IB 
Union Calendar No. 244 
114TH CONGRESS 
1ST SESSION H. R. 3361 
[Report No. 114–321] 
To amend the Homeland Security Act of 2002 to establish the Insider 
Threat Program, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 29, 2015 
Mr. KING of New York (for himself, Mr. HIGGINS, Mr. BARLETTA, Mr. 
KATKO, and Mr. DONOVAN) introduced the following bill; which was re-
ferred to the Committee on Homeland Security 
NOVEMBER 2, 2015 
Additional sponsor: Mr. MCCAUL 
NOVEMBER 2, 2015 
Reported with an amendment, committed to the Committee of the Whole 
House on the State of the Union, and ordered to be printed 
[Strike out all after the enacting clause and insert the part printed in italic] 
[For text of introduced bill, see copy of bill as introduced on July 29, 2015] 
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Department of Home-
land Security Insider Threat and Mitigation Act of 2015’’. 
SEC. 2. ESTABLISHMENT OF INSIDER THREAT PROGRAM. 
(a) IN GENERAL.—Title I of the Homeland Security 
Act of 2002 (6 U.S.C. 111 et seq.) is amended by adding 
at the end the following new section: 
‘‘SEC. 104. INSIDER THREAT PROGRAM. 
‘‘(a) ESTABLISHMENT.—The Secretary shall establish 
an Insider Threat Program within the Department. Such 
Program shall— 
‘‘(1) provide training and education for Depart-
ment personnel to identify, prevent, mitigate, and re-
spond to insider threat risks to the Department’s crit-
ical assets; 
‘‘(2) provide investigative support regarding po-
tential insider threats that may pose a risk to the De-
partment’s critical assets; and 
‘‘(3) conduct risk mitigation activities for in-
sider threats. 
‘‘(b) STEERING COMMITTEE.— 
‘‘(1) IN GENERAL.—The Secretary shall establish 
a Steering Committee within the Department. The 
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6203
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS
Under Secretary for Intelligence and Analysis shall 
serve as the Chair of the Steering Committee. The 
Chief Security Officer shall serve as the Vice Chair. 
The Steering Committee shall be comprised of rep-
resentatives of the Office of Intelligence and Analysis, 
the Office of the Chief Information Officer, the Office 
of the General Counsel, the Office for Civil Rights and 
Civil Liberties, the Privacy Office, the Office of the 
Chief Human Capital Officer, the Office of the Chief 
Financial Officer, the Federal Protective Service, the 
Office of the Chief Procurement Officer, the Science 
and Technology Directorate, and other components or 
offices of the Department as appropriate. Such rep-
resentatives shall meet on a regular basis to discuss 
cases and issues related to insider threats to the De-
partment’s critical assets, in accordance with sub-
section (a). 
‘‘(2) RESPONSIBILITIES.—Not later than one 
year after the date of the enactment of this section, the 
Under Secretary for Intelligence and Analysis and the 
Chief Security Officer, in coordination with the Steer-
ing Committee established pursuant to paragraph (1), 
shall— 
‘‘(A) develop a holistic strategy for Depart-
ment-wide efforts to identify, prevent, mitigate, 
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS
and respond to insider threats to the Depart-
ment’s critical assets; 
‘‘(B) develop a plan to implement the in-
sider threat measures identified in the strategy 
developed under subparagraph (A) across the 
components and offices of the Department; 
‘‘(C) document insider threat policies and 
controls; 
‘‘(D) conduct a baseline risk assessment of 
insider threats posed to the Department’s critical 
assets; 
‘‘(E) examine existing programmatic and 
technology best practices adopted by the Federal 
Government, industry, and research institutions 
to implement solutions that are validated and 
cost-effective; 
‘‘(F) develop a timeline for deploying work-
place monitoring technologies, employee aware-
ness campaigns, and education and training 
programs related to identifying, preventing, 
mitigating, and responding to potential insider 
threats to the Department’s critical assets; 
‘‘(G) require the Chair and Vice Chair of 
the Steering Committee to consult with the 
Under Secretary for Science and Technology and 
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS
other appropriate stakeholders to ensure the In-
sider Threat Program is informed, on an ongo-
ing basis, by current information regarding 
threats, beset practices, and available technology; 
and 
‘‘(H) develop, collect, and report metrics on 
the effectiveness of the Department’s insider 
threat mitigation efforts. 
‘‘(c) REPORT.—Not later than two years after the date 
of the enactment of this section and the biennially thereafter 
for the next four years, the Secretary shall submit to the 
Committee on Homeland Security and the Permanent Se-
lect Committee on Intelligence of the House of Representa-
tives and the Committee on Homeland Security and Gov-
ernmental Affairs and the Select Committee on Intelligence 
of the Senate a report on how the Department and its com-
ponents and offices have implemented the strategy developed 
under subsection (b)(2)(A), the status of the Department’s 
risk assessment of critical assets, the types of insider threat 
training conducted, the number of Department employees 
who have received such training, and information on the 
effectiveness of the Insider Threat Program, based on 
metrics under subsection (b)(2)(H). 
‘‘(d) DEFINITIONS.—In this section: 
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS
‘‘(1) CRITICAL ASSETS.—The term ‘critical as-
sets’ means the people, facilities, information, and 
technology required for the Department to fulfill its 
mission. 
‘‘(2) INSIDER.—The term ‘insider’ means— 
‘‘(A) any person who has access to classified 
national security information and is employed 
by, detailed to, or assigned to the Department, 
including members of the Armed Forces, experts 
or consultants to the Department, industrial or 
commercial 
contractors, 
licensees, 
certificate 
holders, or grantees of the Department, including 
all subcontractors, personal services contractors, 
or any other category of person who acts for or 
on behalf of the Department, as determined by 
the Secretary; or 
‘‘(B) State, local, tribal, territorial, and 
private sector personnel who possess security 
clearances granted by the Department. 
‘‘(3) INSIDER
THREAT.—The term ‘insider 
threat’ means the threat that an insider will use his 
or her authorized access, wittingly or unwittingly, to 
do harm to the security of the United States, includ-
ing damage to the United States through espionage, 
terrorism, the unauthorized disclosure of classified na-
VerDate Sep 11 2014 
23:44 Nov 02, 2015
Jkt 059200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6203
E:\BILLS\H3361.RH
H3361
emcdonald on DSK67QTVN1PROD with BILLS