DHS Cybersecurity On-the-Job Training Program Act

II Calendar No. 710 118TH CONGRESS 2D SESSION H. R. 3208 [Report No. 118–304] IN THE SENATE OF THE UNITED STATES SEPTEMBER 25, 2024 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs DECEMBER 17 (legislative day, DECEMBER 16), 2024 Reported by Mr. PETERS, with an amendment [Strike out all after the enacting clause and insert the part printed in italic] AN ACT To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘DHS Cybersecurity 4 On-the-Job Training Program Act’’. 5 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6401 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 2 •HR 3208 RS SEC. 2. DHS CYBERSECURITY ON-THE-JOB TRAINING PRO- 1 GRAM. 2 (a) IN GENERAL.—Subtitle A of title XXII of the 3 Homeland Security Act of 2002 (6 U.S.C. 141 et seq.) 4 is amended by adding at the end the following new section: 5 ‘‘SEC. 2220F. DHS CYBERSECURITY ON-THE-JOB TRAINING 6 PROGRAM. 7 ‘‘(a) IN GENERAL.—There is established within the 8 Agency a ‘DHS Cybersecurity On-the-Job Training Pro- 9 gram’ (in this section referred to as the ‘Program’) to vol- 10 untarily train Department employees who are not cur- 11 rently in a cybersecurity position for work in matters re- 12 lating to cybersecurity at the Department. The Program 13 shall be led by the Director, in consultation with the 14 Under Secretary for Management. 15 ‘‘(b) DUTIES OF THE DIRECTOR.—In carrying out 16 the Program under subsection (a), the Director— 17 ‘‘(1) shall develop a curriculum for the Pro- 18 gram, incorporating any existing curricula as appro- 19 priate, and consistent with the National Initiative 20 for Cybersecurity Education Framework or any suc- 21 cessor framework, which may include distance learn- 22 ing instruction, in-classroom instruction within a 23 work location, on-the-job instruction under the su- 24 pervision of experienced cybersecurity staff, or other 25 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6401 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 3 •HR 3208 RS means of training and education as determined ap- 1 propriate by the Director; 2 ‘‘(2) shall develop criteria for participation in 3 the Program; 4 ‘‘(3) in accordance with paragraph (1), shall 5 provide cybersecurity training to employees of the 6 Department and may, as appropriate, provide cyber- 7 security training to other Federal employees; and 8 ‘‘(4) shall annually for seven years submit to 9 the Committee on Homeland Security of the House 10 of Representatives and the Committee on Homeland 11 Security and Governmental Affairs of the Senate a 12 report that includes— 13 ‘‘(A) information relating to the number of 14 employees who participated in the Program in 15 the preceding year; 16 ‘‘(B) an identification of the positions into 17 which employees trained through the Program 18 were hired after such training; 19 ‘‘(C) a description of metrics used to meas- 20 ure the success of the Program; 21 ‘‘(D) copies of the reports submitted pur- 22 suant to (c)(1); and 23 ‘‘(E) any additional information relating to 24 the duties specified in this subsection. 25 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6401 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 4 •HR 3208 RS ‘‘(c) DUTIES OF THE UNDER SECRETARY FOR MAN- 1 AGEMENT.—In carrying out the Program under sub- 2 section (a), the Under Secretary for Management shall— 3 ‘‘(1) submit to the Secretary an annual report 4 on the status of vacancies in cybersecurity positions 5 throughout the Department; 6 ‘‘(2) support efforts by the Director to identify 7 and recruit individuals employed by the Department 8 to participate in the Program; 9 ‘‘(3) implement policies, including continuing 10 service agreements, to encourage participation in the 11 Program by employees throughout the Department; 12 and 13 ‘‘(4) conduct outreach to employees who com- 14 plete the Program regarding cybersecurity job op- 15 portunities within the Department.’’. 16 (b) CLERICAL AMENDMENT.—The table of contents 17 in section 1(b) of the Homeland Security Act of 2002 is 18 amended by inserting after the item relating to section 19 2220E the following new item: 20 ‘‘Sec. 2220F. DHS Cybersecurity On-the-Job Training Program.’’. SECTION 1. SHORT TITLE. 21 This Act may be cited as the ‘‘DHS Cybersecurity On- 22 the-Job Training Program Act’’. 23 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6203 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 5 •HR 3208 RS SEC. 2. DHS CYBERSECURITY ON-THE-JOB TRAINING PRO- 1 GRAM. 2 (a) IN GENERAL.—Subtitle A of title XXII of the 3 Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) is 4 amended by adding at the end the following new section: 5 ‘‘SEC. 2220F. DHS CYBERSECURITY ON-THE-JOB TRAINING 6 PROGRAM. 7 ‘‘(a) IN GENERAL.—There is established within the 8 Agency a ‘DHS Cybersecurity On-the-Job Training Pro- 9 gram’ (in this section referred to as the ‘Program’) to volun- 10 tarily train Department employees who are not currently 11 in a cybersecurity position for work in matters relating to 12 cybersecurity at the Department. The Program shall be led 13 by the Director, in consultation with the Under Secretary 14 for Management. 15 ‘‘(b) DUTIES OF THE DIRECTOR.—In carrying out the 16 Program under subsection (a), the Director— 17 ‘‘(1) shall develop a curriculum for the Program, 18 incorporating existing curricula as appropriate and 19 applicable, such as the Federal Cyber Defense Skilling 20 Academy and other initiatives or successor programs, 21 and consistent with the National Initiative for Cyber- 22 security Education Framework or any successor 23 framework, which may include distance learning in- 24 struction, in-classroom instruction within a work lo- 25 cation, on-the-job instruction under the supervision of 26 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6203 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 6 •HR 3208 RS experienced cybersecurity staff, or other means of 1 training and education as determined appropriate by 2 the Director; 3 ‘‘(2) shall develop criteria for participation in 4 the Program and ensure cybersecurity personnel are 5 appropriately coded to the National Initiative for Cy- 6 bersecurity Education Framework and successor pro- 7 grams; 8 ‘‘(3) in accordance with the curriculum described 9 in paragraph (1)— 10 ‘‘(A) shall make available cybersecurity 11 training to employees of the Department; and 12 ‘‘(B) may, as appropriate, make available 13 cybersecurity training to other Federal employ- 14 ees; and 15 ‘‘(4) shall, during the 7-year period beginning on 16 the date of enactment of this section, annually submit 17 to the Committee on Homeland Security of the House 18 of Representatives and the Committee on Homeland 19 Security and Governmental Affairs of the Senate a 20 report that includes— 21 ‘‘(A) information relating to the number of 22 employees who participated in the Program in 23 the preceding year; 24 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6203 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 7 •HR 3208 RS ‘‘(B) an identification of the positions into 1 which employees trained through the Program 2 were hired after such training; 3 ‘‘(C) a description of metrics used to meas- 4 ure the success of the Program, which may in- 5 clude a skill inventory for applicable positions; 6 ‘‘(D) copies of the reports submitted pursu- 7 ant to subsection (c)(1); and 8 ‘‘(E) any additional information relating to 9 the duties specified in this subsection. 10 ‘‘(c) DUTIES OF THE UNDER SECRETARY FOR MAN- 11 AGEMENT.—In carrying out the Program under subsection 12 (a), the Under Secretary for Management shall— 13 ‘‘(1) during the 7-year period beginning on the 14 date of enactment of this section, submit to the Sec- 15 retary an annual report on the status of vacancies in 16 cybersecurity positions throughout the Department; 17 ‘‘(2) support efforts by the Director to identify 18 and recruit individuals employed by the Department 19 to participate in the Program; 20 ‘‘(3) implement policies, including continuing 21 service agreements, to encourage participation in the 22 Program by employees throughout the Department; 23 and 24 VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6203 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB 8 •HR 3208 RS ‘‘(4) conduct outreach to employees who complete 1 the Program regarding cybersecurity job opportunities 2 within the Department.’’. 3 (b) CLERICAL AMENDMENT.—The table of contents in 4 section 1(b) of the Homeland Security Act of 2002 (Public 5 Law 107–296; 116 Stat. 2135) is amended by inserting 6 after the item relating to section 2220E the following new 7 item: 8 ‘‘Sec. 2220F. DHS Cybersecurity On-the-Job Training Program.’’. VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6213 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6213 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB Calendar No. 710 118TH CONGRESS 2D SESSION H. R. 3208 [Report No. 118–304] AN ACT To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes. DECEMBER 17 (legislative day, DECEMBER 16), 2024 Reported with an amendment VerDate Sep 11 2014 07:17 Dec 18, 2024 Jkt 059200 PO 00000 Frm 00010 Fmt 6651 Sfmt 6651 E:\BILLS\H3208.RS H3208 kjohnson on DSK7ZCZBW3PROD with $$_JOB