42 U.S.C. § 18940 — Dr. David Satcher Cybersecurity Education Grant Program

(a) Authorization of grants.
(1) Subject to available funding, the Director^* must run the Dr. David Satcher Cybersecurity Education Grant Program by: (A) awarding grants to colleges with an enrollment of needy students^*, historically Black colleges and universities, Tribal Colleges and Universities, and minority-serving institutions, to help them establish or expand cybersecurity programs, build and upgrade institutional capacity — including cybersecurity partnerships with public and private entities — and support them on the path to producing qualified cybersecurity workers or becoming a National Center of Academic Excellence in Cybersecurity; and (B) awarding grants to build capacity at those same kinds of institutions to expand cybersecurity education opportunities, programs, research, and partnerships.
(2) The Director must award at least 50 percent of the grant money to historically Black colleges and universities, Tribal Colleges and Universities, and minority-serving institutions.
(3) The Director must carry out this program in coordination with other agencies, including the Departments of Homeland Security, Education, and Labor.
(4) The Director's authority to award grants under paragraph (1) ends 5 years after the date the Director first awards a grant under it.

(b) Applications. An eligible institution seeking a grant must submit an application to the Director in the time, manner, and with the information the Director reasonably requires, including a statement of how it will use the funds to expand cybersecurity education opportunities.

(c) Activities. An institution that receives a grant may use the funds to increase research, education, technical, partnership, and innovation capacity, including for: (1) building and upgrading support for new or existing cybersecurity programs, including partnerships with public and private entities; (2) building and upgrading hands-on research and training experiences for undergraduate and graduate students; and (3) outreach and recruitment so students know about these programs.

(d) Reporting requirements. The Director must prepare and submit to Congress: (1) starting one year after this section's effective date and annually after that, until the report under paragraph (2), a report on the grant program's status and progress, including the number and demographics of participating institutions, the number and nature of students served, the number of certificates or degrees awarded, funding levels, the types of activities funded, and future implementation plans; and (2) five years after this section's effective date, a report on the status of the funded cybersecurity education programs, including changes in their scale, scope, facilities, or accreditation status, and on students' educational and employment outcomes.

(e) Performance metrics. The Director must establish performance metrics for grants awarded under this section.

(f) Effective date. This section takes effect 1 year after August 9, 2022.