§665n Industrial Control Systems Cybersecurity Training Initiative

Summary

Creates the Industrial Control Systems Cybersecurity Training Initiative inside the Agency to build and strengthen the cybersecurity skills needed to protect industrial control systems. The Director must provide free virtual and in-person courses at different skill levels, including beginner classes. Courses must teach cyber defense strategies, the special threats to industrial control systems, and how to fix their security weaknesses. The Director must work with the Department of Energy’s National Laboratories, consult Sector Risk Management Agencies, and consult private companies and academia as needed. The Director must also consult commercial training providers and schools to avoid repeating other training. Not later than one year after December 23, 2022, and annually after that, the Director must report to the House Committee on Homeland Security and the Senate Committee on Homeland Security and Governmental Affairs. Each report must describe the courses and outreach, list participant counts, include any voluntarily provided demographics (sex, race, and residence), show participation by critical infrastructure sectors, explain plans to expand access (including to women, underrepresented groups, and more regions), and give recommendations to improve industrial control systems cybersecurity training.