6 U.S.C. § 383 — National Computer Forensics Institute

(a) In general; mission. For fiscal years 2023 through 2028, the United States Secret Service is authorized to run a National Computer Forensics Institute (called "the Institute" in this section). The Institute's mission is to educate, train, and equip state, local, territorial, and tribal law enforcement officers, prosecutors, and judges. It also trains members of the Secret Service's network of cyber fraud task forces who are federal employees, members of the uniformed services, or state, local, tribal, or territorial employees. The training covers investigating and preventing cybersecurity incidents, electronic crimes, and related cybersecurity threats, including sharing homeland security information — all done consistent with federal law on privacy, civil rights, and civil liberties protections. (b) Curriculum. All Institute education and training must be conducted in accordance with federal privacy, civil rights, and civil liberties law. The training must relate to: (1) investigating and preventing cybersecurity incidents, electronic crimes, and related cybersecurity threats, including instances involving illicit use of digital assets and emerging trends in cybersecurity and electronic crime; (2) conducting forensic examinations of computers, mobile devices, and other information systems; (3) prosecutorial and judicial considerations related to cybersecurity incidents, electronic crimes, related threats, and forensic examinations of computers, mobile devices, and other information systems; and (4) methods to obtain, process, store, and admit digital evidence in court. (c) Principles. The Institute must, to the extent practicable, ensure that timely, actionable, and relevant expertise and information related to cybersecurity incidents, electronic crimes, and related threats is shared with the people it trains. When selecting participants, the Institute must, to the extent reasonable and practicable, prioritize individuals from geographically diverse jurisdictions throughout the United States, and must prioritize state, local, tribal, and territorial law enforcement officers, prosecutors, judges, and other employees. (d) Equipment. The Institute may provide trainees with computer equipment, hardware, software, manuals, and tools for investigating and preventing cybersecurity incidents and electronic crimes, and for forensic examinations of computers, mobile devices, and other information systems. (e) Cyber Fraud Task Forces. The Institute must help expand the Secret Service's network of Cyber Fraud Task Forces by adding people it has educated and trained. (f) Savings provision. Any Institute activities and functions being carried out at any location as of November 1, 2017 are authorized to continue at that location on and after that date. (g) Expenses. The Director of the Secret Service may pay for all or part of the Institute's education, training, or equipment costs, including travel, transportation, and subsistence expenses for trainees. (h) Annual reports to Congress. (1) The Secretary must include information about the Institute's activities in the annual report already required under section 1116 of title 31, including, where possible: (A) which jurisdictions had recipients of the training that year; (B) information on the costs of that training; (C) projected future demand for the training; (D) how the Institute's activities have affected jurisdictions' ability to investigate and prevent cybersecurity incidents and electronic crimes; (E) a description of how potential recipients are nominated; and (F) any other issues the Secretary determines relevant. (2) Information already included in the President's annual budget submission to Congress under section 1105 of title 31 doesn't have to be repeated in this report. (i) Definitions. In this section: (1) "Cybersecurity threat" has the meaning given that term in section 1501 of this title. (2) "Incident" has the meaning given that term in section 659(a) of this title. (3) "Information system" has the meaning given that term in section 1501(9) of this title.