[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[S. 1560 Introduced in Senate (IS)]
<DOC>
118th CONGRESS
1st Session
S. 1560
To require the development of a comprehensive rural hospital
cybersecurity workforce development strategy, and for other purposes.
_______________________________________________________________________
IN THE SENATE OF THE UNITED STATES
May 11, 2023
Mr. Hawley (for himself and Mr. Peters) introduced the following bill;
which was read twice and referred to the Committee on Homeland Security
and Governmental Affairs
_______________________________________________________________________
A BILL
To require the development of a comprehensive rural hospital
cybersecurity workforce development strategy, and for other purposes.
Be it enacted by the Senate and House of Representatives of the
United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Rural Hospital Cybersecurity
Enhancement Act''.
SEC. 2. DEFINITIONS.
In this Act:
(1) Appropriate committees of congress.--The term
``appropriate committees of Congress'' means--
(A) the Committee on Homeland Security and
Governmental Affairs of the Senate; and
(B) the Committee on Homeland Security of the House
of Representatives.
(2) Director.--The term ``Director'' means the Director of
the Cybersecurity and Infrastructure Security Agency.
(3) Rural hospital.--The term ``rural hospital'' means a
healthcare facility that--
(A) is located in a non-urbanized area, as
determined by the Bureau of the Census; and
(B) provides inpatient and outpatient healthcare
services, including primary care, emergency care, and
diagnostic services.
(4) Secretary.--The term ``Secretary'' means the Secretary
of Homeland Security.
SEC. 3. RURAL HOSPITAL CYBERSECURITY WORKFORCE DEVELOPMENT STRATEGY.
(a) In General.--Not later than 1 year after the date of enactment
of this Act, the Secretary, acting through the Director, shall develop
and transmit to the appropriate committees of Congress a comprehensive
rural hospital cybersecurity workforce development strategy to address
the growing need for skilled cybersecurity professionals in rural
hospitals.
(b) Consultation.--
(1) Agencies.--In carrying out subsection (a), the
Secretary and Director may consult with the Secretary of Health
and Human Services, the Secretary of Education, and the
Secretary of Labor.
(2) Providers.--In carrying out subsection (a), the
Secretary shall consult with rural healthcare providers from
each geographic region in the United States.
(c) Considerations.--The rural hospital cybersecurity workforce
development strategy developed under subsection (a) shall, at a
minimum, consider the following components:
(1) Partnerships between rural hospitals, educational
institutions, private sector entities, and nonprofit
organizations to develop, promote, and expand cybersecurity
education and training programs tailored to the needs of rural
hospitals.
(2) The development of a cybersecurity curriculum and
teaching resources that focus on teaching technical skills and
abilities related to cybersecurity in rural hospitals for use
in community colleges, vocational schools, and other
educational institutions located in rural areas.
(3) Recommendations for legislation, rulemaking, or
guidance to implement the components of the rural hospital
cybersecurity workforce development strategy.
(d) Annual Review.--Not later than 60 days after the date on which
the first full fiscal year ends following the date on which the
Secretary transmits the rural hospital cybersecurity workforce
development strategy developed under subsection (a), and not later than
60 days after the date on which each fiscal year thereafter ends, the
Secretary shall submit to the appropriate committees of Congress a
report that includes, at a minimum, information relating to--
(1) updates to the rural hospital cybersecurity workforce
development strategy, as appropriate;
(2) any programs or initiatives established pursuant to the
rural hospital cybersecurity workforce development strategy, as
well as the number of individuals trained or educated through
such programs or initiatives;
(3) additional recommendations for legislation, rulemaking,
or guidance to implement the components of the rural hospital
cybersecurity workforce development strategy; and
(4) the effectiveness of the rural hospital cybersecurity
workforce development strategy in addressing the need for
skilled cybersecurity professionals in rural hospitals.
SEC. 4. INSTRUCTIONAL MATERIALS FOR RURAL HOSPITALS.
(a) In General.--Not later than 1 year after the date of enactment
of this Act, the Director shall make available instructional materials
for rural hospitals that can be used to train staff on fundamental
cybersecurity efforts.
(b) Duties.--In carrying out subsection (a), the Director shall--
(1) consult with experts in cybersecurity education and
rural healthcare experts;
(2) identify existing cybersecurity instructional materials
that can be adapted for use in rural hospitals and create new
materials as needed; and
(3) conduct an awareness campaign to promote the materials
available to rural hospitals developed under subsection (a).
SEC. 5. IMPLEMENTATION.
Any action undertaken pursuant to this Act shall not be subject to
chapter 10 of title 5, United States Code.
<all>