skip to main content

H.R. 6824: President’s Cup Cybersecurity Competition Act


The text of the bill below is as of May 13, 2022 (Reported by House Committee).


IB

Union Calendar No. 243

117th CONGRESS

2d Session

H. R. 6824

[Report No. 117–324]

IN THE HOUSE OF REPRESENTATIVES

February 25, 2022

(for herself and Mr. Connolly) introduced the following bill; which was referred to the Committee on Homeland Security

May 13, 2022

Additional sponsor: Mr. Garbarino

May 13, 2022

Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

Strike out all after the enacting clause and insert the part printed in italic

For text of introduced bill, see copy of bill as introduced on February 25, 2022


A BILL

To authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to hold an annual cybersecurity competition relating to offensive and defensive cybersecurity disciplines, and for other purposes.


1.

Short title

This Act may be cited as the President’s Cup Cybersecurity Competition Act.

2.

President’s Cup Cybersecurity Competition

(a)

In general

The Director of the Cybersecurity and Infrastructure Security Agency (referred to in this section as the Director) of the Department of Homeland Security is authorized to hold an annual cybersecurity competition to be known as the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s President’s Cup Cybersecurity Competition (in this section referred to as the competition) for the purpose of identifying, challenging, and competitively awarding prizes, including cash prizes, to the United States Government’s best cybersecurity practitioners and teams across offensive and defensive cybersecurity disciplines.

(b)

Competition design

(1)

In general

Notwithstanding section 1342 of title 31, United States Code, the Director, in carrying out the competition, may consult with, and consider advice from, any person who has experience or expertise in the development, design, or execution of cybersecurity competitions.

(2)

Limitation

The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to consultations pursuant to this section.

(3)

Prohibition

A person with whom the Director consults under paragraph (1) may not—

(A)

receive pay by reason of being so consulted; or

(B)

be considered an employee of the Federal Government by reason of so consulting.

(c)

Eligibility

To be eligible to participate in the competition, an individual shall be a Federal civilian employee or member of the uniformed services (as such term is defined in section 2101(3) of title 5, United States Code) and shall comply with any rules promulgated by the Director regarding the competition.

(d)

Competition administration

The Director may enter into a grant, contract, cooperative agreement, or other agreement with a private sector for-profit or nonprofit entity or State or local government agency to administer the competition.

(e)

Competition parameters

Each competition shall incorporate the following elements:

(1)

Cybersecurity skills outlined in the National Initiative for Cybersecurity Education Framework, or any successor framework.

(2)

Individual and team events.

(3)

Categories demonstrating offensive and defensive cyber operations, such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, obfuscated coding, or cyber-physical systems.

(4)

Any other elements related to paragraphs (1), (2), or (3) as determined necessary by the Director.

(f)

Funding

Support for the competition, including financial support for the design and administration of the competition or funds for a cash prize, may consist of—

(1)

amounts appropriated pursuant to appropriations Acts or otherwise made available for such purpose; and

(2)

funds provided by other Federal agencies, which—

(A)

shall be credited to, and in addition to, any amounts appropriated or otherwise made available pursuant to paragraph (1) to carry out this section; and

(B)

may be obligated and expended for such purpose by the Secretary of the Homeland Security, acting through the Director.

(g)

Use of funds

Notwithstanding any other provision of law, the Director may use funds available for carrying out the competition authorized under this section for the following:

(1)

Advertising, marketing, and promoting the competition.

(2)

Meals for participants and organizers of the competition if attendance at the meal during the competition is necessary to maintain the integrity of the competition.

(3)

Promotional items, including merchandise and apparel.

(4)

Monetary and nonmonetary awards for competition participants, including members of the uniformed services.

(5)

Necessary expenses for the honorary recognition of competition participants, including members of the uniformed services.

(6)

Any other appropriate activity necessary to carry out the competition, as determined by the Director.

(h)

Prize limitation

The Director may make one or more awards per competition, except that the amount or value of each shall not exceed $10,000. The Secretary of Homeland Security may make one or more awards per competition, except the amount or the value of each shall not to exceed $25,000. A monetary award under this section shall be in addition to the regular pay of the recipient.

(i)

Reporting requirements

The Director shall annually provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following:

(1)

A description of available funds under subsection (f) for each competition conducted in the preceding year.

(2)

A description of expenditures authorized in subsection (g) for each competition.

(3)

Information relating to the participation of each competition.

(4)

Information relating to lessons learned from each competition and how such lessons may be applied to improve cybersecurity operations and recruitment of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

May 13, 2022

Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed