K-12 Cybersecurity Act of 2021

Madam Speaker, I move to suspend the rules and pass the bill (S. 1917) to establish a K-12 education cybersecurity initiative, and for other purposes.

Madam Speaker, I ask unanimous consent that all Members have 5 legislative days to revise and extend their remarks and to include extraneous material on this measure.

Madam Speaker, I yield myself such time as I may consume.

Madam Speaker, in the past few weeks, millions of students have returned to school across the country. The range of public health, safety, and security risks that schools face today is truly astounding.

In recent years, schools have increasingly been subjected to ransomware attacks where cybercriminals lock networks and demand ransom payments, sometimes while threatening to release sensitive information, including students' personal data.

According to the K-12 Cybersecurity Resource Center, in 2020 alone, there were over 480 publicly disclosed cyber incidents at schools in the United States, an 18 percent increase over the previous year.

Notably, the rate of such incidents increased in the second half of last year as COVID-19 forced schools to shift to virtual learning, creating new risks, such as the disruption of online classes and online school meetings.

The impacts of ransomware attacks on schools have included the cancellation of classes, the release of sensitive information, like the name of a 9-year-old student being evaluated for a disability, and costs as high as $7.7 million for Baltimore County schools to respond to and recover from a November 2020 attack.

With many schools still operating under virtual or hybrid conditions because of the ongoing COVID-19 pandemic, the vulnerabilities to such cyberattacks are even greater.

In December, the FBI Cybersecurity and Infrastructure Security Agency, or CISA, and the Multi-State Information Sharing and Analysis Center released a joint cybersecurity advisory to alert schools to the increase in cyber threats and provide best practices on how to reduce the risk of such incidents.

To further assist K-12 schools, we must do more to help schools guard against cyber threats.

S. 1917, the K-12 Cybersecurity Act, introduced by Senator Gary Peters from Michigan, requires CISA to conduct a study of the cybersecurity risks facing K-12 educational institutions and develop recommendations based on that study.

By developing an online training tool kit for schools, and making the study and recommendations publicly available, CISA will be able to provide schools with targeted information to better protect their networks and reduce their cybersecurity risk.

An identical version of this legislation was introduced in the House by the gentleman from Rhode Island (Mr. Langevin) and cosponsored by Representatives Matsui, Slotkin, Garbarino, and Clyde. The House measure was reported favorably by the Homeland Security Committee by voice vote in July.

Passing S. 1917 today would send this bill to the President for signature, allowing CISA to begin this important work to better secure our schools.

Mr. Speaker, I urge my colleagues to support this legislation, and I reserve the balance of my time.

Mr. Speaker, while we are in the process of getting the sponsor of this legislation prepared to give his comments, let me say that we all have been involved in making sure that our schools are as safe as possible. Clearly, this legislation, as offered by Senator Peters and Representative Langevin and others, is integral to making sure that our schools are kept as safe as possible from cyberattacks.

Mr. Speaker, I yield 3 minutes to the gentleman from Rhode Island (Mr. Langevin), the sponsor of the House version of this bill.

Mr. Speaker, I yield myself the balance of my time.

With sophisticated cybercriminals operating overseas launching ransomware attacks on our schools, it is essential that the Federal Government step up efforts to support the cybersecurity of our schools.

Without more assistance, many of our Nation's school districts will continue to be vulnerable, as many lack the cyber expertise to defend against these incidents.

Enactment of the K-12 Cybersecurity Act would enhance the technical support provided by CISA to schools to help better protect school IT networks.

Mr. Speaker, I urge my colleagues to support S. 1917, and I yield back the balance of my time.

Mr. Speaker, I thank the gentleman for yielding, and I commend the chairman for his strong leadership on cybersecurity issues and in support of this act before us today.

This bill, the House companion of which I sponsored with Representatives Matsui, Katko, and Garbarino, would help address a serious issue that has not received the attention it deserves: the cyber threats targeting our Nation's schools.

The education of our children is clearly a critical function, yet the increasing frequency and severity of cyber threats targeting K-12 schools have jeopardized the education of students across America.

In the past 4 years, more than 1,000 educational organizations across the country have fallen victim to cybercriminals. More than 400 incidents have occurred in the past year alone. What is more, an increasing proportion of these incidents are ransomware attacks that are particularly debilitating to the operation of our schools.

Our students and educators have experienced more than enough disruption in the past year and a half. We cannot afford to let this issue continue to go unaddressed.

Many of our schools do not have the resources to counter the cyber threats that we face. Without assistance, this problem will continue to get worse, jeopardizing our students' privacy and ability to learn.

Fortunately, this Congress has already demonstrated a recognition of the government's need to provide cybersecurity assistance to entities that perform essential functions yet live below the cybersecurity poverty line, unable to defend themselves against the myriad threats they face.

It is why we took steps to invest $50 million in support for State and local government entities as part of the forthcoming reconciliation bill.

It is also why I fought to increase the budget of the Cybersecurity and Infrastructure Security Agency by more than $400 million earlier this year. I thank Chairwoman Roybal-Allard for her leadership, and I thank her team and the members of the Appropriations Committee, along with Chairman Thompson and his team and the members of the Homeland Security Committee.

It should also be the reason that we pass the K-12 Cybersecurity Act into law without delay.

This bill would direct the Cybersecurity and Infrastructure Security Agency to study the cybersecurity risks facing our elementary schools and secondary schools.

With a detailed understanding of the specific cybersecurity challenges facing our schools, including challenges raised by remote learning, CISA would then be required to develop cybersecurity recommendations and online training tools for educational officials at K-12 institutions. Our educators and administrators would be equipped with the knowledge they need to better defend themselves against cyber threats and keep our schools safe for our students.

Mr. Speaker, I thank Representative Matsui for her tireless attention to this issue and Representatives Garbarino, Slotkin, and Clyde for joining us in advancing this legislation. I recognize the efforts of my colleagues in the Senate, Senator Peters and Senator Scott, who deftly shepherded this bill through their Chamber. Finally, I recognize my good friend, Chairman Bennie Thompson, for ensuring this bill received the consideration it deserves.

Mr. Speaker, I urge my colleagues to support this important legislation.

Mr. Speaker, I yield myself such time as I may consume.

I rise today in support of S. 1917, the K-12 Cybersecurity Act of 2021.

Schools around our country are increasingly the target of malicious cyber actors and have recently been targeted with a deluge of ransomware attacks.

This legislation introduced by Chairman Peters and passed by the Senate mirrors the House version spearheaded by Representatives Langevin, Garbarino, and Matsui.

This bill requires CISA to conduct a study to develop recommendations and provide resources regarding specific cybersecurity risks facing K- 12 educational institutions. Importantly, it requires CISA to do so in consultation with teachers, schools, administrators, Federal agencies, nine Federal cybersecurity entities, and other private-sector organizations.

In doing so, the study required by this bill would help the Federal Government better support schools in defending against cyber threats.

I urge Members to join me in supporting S. 1917, and I reserve the balance of my time.

Mr. Speaker, I urge all Members to support this bill, and I yield back the balance of my time.

Madam President, I ask unanimous consent that the Senate proceed to the immediate consideration of Calendar No. 107, S. 1917.

Madam President, I ask unanimous consent that the bill be considered read a third time and passed and the motion to reconsider be considered made and laid upon the table.