Sponsors (2)
The bill centralizes federal cybersecurity support, guidance, data-sharing, and modest funding to strengthen K–12 defenses and reduce disparities, but it raises privacy and security risks, increases federal costs, may favor certain vendors, and could leave resource-poor districts behind or dependent on federal help.
K–12 schools, teachers, and students will get centralized, tailored cybersecurity guidance, tools, and ongoing training that reduce successful cyberattacks and disruptions to instruction.
School districts and state/local education agencies will have a searchable database of federal cybersecurity tools, recommended products, and funding opportunities, making it easier to find grants and make informed purchasing decisions.
Smaller and resource-constrained districts (including many rural and low-income schools) may gain access to cybersecurity services they otherwise couldn't afford, reducing disparities in cyber defenses.
Schools, students, and staff face increased privacy and security risks because collecting and centralizing incident data (even de‑identified) creates new federal data holdings that could be misidentified, misused, or breached.
Smaller, rural, and resource-poor districts may be unable to implement recommended tools or participate fully in data-sharing, producing uneven cybersecurity improvements and incomplete national reporting.
Expanding and maintaining databases, monitoring, and CISA programs increases federal spending (explicitly about $20 million over FY2027–FY2028) and may add budget pressures for taxpayers or require offsets.
Based on analysis of 6 sections of legislative text.
Establishes a CISA School Cybersecurity Information Exchange, voluntary incident registry, and a K–12 technology improvement program; authorizes $10M/year for FY2027–28.
Official title: To direct the Director of the Cybersecurity and Infrastructure Security Agency to establish a School Cybersecurity Improvement Program, and for other purposes.
Introduced July 23, 2026 by Doris Matsui · Last progress July 23, 2026
Creates a School Cybersecurity Information Exchange within CISA to share K–12-focused guidance, best practices, funding opportunities, and federally funded tools, and requires an annual de‑identified report. Establishes a voluntary incident registry for elementary and secondary school IT incidents and a K–12 Cybersecurity Technology Improvement Program to deploy tools, services, and training to help schools defend against ransomware and other cyber threats. Authorizes $10 million per year for fiscal years 2027 and 2028 to carry out the programs.