HR 3361 RFS 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Department of Home-
land Security Insider Threat and Mitigation Act of 2015’’. 
SEC. 2. ESTABLISHMENT OF INSIDER THREAT PROGRAM. 
(a) IN GENERAL.—Title I of the Homeland Security 
Act of 2002 (6 U.S.C. 111 et seq.) is amended by adding 
at the end the following new section: 
‘‘SEC. 104. INSIDER THREAT PROGRAM. 
‘‘(a) ESTABLISHMENT.—The Secretary shall estab-
lish an Insider Threat Program within the Department. 
Such Program shall— 
‘‘(1) provide training and education for Depart-
ment personnel to identify, prevent, mitigate, and re-
spond to insider threat risks to the Department’s 
critical assets; 
‘‘(2) provide investigative support regarding po-
tential insider threats that may pose a risk to the 
Department’s critical assets; and 
‘‘(3) conduct risk mitigation activities for in-
sider threats. 
‘‘(b) STEERING COMMITTEE.— 
‘‘(1) IN GENERAL.—The Secretary shall estab-
lish a Steering Committee within the Department. 
The Under Secretary for Intelligence and Analysis 
shall serve as the Chair of the Steering Committee. 
The Chief Security Officer shall serve as the Vice 
VerDate Sep 11 2014 
23:13 Nov 03, 2015
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3361.RFS
H3361
asabaliauskas on DSK5VPTVN1PROD with BILLS
HR 3361 RFS 
Chair. The Steering Committee shall be comprised 
of representatives of the Office of Intelligence and 
Analysis, the Office of the Chief Information Officer, 
the Office of the General Counsel, the Office for 
Civil Rights and Civil Liberties, the Privacy Office, 
the Office of the Chief Human Capital Officer, the 
Office of the Chief Financial Officer, the Federal 
Protective Service, the Office of the Chief Procure-
ment Officer, the Science and Technology Direc-
torate, and other components or offices of the De-
partment as appropriate. Such representatives shall 
meet on a regular basis to discuss cases and issues 
related to insider threats to the Department’s crit-
ical assets, in accordance with subsection (a). 
‘‘(2) RESPONSIBILITIES.—Not later than 1 year 
after the date of the enactment of this section, the 
Under Secretary for Intelligence and Analysis and 
the Chief Security Officer, in coordination with the 
Steering Committee established pursuant to para-
graph (1), shall— 
‘‘(A) develop a holistic strategy for Depart-
ment-wide efforts to identify, prevent, mitigate, 
and respond to insider threats to the Depart-
ment’s critical assets; 
VerDate Sep 11 2014 
23:13 Nov 03, 2015
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3361.RFS
H3361
asabaliauskas on DSK5VPTVN1PROD with BILLS
HR 3361 RFS 
‘‘(B) develop a plan to implement the in-
sider threat measures identified in the strategy 
developed under subparagraph (A) across the 
components and offices of the Department; 
‘‘(C) document insider threat policies and 
controls; 
‘‘(D) conduct a baseline risk assessment of 
insider threats posed to the Department’s crit-
ical assets; 
‘‘(E) examine existing programmatic and 
technology best practices adopted by the Fed-
eral Government, industry, and research insti-
tutions to implement solutions that are vali-
dated and cost-effective; 
‘‘(F) develop a timeline for deploying work-
place monitoring technologies, employee aware-
ness campaigns, and education and training 
programs related to identifying, preventing, 
mitigating, and responding to potential insider 
threats to the Department’s critical assets; 
‘‘(G) require the Chair and Vice Chair of 
the Steering Committee to consult with the 
Under Secretary for Science and Technology 
and other appropriate stakeholders to ensure 
the Insider Threat Program is informed, on an 
VerDate Sep 11 2014 
23:13 Nov 03, 2015
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3361.RFS
H3361
asabaliauskas on DSK5VPTVN1PROD with BILLS
HR 3361 RFS 
ongoing basis, by current information regarding 
threats, beset practices, and available tech-
nology; and 
‘‘(H) develop, collect, and report metrics 
on the effectiveness of the Department’s insider 
threat mitigation efforts. 
‘‘(c) REPORT.—Not later than 2 years after the date 
of the enactment of this section and the biennially there-
after for the next 4 years, the Secretary shall submit to 
the Committee on Homeland Security and the Permanent 
Select Committee on Intelligence of the House of Rep-
resentatives and the Committee on Homeland Security 
and Governmental Affairs and the Select Committee on 
Intelligence of the Senate a report on how the Department 
and its components and offices have implemented the 
strategy developed under subsection (b)(2)(A), the status 
of the Department’s risk assessment of critical assets, the 
types of insider threat training conducted, the number of 
Department employees who have received such training, 
and information on the effectiveness of the Insider Threat 
Program, based on metrics under subsection (b)(2)(H). 
‘‘(d) DEFINITIONS.—In this section: 
‘‘(1) CRITICAL ASSETS.—The term ‘critical as-
sets’ means the people, facilities, information, and 
VerDate Sep 11 2014 
23:13 Nov 03, 2015
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3361.RFS
H3361
asabaliauskas on DSK5VPTVN1PROD with BILLS
HR 3361 RFS 
technology required for the Department to fulfill its 
mission. 
‘‘(2) INSIDER.—The term ‘insider’ means— 
‘‘(A) any person who has access to classi-
fied national security information and is em-
ployed by, detailed to, or assigned to the De-
partment, including members of the Armed 
Forces, experts or consultants to the Depart-
ment, industrial or commercial contractors, li-
censees, certificate holders, or grantees of the 
Department, including all subcontractors, per-
sonal services contractors, or any other category 
of person who acts for or on behalf of the De-
partment, as determined by the Secretary; or 
‘‘(B) State, local, tribal, territorial, and 
private sector personnel who possess security 
clearances granted by the Department. 
‘‘(3) INSIDER
THREAT.—The term ‘insider 
threat’ means the threat that an insider will use his 
or her authorized access, wittingly or unwittingly, to 
do harm to the security of the United States, includ-
ing damage to the United States through espionage, 
terrorism, the unauthorized disclosure of classified 
national security information, or through the loss or 
VerDate Sep 11 2014 
23:13 Nov 03, 2015
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H3361.RFS
H3361
asabaliauskas on DSK5VPTVN1PROD with BILLS