I 114th CONGRESS 1st Session H. R. 3361 IN THE HOUSE OF REPRESENTATIVES July 29, 2015 Mr. King of New York (for himself, Mr. Higgins , Mr. Barletta , Mr. Katko , and Mr. Donovan ) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To amend the Homeland Security Act of 2002 to establish the Insider Threat Program, and for other purposes.

1. Short title This Act may be cited as the Department of Homeland Security Insider Threat and Mitigation Act of 2015 . 2. Establishment of Insider Threat Program (a) In general Title I of the Homeland Security Act of 2002 ( 6 U.S.C. 111 et seq. ) is amended by adding at the end the following new section: 104. Insider Threat Program (a) Establishment The Secretary shall establish an Insider Threat Program within the Department. Such Program shall— (1) provide training and education for Department personnel to identify, prevent, mitigate, and respond to insider threat risks to the Department’s critical assets; (2) provide investigative support regarding potential insider threats that may pose a risk to the Department’s critical assets; and (3) conduct risk mitigation activities for insider threats. (b) Steering Committee (1) In general The Secretary shall establish a Steering Committee within the Department. The Under Secretary for Intelligence and Analysis shall serve as the Chair of the Steering Committee. The Chief Security Officer shall serve as the Vice Chair. The Steering Committee shall be comprised of representatives of the Office of Intelligence and Analysis, the Office of the Chief Information Officer, the Office of the General Counsel, the Office for Civil Rights and Civil Liberties, the Privacy Office, the Office of the Chief Human Capital Officer, the Office of the Chief Financial Officer, the Federal Protective Service, the Office of the Chief Procurement Officer, the Science and Technology Directorate, and other components or offices of the Department as appropriate. Such representatives shall meet on a regular basis to discuss cases and issues related to insider threats to the Department’s critical assets, in accordance with subsection (a). (2) Responsibilities Not later than one year after the date of the enactment of this section, the Under Secretary for Intelligence and Analysis and the Chief Security Officer, in coordination with the Steering Committee established pursuant to paragraph (1), shall— (A) develop a holistic strategy for Department-wide efforts to identify, prevent, mitigate, and respond to insider threats to the Department’s critical assets; (B) develop a plan to implement the insider threat measures identified in the strategy developed under subparagraph (A) across the components and offices of the Department; (C) document insider threat policies and controls; (D) conduct a baseline risk assessment of insider threats posed to the Department’s critical assets; (E) examine existing programmatic and technology best practices adopted by the Federal Government, industry, and research institutions to implement solutions that are validated and cost-effective; (F) develop a timeline for deploying workplace monitoring technologies, employee awareness campaigns, and education and training programs related to identifying, preventing, mitigating, and responding to potential insider threats to the Department’s critical assets; (G) require the Chair and Vice Chair of the Steering Committee to consult with the Under Secretary for Science and Technology and other appropriate stakeholders to ensure the Insider Threat Program is informed, on an ongoing basis, by current information regarding threats, beset practices, and available technology; and (H) develop, collect, and report metrics on the effectiveness of the Department’s insider threat mitigation efforts. .