types of threats those systems face, and how to fix security weaknesses. The Director must also consider offering courses in different U.S. regions and must work with the Department of Energy’s National Laboratories under section 189, talk with Sector Risk Management Agencies, consult private companies with relevant expertise, and, as much as possible, work with commercial training providers and colleges to avoid duplicating other training. No later than one year after December 23, 2022, and every year after that, the Director must send a report to the House Committee on Homeland Security and the Senate Committee on Homeland Security and Governmental Affairs. Each report must describe the courses and outreach efforts, give the number of participants, include voluntary demographic information (sex, race, and place of residence), show participation by each critical infrastructure sector, outline plans to expand access (including to women, underrepresented groups, and other regions), and provide recommendations to strengthen industrial control systems cybersecurity education and training.