I 

114TH CONGRESS 

1ST SESSION H. R. 3361 

To amend the Homeland Security Act of 2002 to establish the Insider 

Threat Program, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

JULY 29, 2015 

Mr. KING of New York (for himself, Mr. HIGGINS, Mr. BARLETTA, Mr. 

KATKO, and Mr. DONOVAN) introduced the following bill; which was referred to the Committee on Homeland Security 

A BILL 

To amend the Homeland Security Act of 2002 to establish 

the Insider Threat Program, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Department of Home5 land Security Insider Threat and Mitigation Act of 2015’’. 

6 SEC. 2. ESTABLISHMENT OF INSIDER THREAT PROGRAM. 

7 (a) IN GENERAL.—Title I of the Homeland Security 

8 Act of 2002 (6 U.S.C. 111 et seq.) is amended by adding 

9 at the end the following new section: 


asabaliauskas on DSK5VPTVN1PROD with BILLS
2 

•HR 3361 IH

1 ‘‘SEC. 104. INSIDER THREAT PROGRAM. 

2 ‘‘(a) ESTABLISHMENT.—The Secretary shall estab3 lish an Insider Threat Program within the Department. 

4 Such Program shall— 

5 ‘‘(1) provide training and education for Depart6 ment personnel to identify, prevent, mitigate, and re7 spond to insider threat risks to the Department’s 

8 critical assets; 

9 ‘‘(2) provide investigative support regarding po10 tential insider threats that may pose a risk to the 

11 Department’s critical assets; and 

12 ‘‘(3) conduct risk mitigation activities for in13 sider threats. 

14 ‘‘(b) STEERING COMMITTEE.— 

15 ‘‘(1) IN GENERAL.—The Secretary shall estab16 lish a Steering Committee within the Department. 

17 The Under Secretary for Intelligence and Analysis 

18 shall serve as the Chair of the Steering Committee. 

19 The Chief Security Officer shall serve as the Vice 

20 Chair. The Steering Committee shall be comprised 

21 of representatives of the Office of Intelligence and 

22 Analysis, the Office of the Chief Information Officer, 

23 the Office of the General Counsel, the Office for 

24 Civil Rights and Civil Liberties, the Privacy Office, 

25 the Office of the Chief Human Capital Officer, the 

26 Office of the Chief Financial Officer, the Federal 


asabaliauskas on DSK5VPTVN1PROD with BILLS
3 

•HR 3361 IH

1 Protective Service, the Office of the Chief Procure2 ment Officer, the Science and Technology Direc3 torate, and other components or offices of the De4 partment as appropriate. Such representatives shall 

5 meet on a regular basis to discuss cases and issues 

6 related to insider threats to the Department’s crit7 ical assets, in accordance with subsection (a). 

8 ‘‘(2) RESPONSIBILITIES.—Not later than one 

9 year after the date of the enactment of this section, 

10 the Under Secretary for Intelligence and Analysis 

11 and the Chief Security Officer, in coordination with 

12 the Steering Committee established pursuant to 

13 paragraph (1), shall— 

14 ‘‘(A) develop a holistic strategy for Depart15 ment-wide efforts to identify, prevent, mitigate, 

16 and respond to insider threats to the Depart17 ment’s critical assets; 

18 ‘‘(B) develop a plan to implement the in19 sider threat measures identified in the strategy 

20 developed under subparagraph (A) across the 

21 components and offices of the Department; 

22 ‘‘(C) document insider threat policies and 

23 controls; 


asabaliauskas on DSK5VPTVN1PROD with BILLS
4 

•HR 3361 IH

1 ‘‘(D) conduct a baseline risk assessment of 

2 insider threats posed to the Department’s crit3 ical assets; 

4 ‘‘(E) examine existing programmatic and 

5 technology best practices adopted by the Fed6 eral Government, industry, and research insti7 tutions to implement solutions that are vali8 dated and cost-effective; 

9 ‘‘(F) develop a timeline for deploying work10 place monitoring technologies, employee aware11 ness campaigns, and education and training 

12 programs related to identifying, preventing, 

13 mitigating, and responding to potential insider 

14 threats to the Department’s critical assets; 

15 ‘‘(G) require the Chair and Vice Chair of 

16 the Steering Committee to consult with the 

17 Under Secretary for Science and Technology 

18 and other appropriate stakeholders to ensure 

19 the Insider Threat Program is informed, on an 

20 ongoing basis, by current information regarding 

21 threats, beset practices, and available tech22 nology; and 


asabaliauskas on DSK5VPTVN1PROD with BILLS
5 

•HR 3361 IH

1 ‘‘(H) develop, collect, and report metrics 

2 on the effectiveness of the Department’s insider 

3 threat mitigation efforts.’’. 

Æ 


asabaliauskas on DSK5VPTVN1PROD with BILLS