(a)
Five-Year deadline for teams— Not later than September 30, 2022, each State, the District of Columbia, Puerto Rico, Guam, and the Virgin Islands shall have an operational reserve component cyber civil support team composed of reserve component members of the Armed Forces assigned under section 12310 of title 10, United States Code.
(b)
Progress report requirement— Not later than September 30, 2018, the Chief of the National Guard Bureau shall submit to Congress a report—
(1)
identifying which States, and whether the District of Columbia, Puerto Rico, Guam, and the Virgin Islands, have satisfied the requirement imposed by subsection (a);
(2)
establishing a plan for meeting the deadline imposed by subsection (a);
(3)
assessing the level of involvement and assistance of the National Guard Bureau in the establishment and support of reserve component cyber civil support teams; and
(4)
evaluating the need for increased levels of such involvement and assistance.
(c)
Operational elements— To be considered operational, a reserve component cyber civil support team must be ready—
(1)
to perform duties relating to analysis and protection in support of responding to emergencies involving an attack or natural disaster impacting a computer, electronic, or cyber network;
(2)
to advise and coordinate on any incident deemed critical for the protection of life, property, and maintenance of good order for the Governor;
(3)
to cooperate with and assist private sector owners and operators of critical infrastructure and key resources;
(4)
to collaborate and participate in information sharing with Federal, State, and local Fusion Centers, emergency management authorities, and emergency management divisions; and
(5)
to maintain relationships and close coordination with—
(A)
State-based employees of the Protective Security Advisor Program Office of the Department of Homeland Security;
(B)
cybersecurity advisors of the Department of Homeland Security (where assigned); and
(C)
employees of the Office of Infrastructure Protection of the Department of Homeland Security.
(d)
Oversight by National Guard Bureau— To ensure standardization among reserve component cyber civil support teams, the National Guard Bureau Joint Staff shall provide program management and oversight as follows:
(1)
Members of a reserve component cyber civil support team shall undergo initial training comprising a military occupational specialty or Air Force Specialty Code initial skills course approved by a branch of the Armed Forces.
(2)
The National Guard Bureau Joint Staff shall establish specific curricula for teams, which shall—
(A)
include best-of-breed commercially available training and a National Guard-developed course focused on domestic coordination, communication, and cyber incident response skills; and
(B)
be updated on a periodic basis based on the evolving circumstances of cyber threats, the needs of the public and private entities such teams support, and the relationships between such teams and such entities.
(e)
Guidance to States— The National Guard Bureau Joint Staff shall consult with the Council of Governors and other appropriate civilian authorities to establish guidance to States concerning situations that are appropriate for the involvement of a reserve component cyber civil support team.
(f)
Minimum length of service requirement— The National Guard Bureau Joint Staff may establish a minimum length of service for a member of a reserve component cyber civil support team.