42 U.S.C. § 18940

(a) Authorization of grants (1) In general Subject to the availability of appropriations, the Director shall carry out the Dr. David Satcher Cybersecurity Education Grant Program by— (A) awarding grants to assist institutions of higher education that have an enrollment of needy students, historically Black colleges and universities, Tribal Colleges and Universities, and minority-serving institutions, to establish or expand cybersecurity programs, to build and upgrade institutional capacity to better support new or existing cybersecurity programs, including cybersecurity partnerships with public and private entities, and to support such institutions on the path to producing qualified entrants in the cybersecurity workforce or becoming a National Center of Academic Excellence in Cybersecurity; and (B) awarding grants to build capacity at institutions of higher education that have an enrollment of needy students, historically Black colleges and universities, Tribal Colleges and Universities, and minority-serving institutions, to expand cybersecurity education opportunities, cybersecurity programs, cybersecurity research, and cybersecurity partnerships with public and private entities. (2) Reservation The Director shall award not less than 50 percent of the amount available for grants under this section to historically Black colleges and universities, Tribal Colleges and Universities, and minority-serving institutions. (3) Coordination The Director shall carry out this section in coordination with appropriate Federal agencies, including the Departments of Homeland Security, Education, and Labor. (4) Sunset The Director’s authority to award grants under paragraph (1) shall terminate on the date that is 5 years after the date the Director first awards a grant under paragraph (1). (b) Applications An eligible institution seeking a grant under subsection (a) shall submit an application to the Director at such time, in such manner, and containing such information as the Director may reasonably require, including a statement of how the institution will use the funds awarded through the grant to expand cybersecurity education opportunities at the eligible institution. (c) Activities An eligible institution that receives a grant under this section may use the funds awarded through such grant for increasing research, education, technical, partnership, and innovation capacity, including for— (1) building and upgrading institutional capacity to better support new or existing cybersecurity programs, including cybersecurity partnerships with public and private entities; (2) building and upgrading institutional capacity to provide hands-on research and training experiences for undergraduate and graduate students; and (3) outreach and recruitment to ensure students are aware of such new or existing cybersecurity programs, including cybersecurity partnerships with public and private entities. (d) Reporting requirements Not later than— (1) one year after the effective date of this section, as provided in subsection (f), and annually thereafter until the Director submits the report under paragraph (2), the Director shall prepare and submit to Congress a report on the status and progress of implementation of the grant program under this section, including on the number and demographics of institutions participating, the number and nature of students served by cybersecurity programs at institutions receiving grants, as well as the number of certificates or degrees awarded through such cybersecurity programs, the level of funding provided to grant recipients, the types of activities being funded by the grants program, and plans for future implementation and development; and (2) five years after the effective date of this section, as provided in subsection (f), the Director shall prepare and submit to Congress a report on the status of cybersecurity education programming and capacity-building at institutions receiving grants under this section, including changes in the scale and scope of these programs, associated facilities, or in accreditation status, and on the educational and employment outcomes of students participating in cybersecurity programs that have received support under this section. (e) Performance metrics The Director shall establish performance metrics for grants awarded under this section. (f) Effective date This section shall take effect 1 year after August 9, 2022 .