S.Amdt. 2686

1. Adds SEC. 416. SENSE OF CONGRESS at the end of title IV

   Adds a section

   In S. 3414 · Placed on Calendar Senate

   (4) any public actions commenced by the Commission relating to the enforcement of disclosure requirements pertaining to the information security risks and related events.

   Inserted: SEC. 416. SENSE OF CONGRESS.

   Inserted: (a) Findings.--Congress finds the following:

   Inserted: (1) A report from the Bipartisan Policy Center's Cyber Security Task Force, published in July 2012, found that--

   Inserted: (A) 50,000 cyber attacks were reported to the Department of Homeland Security between October 2011 and February 2012; and

   Inserted: (B) 86 of the attacks described in subparagraph (A) took place on critical infrastructure networks.

   Inserted: (2) The report of the Commission on Cybersecurity for the 44th President from the Center for Strategic and International Studies (referred to in this subsection as "CSIS"), published in November 2010, concluded that the United States is facing an imminent crisis in cybersecurity human capital.

   Inserted: (3) The November 2010 CSIS report cited another CSIS report, entitled "A Human Capital Crisis in Cybersecurity", which estimated that 1,000 specialists who had the specialized cybersecurity skills needed to defend the United States effectively in cyberspace existed in the United States, but the number of cybersecurity specialists needed that year was between 10,000 and 30,000.

   Inserted: (4) Another report published by CSIS, entitled "Cybersecurity Two Years Later", noted that "there has been slow progress in changing the situation from where we were two years ago".

   Inserted: (b) Sense of Congress.--It is the sense of Congress that, recognizing that the United States is currently facing a human capital crisis in cybersecurity, the President should--

   Inserted: (1) develop model standards, in coordination with any existing standards, for nonprofit institutions that provide training programs to develop advanced technical proficiency for individuals seeking careers in computer network defense;

   Inserted: (2) emphasize experiential learning and the opportunity to take on significant real-world casework as essential parts of training and development programs for cybersecurity professions;

   Inserted: (3) recognize institutions which develop advanced technical proficiency and provide real-world casework for individuals seeking careers in computer network defense as examples of excellence in specialized cybersecurity training;

   Show 6 more inserted paragraphsShow less

   Inserted: (4) employ resources to support nonprofit institutions to expand the cybersecurity human capital capacity of the United States, particularly by supporting or establishing education and training programs which--

   Inserted: (A) demonstrate current and projected caseload of sufficient, important system and network defense activity to provide real-world training opportunities for trainees, with a heavy emphasis on real-life, hands-on, high-level cybersecurity work;

   Inserted: (B) demonstrate practical computer network defense skills and up-to-date cybersecurity experience of the senior staff proposing to lead the education and training programs;

   Inserted: (C) demonstrate access to hands-on training programs in the most up-to-date computer network defense technologies and techniques; and

   Inserted: (D) collaborate with the Federal Government and private sector companies in the United States in such programs; and

   Inserted: (5) establish a program recognizing citizens who have demonstrated outstanding leadership and service as mentors in the field of cybersecurity.

   Original wording

   At the end of title IV, insert the following:

Read automatically from the Congressional Record. Check the original before relying on it.

As printed