SEC. 2. CYBERSECURITY OCCUPATION CLASSIFICATIONS, 
WORKFORCE ASSESSMENT, AND STRATEGY. 
(a) 
CYBERSECURITY
OCCUPATION
CLASSIFICA-
TIONS.— 
(1) IN GENERAL.—Not later than 90 days after 
the date of the enactment of this Act, the Secretary 
of Homeland Security shall develop and issue com-
prehensive occupation classifications for individuals 
performing activities in furtherance of the cybersecu-
rity mission of the Department of Homeland Secu-
rity. 
(2) APPLICABILITY.—The Secretary of Home-
land Security shall ensure that the comprehensive 
occupation classifications issued under subsection (a) 
may be used throughout the Department of Home-
land Security and are made available to other Fed-
eral agencies. 
(b) CYBERSECURITY WORKFORCE ASSESSMENT.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary of Homeland Security, acting through the 
Chief Human Capital Officer and Chief Information 
Officer of the Department of Homeland Security, 
shall assess the readiness and capacity of the De-
partment to meet its cybersecurity mission. 
VerDate Mar 15 2010 
03:59 Sep 18, 2013
Jkt 029200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3107.IH
H3107
smartinez on DSK6TPTVN1PROD with BILLS
(2) 
CONTENTS.—The 
assessment 
required 
under paragraph (1) shall, at a minimum, include 
the following: 
(A) Information where cybersecurity posi-
tions are located within the Department of 
Homeland Security, specified in accordance 
with the cybersecurity occupation classifications 
issued under subsection (a). 
(B) Information on which cybersecurity po-
sitions are— 
(i) performed by— 
(I) permanent full time depart-
mental employees; 
(II) individuals employed by inde-
pendent contractors; and 
(III) individuals employed by 
other Federal agencies, including the 
National Security Agency; and 
(ii) vacant. 
(C) The number of individuals hired by the 
Department pursuant to the authority granted 
to the Secretary of Homeland Security in 2009 
to permit the Secretary to fill 1,000 cybersecu-
rity positions across the Department over a 
three-year period, and information on what 
VerDate Mar 15 2010 
03:59 Sep 18, 2013
Jkt 029200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3107.IH
H3107
smartinez on DSK6TPTVN1PROD with BILLS
challenges, if any, were encountered with re-
spect to the implementation of such authority. 
(D) Information on vacancies within the 
Department’s cybersecurity supervisory work-
force, from first line supervisory positions 
through senior departmental cybersecurity posi-
tions. 
(E) Information on the percentage of indi-
viduals within each cybersecurity occupation 
classification who received essential training to 
perform their jobs, and in cases in which such 
training is not received, information on what 
challenges, if any, were encountered with re-
spect to the provision of such training. 
(c) WORKFORCE STRATEGY.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary of Homeland Security shall develop a com-
prehensive workforce strategy that enhances the 
readiness, capacity, training, and recruitment and 
retention of the cybersecurity workforce of the De-
partment of Homeland Security. 
(2) CONTENTS.—The comprehensive workforce 
strategy developed under paragraph (1) shall in-
clude— 
VerDate Mar 15 2010 
03:59 Sep 18, 2013
Jkt 029200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3107.IH
H3107
smartinez on DSK6TPTVN1PROD with BILLS
(A) a multiphased recruitment plan; and 
(B) a 10-year projection of Federal work-
force needs. 
(d) INFORMATION SECURITY TRAINING.—Not later 
than 270 days after the date of the enactment of this Act, 
the Secretary of Homeland Security shall establish and 
maintain a process to verify on an ongoing basis that indi-
viduals employed by independent contractors who serve in 
cybersecurity positions at the Department of Homeland 
Security receive initial and recurrent information security 
training comprised of general security awareness training 
necessary to perform their job functions, and role-based 
security training that is commensurate with assigned re-
sponsibilities. The Secretary shall monitor and maintain 
documentation to ensure that training provided to an indi-
vidual under this subsection meets or exceeds require-
ments for such individual’s job function. 
(e) UPDATES.—Together with the submission to Con-
gress of annual budget requests, the Secretary of Home-
land Security shall provide updates regarding the cyberse-
curity workforce assessment required under subsection 
(b), information on the progress of carrying out the com-
prehensive workforce strategy developed under subsection 
(c), and information on the status of the implementation 
VerDate Mar 15 2010 
03:59 Sep 18, 2013
Jkt 029200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3107.IH
H3107
smartinez on DSK6TPTVN1PROD with BILLS
of the information security training required under sub-
section (d). 
SEC. 3. DEFINITION. 
In this Act, the term ‘‘cybersecurity mission’’ means 
activities that encompass the full range of threat reduc-
tion, vulnerability reduction, deterrence, incident response, 
resiliency, and recovery activities to foster the security and 
stability of cyberspace. 
Æ 
VerDate Mar 15 2010 
03:59 Sep 18, 2013
Jkt 029200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6301
E:\BILLS\H3107.IH
H3107
smartinez on DSK6TPTVN1PROD with BILLS