HR 3696 RFS
to obligate and expend not more than $2,000,000 for the 
National Research Council report. 
TITLE 
III—HOMELAND 
SECU-
RITY CYBERSECURITY WORK-
FORCE 
SEC. 301. HOMELAND SECURITY CYBERSECURITY WORK-
FORCE. 
(a) IN GENERAL.—Subtitle C of title II of the Home-
land Security Act of 2002, as amended by sections 101, 
102, 103, 104, 105, and 201, is further amended by add-
ing at the end the following new section: 
‘‘SEC. 230A. CYBERSECURITY OCCUPATION CATEGORIES, 
WORKFORCE ASSESSMENT, AND STRATEGY. 
‘‘(a) SHORT TITLE.—This section may be cited as the 
‘Homeland Security Cybersecurity Boots-on-the-Ground 
Act’. 
‘‘(b) CYBERSECURITY OCCUPATION CATEGORIES.— 
‘‘(1) IN
GENERAL.—Not later than 90 days 
after the date of the enactment of this section, the 
Secretary shall develop and issue comprehensive oc-
cupation categories for individuals performing activi-
ties in furtherance of the cybersecurity mission of 
the Department. 
‘‘(2) APPLICABILITY.—The Secretary shall en-
sure that the comprehensive occupation categories 
VerDate Mar 15 2010 
02:51 Jul 30, 2014
Jkt 039200
PO 00000
Frm 00056
Fmt 6652
Sfmt 6201
E:\BILLS\H3696.RFS
H3696
jbell on DSK4SPTVN1PROD with BILLS
HR 3696 RFS
issued under paragraph (1) are used throughout the 
Department and are made available to other Federal 
agencies. 
‘‘(c) CYBERSECURITY WORKFORCE ASSESSMENT.— 
‘‘(1) IN GENERAL.—Not later than 180 days 
after the date of the enactment of this section and 
annually thereafter, the Secretary shall assess the 
readiness and capacity of the workforce of the De-
partment to meet its cybersecurity mission. 
‘‘(2) CONTENTS.—The assessment required 
under paragraph (1) shall, at a minimum, include 
the following: 
‘‘(A) Information where cybersecurity posi-
tions are located within the Department, speci-
fied in accordance with the cybersecurity occu-
pation categories issued under subsection (b). 
‘‘(B) Information on which cybersecurity 
positions are— 
‘‘(i) performed by— 
‘‘(I) permanent full time depart-
mental employees, together with de-
mographic information about such 
employees’ race, ethnicity, gender, dis-
ability status, and veterans status; 
VerDate Mar 15 2010 
02:51 Jul 30, 2014
Jkt 039200
PO 00000
Frm 00057
Fmt 6652
Sfmt 6201
E:\BILLS\H3696.RFS
H3696
jbell on DSK4SPTVN1PROD with BILLS
HR 3696 RFS
‘‘(II) individuals employed by 
independent contractors; and 
‘‘(III) individuals employed by 
other Federal agencies, including the 
National Security Agency; and 
‘‘(ii) vacant. 
‘‘(C) The number of individuals hired by 
the Department pursuant to the authority 
granted to the Secretary in 2009 to permit the 
Secretary to fill 1,000 cybersecurity positions 
across the Department over a three year period, 
and information on what challenges, if any, 
were encountered with respect to the implemen-
tation of such authority. 
‘‘(D) Information on vacancies within the 
Department’s cybersecurity supervisory work-
force, from first line supervisory positions 
through senior departmental cybersecurity posi-
tions. 
‘‘(E) Information on the percentage of in-
dividuals within each cybersecurity occupation 
category who received essential training to per-
form their jobs, and in cases in which such 
training is not received, information on what 
VerDate Mar 15 2010 
02:51 Jul 30, 2014
Jkt 039200
PO 00000
Frm 00058
Fmt 6652
Sfmt 6201
E:\BILLS\H3696.RFS
H3696
jbell on DSK4SPTVN1PROD with BILLS
HR 3696 RFS
challenges, if any, were encountered with re-
spect to the provision of such training. 
‘‘(F) Information on recruiting costs in-
curred with respect to efforts to fill cybersecu-
rity positions across the Department in a man-
ner that allows for tracking of overall recruiting 
and identifying areas for better coordination 
and leveraging of resources within the Depart-
ment. 
‘‘(d) WORKFORCE STRATEGY.— 
‘‘(1) IN GENERAL.—Not later than 180 days 
after the date of the enactment of this section, the 
Secretary shall develop, maintain, and, as necessary, 
update, a comprehensive workforce strategy that en-
hances the readiness, capacity, training, recruitment, 
and retention of the cybersecurity workforce of the 
Department. 
‘‘(2) CONTENTS.—The comprehensive work-
force strategy developed under paragraph (1) shall 
include— 
‘‘(A) a multiphased recruitment plan, in-
cluding relating to experienced professionals, 
members of disadvantaged or underserved com-
munities, the unemployed, and veterans; 
‘‘(B) a 5-year implementation plan; 
VerDate Mar 15 2010 
02:51 Jul 30, 2014
Jkt 039200
PO 00000
Frm 00059
Fmt 6652
Sfmt 6201
E:\BILLS\H3696.RFS
H3696
jbell on DSK4SPTVN1PROD with BILLS
HR 3696 RFS
‘‘(C) a 10-year projection of the Depart-
ment’s cybersecurity workforce needs; and 
‘‘(D) obstacles impeding the hiring and de-
velopment of a cybersecurity workforce at the 
Department. 
‘‘(e) INFORMATION SECURITY TRAINING.—Not later 
than 270 days after the date of the enactment of this sec-
tion, the Secretary shall establish and maintain a process 
to verify on an ongoing basis that individuals employed 
by independent contractors who serve in cybersecurity po-
sitions at the Department receive initial and recurrent in-
formation security training comprised of general security 
awareness training necessary to perform their job func-
tions, and role-based security training that is commensu-
rate with assigned responsibilities. The Secretary shall 
maintain documentation to ensure that training provided 
to an individual under this subsection meets or exceeds 
requirements for such individual’s job function. 
‘‘(f) UPDATES.—The Secretary shall submit to the 
appropriate congressional committees annual updates re-
garding the cybersecurity workforce assessment required 
under subsection (c), information on the progress of car-
rying out the comprehensive workforce strategy developed 
under subsection (d), and information on the status of the 
VerDate Mar 15 2010 
02:51 Jul 30, 2014
Jkt 039200
PO 00000
Frm 00060
Fmt 6652
Sfmt 6201
E:\BILLS\H3696.RFS
H3696
jbell on DSK4SPTVN1PROD with BILLS