Cyber PIVOTT Act of 2025

This bill amends the Homeland Security Act of 2002 to create a new cybersecurity education and training program within the Cybersecurity and Infrastructure Security Agency (CISA), focused on community colleges, technical schools, and other 2-year institutions. It establishes the 'PIVOTT Program' to provide scholarships, skills-based exercises, internships, and a service obligation to build a skills-based cyber workforce.

Sec. 2, CISA education and training programs and resources: This section adds a new section to the Homeland Security Act. It defines key terms like 'cyber-relevant', 'skills-based exercise', and 'participating institution'. The Director of CISA must establish the PIVOTT Program within one year, partnering with eligible 2-year institutions to offer training, internships, and federal job opportunities.

Student qualifications: Eligible students include those enrolled in or starting a 2-year cyber associate's degree or comparable certification, and those identified by the Director. Participants receive full-tuition scholarships covering fees, travel, and other expenses. They must fulfill a 2-year service obligation in a cyber role for a federal, state, local, tribal, or territorial government, with exceptions for current or former armed forces members.

Institutional requirements: Eligible institutions must be part of the National Centers of Academic Excellence in Cybersecurity program or be determined eligible by the Director based on course alignment with the NICE Cybersecurity Workforce Framework and the presence of a cybersecurity clinic.

Program components: Students must complete at least 4 skills-based exercises, including at least one in person. The Director coordinates with institutions to provide at least one exercise per semester. Internships are a core requirement, with placements in government entities, critical infrastructure, or federal agencies. The Director must begin security clearance processes for appropriate students one year before program completion.

Outreach initiatives: The Director must conduct regional outreach, provide informational materials, and engage industry stakeholders for an annual report. A voluntary federal recruitment fair must be hosted each fiscal year at no fewer than 5 participating institutions.

Program completion benefits: The Director maintains an online database of training resources and federal job opportunities. Students can receive vouchers for up to 3 certifications within 10 years of program completion. Up to 10 students per year who have completed the program and worked for the federal government for at least 7 years may be eligible for additional scholarships.

Terms of program scholarship: Scholarship recipients must repay the award if they fail to maintain academic standing, withdraw, or do not fulfill the service obligation. Exceptions exist for those who enlist in the armed forces or who demonstrate effort but are not offered a government position.

Monitoring compliance: Participating institutions must agree to monitor scholarship recipients' compliance with post-award employment obligations.

Amount of repayment: If a breach occurs before one year of service, the total scholarship amount must be repaid immediately or treated as a loan.

Repayments: Loans are treated as Federal Direct Unsubsidized Stafford Loans with interest accruing from the award date.

Collection of repayment: The Secretary determines repayment amounts and collects them, with participating institutions able to retain a percentage for administrative costs.

Exceptions: The Secretary may waive or suspend repayment obligations in cases of impossibility or extreme hardship.

Timeline for implementation: The program aims to enroll at least 250 students in the first full academic year, doubling each year until reaching 1,000 students per year. A plan must be developed to enroll at least 10,000 students per year within 10 years.

Report on enrollment goals: If enrollment quotas are not met, the Director must brief Congress within 30 days.

Review of CISA education, training programs and resources: Within 90 days, the CISA Director must submit a review of existing education and training programs, evaluating cost, reach, demand, and resource gaps.

Promoting CyberCorps Scholarship for Service: The Secretary of Homeland Security must submit a report on current support for the CyberCorps Scholarship for Service Program, including opportunities for additional funding.