DHS Cybersecurity On-the-Job Training Program Act

Bill: 118-hr-3208
Sponsor: full_name: Rep. Jackson Lee, Sheila [D-TX-18]
Introduced: 2023-05-11
Policy area: Government Operations and Politics
Subjects: Computer security and identity theft

Congressional oversight

Employment and training programs

Government employee pay, benefits, personnel management
Latest action: action_date: 2024-12-17
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 710.

Summaries:
action_date: 2023-05-11
action_desc: Introduced in House
text: <p><strong>DHS Cybersecurity On-the-Job Training Program Act</strong></p><p>This bill establishes  the Department of Homeland Security (DHS)  Cybersecurity On-the-Job Training Program within the Cybersecurity and Infrastructure Security Agency (CISA).</p><p>The program must train DHS employees holding non-cybersecurity positions for work in matters relating to cybersecurity at the department. The curriculum for the program must be consistent with the National Initiative for Cybersecurity Education Framework.</p><p>The bill also requires CISA to issue an annual report to Congress describing the number of participants, positions into which participants were hired, and related details about the program.&nbsp; &nbsp;<br/><br/></p><!--tinycomments|2.1|data:application/json;base64,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-->

action_date: 2023-07-27
action_desc: Reported to House
text: <p><strong>DHS Cybersecurity On-the-Job Training Program Act</strong></p><p>This bill establishes the Department of Homeland Security (DHS) Cybersecurity On-the-Job Training Program within the Cybersecurity and Infrastructure Security Agency (CISA).</p><p>The program must train DHS employees holding non-cybersecurity positions for work in matters relating to cybersecurity at the department. The curriculum for the program must be consistent with the National Initiative for Cybersecurity Education Framework.</p><p>The bill also requires CISA to issue an annual report to Congress describing the number of participants, positions into which participants were hired, and related details about the program.&nbsp; &nbsp;<br/><br/></p><!--tinycomments|2.1|data:application/json;base64,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-->

tv_txt: II Calendar No. 710 118th CONGRESS 2d Session H. R. 3208 [Report No. 118–304] IN THE SENATE OF THE UNITED STATES September 25, 2024 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs December 17 (legislative day, December 16), 2024 Reported by Mr. Peters , with an amendment Strike out all after the enacting clause and insert the part printed in italic AN ACT To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes.

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program; (D) copies of the reports submitted pursuant to (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 651 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating existing curricula as appropriate and applicable, such as the Federal Cyber Defense Skilling Academy and other initiatives or successor programs, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program and ensure cybersecurity personnel are appropriately coded to the National Initiative for Cybersecurity Education Framework and successor programs; (3) in accordance with the curriculum described in paragraph (1)— (A) shall make available cybersecurity training to employees of the Department; and (B) may, as appropriate, make available cybersecurity training to other Federal employees; and (4) shall, during the 7-year period beginning on the date of enactment of this section, annually submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program, which may include a skill inventory for applicable positions; (D) copies of the reports submitted pursuant to subsection (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) during the 7-year period beginning on the date of enactment of this section, submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–296 ; 116 Stat. 2135) is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .

December 17 (legislative day, December 16), 2024 Reported with an amendment

tv_txt: IIB 118th CONGRESS 2d Session H. R. 3208 IN THE SENATE OF THE UNITED STATES September 25, 2024 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs AN ACT To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes.

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program; (D) copies of the reports submitted pursuant to (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .

Passed the House of Representatives September 24, 2024. Kevin F. McCumber, Clerk.

tv_txt: IB 118th CONGRESS 2d Session H. R. 3208 IN THE HOUSE OF REPRESENTATIVES AN ACT To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes.

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program; (D) copies of the reports submitted pursuant to (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .

Passed the House of Representatives September 24, 2024. Kevin F. McCumber, Clerk.

tv_txt: IB Union Calendar No. 128 118th CONGRESS 1st Session H. R. 3208 [Report No. 118–161] IN THE HOUSE OF REPRESENTATIVES May 11, 2023 Ms. Jackson Lee (for herself, Mr. Payne , Mr. Thompson of Mississippi , Mr. Cohen , Ms. Clarke of New York , and Ms. Clark of Massachusetts ) introduced the following bill; which was referred to the Committee on Homeland Security July 27, 2023 Additional sponsor: Ms. Blunt Rochester July 27, 2023 Reported from the Committee on Homeland Security ; committed to the Committee of the Whole House on the State of the Union and ordered to be printed A BILL To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes.

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program; (D) copies of the reports submitted pursuant to (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .

July 27, 2023 Committed to the Committee of the Whole House on the State of the Union and ordered to be printed

tv_txt: I 118th CONGRESS 1st Session H. R. 3208 IN THE HOUSE OF REPRESENTATIVES May 11, 2023 Ms. Jackson Lee (for herself, Mr. Payne , Mr. Thompson of Mississippi , Mr. Cohen , Ms. Clarke of New York , and Ms. Clark of Massachusetts ) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes.

1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training; (C) a description of metrics used to measure the success of the Program; (D) copies of the reports submitted pursuant to (c)(1); and (E) any additional information relating to the duties specified in this subsection. (c) Duties of the Under Secretary for Management In carrying out the Program under subsection (a), the Under Secretary for Management shall— (1) submit to the Secretary an annual report on the status of vacancies in cybersecurity positions throughout the Department; (2) support efforts by the Director to identify and recruit individuals employed by the Department to participate in the Program; (3) implement policies, including continuing service agreements, to encourage participation in the Program by employees throughout the Department; and (4) conduct outreach to employees who complete the Program regarding cybersecurity job opportunities within the Department. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. DHS Cybersecurity On-the-Job Training Program. .