Section 1 Short title
This Act may be cited as the “Industrial Control Systems Cybersecurity Competition Act”.
Industrial Control Systems Cybersecurity Competition Act
A BILL
To improve the President's Cup Cybersecurity Competitions.
Sec. 2 President's Cup Cybersecurity Competitions
Section 7121(d) of the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023 (6 U.S.C. 665m(d)) is amended—
by striking paragraph (3);
by redesignating paragraphs (1), (2), and (4) as subparagraphs (A), (B), and (C), respectively, and adjusting the margin accordingly;
by striking “Each competition” and inserting the following:
“(1) In general—Each competition”
in subparagraph (C) of paragraph (1), as so redesignated, by striking “paragraphs (1), (2), or (3)” and inserting “subparagraph (A) or (B)”; and
by adding at the end the following:
“(2) Biennial requirements—Not less frequently than every second competition, the competition shall incorporate categories demonstrating offensive and defensive cyber operations involving—
“(A) information technology (as defined in section 11101 of title 40, United States Code), such as software reverse engineering and exploitation, network operations, forensics, big data analysis, cyber analysis, cyber defense, cyber exploitation, secure programming, and obfuscated coding;
“(B) operational technology (as defined in section 3 of the IoT Cybersecurity Improvement Act of 2020 (15 U.S.C. 278g–3a)) or industrial control systems (as defined in section 2220C of the Homeland Security Act of 2002 (6 U.S.C. 665i)), such as knowledge of supervisory control and data acquisition systems and the protocols and communication methods used in these systems, detection of anomalies, and responding to and recovering after incidents involving such systems; or
“(C) any other category of technological system requiring cybersecurity or information security, as determined appropriate by the Director.”