Enhancing K–12 Cybersecurity Act

This bill mandates the Director of the Cybersecurity and Infrastructure Security Agency (CISA) to establish a comprehensive K-12 Cybersecurity Technology Improvement Program. A core component is the creation of a School Cybersecurity Information Exchange, a publicly accessible website designed to disseminate tailored information, cybersecurity best practices, training, and lessons learned for elementary schools, secondary schools, and various educational agencies. This exchange will also feature databases for identifying federally funded and recommended cybersecurity tools, and for finding funding opportunities to enhance cybersecurity.

Furthermore, the legislation directs CISA to establish a voluntary Cybersecurity Incident Registry to collect information on cyber incidents affecting K-12 entities, enabling improved data collection, trend analysis, and the development of systematic prevention and response strategies. An annual de-identified report on these incidents will be made available through the Information Exchange. The bill also establishes the K-12 Cybersecurity Technology Improvement Program itself, which focuses on deploying cybersecurity capabilities, offering services to combat threats like ransomware, and providing training opportunities for schools. For these initiatives, $10,000,000 is authorized for appropriation for each of fiscal years 2027 and 2028.