Sec. 3. Homeland security cybersecurity workforce assessment

528 words·~2 min read·/bill/113/s/2354/rs/section-3

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

This section may be cited as the . Homeland Security Cybersecurity Workforce Assessment Act In this section: The term appropriate congressional committees means— the Committee on Homeland Security and Governmental Affairs of the Senate ; the Committee on Homeland Security of the House of Representatives ; and the Committee on House Administration of the House of Representatives . The terms Cybersecurity Work Category , Data Element Code , and Specialty Area have the meanings given such terms in the Office of Personnel Management’s Guide to Data Standards.

The term Department means the Department of Homeland Security. The term Director means the Director of the Office of Personnel Management. The term Secretary means the Secretary of Homeland Security. The Secretary shall— identify all cybersecurity workforce positions within the Department; determine the primary Cybersecurity Work Category and Specialty Area of such positions; and assign the corresponding Data Element Code, as set forth in the Office of Personnel Management’s Guide to Data Standards which is aligned with the National Initiative for Cybersecurity Education’s National Cybersecurity Workforce Framework report, in accordance with paragraph (2).

Not later than 90 days after the date of the enactment of this Act, the Secretary shall establish procedures— to identify open positions that include cybersecurity functions (as defined in the OPM Guide to Data Standards); and to assign the appropriate employment code to each such position, using agreed standards and definitions. Not later than 9 months after the date of the enactment of this Act, the Secretary shall assign the appropriate employment code to— each employee within the Department who carries out cybersecurity functions; and each open position within the Department that have been identified as having cybersecurity functions.

Not later than 1 year after the date of the enactment of this Act, the Director shall submit a progress report on the implementation of this subsection to the appropriate congressional committees. Beginning not later than 1 year after the date on which the employment codes are assigned to employees pursuant to subsection (c)(2)(B), and annually through 2021, the Secretary, in consultation with the Director, shall— identify Cybersecurity Work Categories and Specialty Areas of critical need in the Department’s cybersecurity workforce; and submit a report to the Director that— describes the Cybersecurity Work Categories and Specialty Areas identified under subparagraph (A); and substantiates the critical need designations.

The Director shall provide the Secretary with timely guidance for identifying Cybersecurity Work Categories and Specialty Areas of critical need, including— current Cybersecurity Work Categories and Specialty Areas with acute skill shortages; and Cybersecurity Work Categories and Specialty Areas with emerging skill shortages. Not later than 18 months after the date of the enactment of this Act, the Secretary, in consultation with the Director, shall— identify Specialty Areas of critical need for cybersecurity workforce across the Department; and submit a progress report on the implementation of this subsection to the appropriate congressional committees.

The Comptroller General of the United States shall— analyze and monitor the implementation of subsections

(c)and (d); and not later than 3 years after the date of the enactment of this Act, submit a report to the appropriate congressional committees that describes the status of such implementation.