Sec. 6604. Briefing on cyber education and training
334 words·~2 min read·
/bill/115/hr/5515/pap/section-6604·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
It is the sense of the Senate that— traditional approaches to cyber training focused solely on tactics, techniques, and procedures that hackers have used in the past may be inadequate for the challenges facing the cyber workforce of the Department of Defense because they fail to focus on future threats; such workforce encounters an information gap when conducting training derived from events that have already occurred rather than training developed for the evolving nature of cyber threats in real time, and cyber certifications such as Security + and CISSP are based on preventing vulnerabilities, exploits, and gaps identified in the past and lose relevance depending on when the courseware was updated; bridging the gap in cyber training between curriculum that has been built on legacy data versus training built on current real world cyberattacks is a meaningful area of cyber training research, curriculum development, and instruction delivery that should be addressed; and universities and private industry are, and will continue to be, critical partners in the education and training of our future cyber force, and developing partnerships with such universities and industry will be crucial in staying informed of the latest best practices in the cyber domain.
Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall brief the Committee on Armed Services of the Senate and the Committee on Armed Services of the House of Representatives on how the Department of Defense can leverage and partner with universities and industry on cyber education and training. The briefing required by subsection
(a)shall include discussion of the following: Current partnerships and ability to expand and leverage such partnerships to improve cyber education and training. Existing curriculum relating to cyber education and training and recommendations for changes to ensure relevance of such education and training to future threats. Joint development of curriculum, courseware, and research projects. Joint use of instructors and of facilities. Recommendations for legislative or administrative action to improve cyber education and training partnerships.