H.R. 9918 — Enhancing K–12 Cybersecurity Act

This section directs the Director of the Cybersecurity and Infrastructure Security Agency to establish the School Cybersecurity Information Exchange, a publicly accessible website that disseminates cybersecurity best practices, training, and lessons learned tailored to K–12 schools. It requires the Director to maintain databases identifying federally funded cybersecurity tools and services as well as funding opportunities for elementary and secondary schools, local educational agencies, and state educational agencies, and to consult with the Secretary of Education, NIST, FCC, NSF, FBI, and specified state and local leaders.

This section establishes a voluntary registry, through partnerships with information sharing and analysis organizations, of cyber incidents affecting information technology systems of elementary schools, secondary schools, local educational agencies, state educational agencies, and educational service agencies. The Director of the Cybersecurity and Infrastructure Security Agency may collect incident dates, descriptions, effects, and other details for monitoring, trend analysis, prevention and response assistance, awareness, and investigation, and shall issue an annual de-identified aggregate report on school incidents through the School Cybersecurity Information Exchange.

This section establishes the K–12 Cybersecurity Technology Improvement Program within the Cybersecurity and Infrastructure Security Agency to deploy cybersecurity capabilities to elementary and secondary schools through partnerships with information sharing and analysis organizations. The program develops tailored strategies and tools, provides services to protect against ransomware and other threats, and offers training on cybersecurity best practices. It also requires the Director to publish an annual report on capabilities deployed, students served, and incidents identified or prevented on the School Cybersecurity Information Exchange.

This section defines educational service agency, elementary school, local educational agency, state educational agency, and secondary school by reference to the Elementary and Secondary Education Act of 1965, and information sharing and analysis organization by reference to the Homeland Security Act of 2002.