[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[H.R. 9520 Introduced in House (IH)]
<DOC>
118th CONGRESS
2d Session
H. R. 9520
To require the National Cyber Director to submit to Congress a plan to
establish an institute within the Federal Government to serve as a
centralized resource and training center for Federal cyber workforce
development.
_______________________________________________________________________
IN THE HOUSE OF REPRESENTATIVES
September 10, 2024
Mr. Fallon introduced the following bill; which was referred to the
Committee on Oversight and Accountability
_______________________________________________________________________
A BILL
To require the National Cyber Director to submit to Congress a plan to
establish an institute within the Federal Government to serve as a
centralized resource and training center for Federal cyber workforce
development.
Be it enacted by the Senate and House of Representatives of the
United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Federal Cyber Workforce Training Act
of 2024''.
SEC. 2. FEDERAL CYBER WORKFORCE DEVELOPMENT INSTITUTE.
(a) Definitions.--In this section:
(1) Agency.--The term ``agency'' has the meaning given the
term in section 551 of title 5, United States Code.
(2) Appropriate congressional committees.--The term
``appropriate congressional committees'' means--
(A) the Committee on Armed Services of the Senate;
(B) the Committee on Homeland Security and
Governmental Affairs of the Senate;
(C) the Committee on Armed Services of the House of
Representatives;
(D) the Committee on Homeland Security of the House
of Representatives; and
(E) the Committee on Oversight and Accountability
of the House of Representatives.
(3) Cyber work role.--The term ``cyber work role'' means--
(A) a role indicated in the NICE framework for new
hires and personnel seeking transition to mid-career
positions; and
(B) a role relating to work involving designing,
building, securing, operating, defending, and
protecting cyberspace resources.
(4) Director.--The term ``Director'' means the National
Cyber Director.
(5) Federal institute.--The term ``Federal institute''
means the Federal institute described in the plan required
under subsection (b)(1).
(6) Nice framework.--The term ``NICE framework'' means
Special Publication 800-181 of the National Institute of
Standards and Technology entitled ``Workforce Framework for
Cybersecurity (NICE Framework)'', or any successor document.
(7) Work-based learning.--The term ``work based learning''
has the meaning given the term in section 3 of the Carl D.
Perkins Career and Technical Education Act of 2006 (20 U.S.C.
2302).
(b) Requirement.--
(1) In general.--Not later than 180 days after the date of
enactment of this Act, the Director, in consultation with the
Secretary of Homeland Security, the Secretary of Defense, the
Director of the Office of Personnel Management, and the head of
any other agency the Director determines necessary, shall
submit to Congress and make publicly available a plan for the
establishment of a Federal institute to provide--
(A) training for personnel hired for cyber work
roles in the Federal Government, including new hires
and personnel seeking transition to mid-career
positions, which may include upskilling and reskilling
efforts; and
(B) training for personnel with responsibilities
for human resource functions relating to cyber
personnel.
(2) Institute functions.--The plan required under paragraph
(1) shall provide for the Federal institute to--
(A) provide modularized cyber work role specific
training, including hands-on learning and skill-based
assessments, to prepare newly hired Federal personnel
from a wide variety of academic and professional
backgrounds to per form effectively in Federal cyber
work roles;
(B) coordinate with the Secretary of Homeland
Security, the Secretary of Defense, and the heads of
other agencies determined necessary by the Director to
develop a cyber work role-specific curriculum for the
training provided under subparagraph (A)--
(i) in accordance with the NICE framework;
and
(ii) in consideration of other Federal
cyber training programs;
(C) prioritize entry-level positions in the
provision of curriculum development and training;
(D) address the training needs of--
(i) personnel seeking transition to 10 mid-
career positions; and
(ii) personnel with responsibilities for
human resources functions relating to cyber
personnel;
(E) include curriculum development and training for
Federal cyber workers seeking transition to mid-career
positions, which may include upskilling and reskilling
efforts;
(F) consider developing a specific module to
familiarize and train appropriate Federal Government
hiring managers and human resources staff in the unique
challenges in recruiting and hiring personnel for
Federal cyber work force roles;
(G) incorporate work-based learning in personnel
training;
(H) develop a badging system to communicate
qualification and proficiency for individuals who
successfully complete training through the Federal
institute with consideration of systems used by the
intelligence community;
(I) offer in-person and virtual options to
accommodate various learning environments for
individuals; and
(J) provide training to individuals irrespective of
whether an individual has a college degree or a college
degree in a cyber-related discipline.
(3) Plan elements.--The plan required under paragraph (1)
shall--
(A) recommend an organizational placement for the
Federal institute, which may include a single agency or
a combination of agencies;
(B) to the greatest extent practicable, align
training and tools, including cyber work roles and
competencies and the associated tasks, knowledge, and
skills from--
(i) the Special Publication of the National
Institute of Standards and Technology 800-181,
Revision 1, entitled ``National Initiative for
Cybersecurity Education Workforce Framework for
Cybersecurity'', or any successor special
publication; or
(ii) other applicable publications,
studies, or guidance of the Federal Government;
(C) identify--
(i) elements of the Federal institute and
its functions that could use existing
facilities, resources, and programs of the
Federal Government; and
(ii) elements of the Federal institute and
its functions that would require new
facilities, resources, and programs of the
Federal Government in order to implement the
plan required under paragraph (1);
(D) recommend a course curriculum, delivery method,
and length of curriculum for the training provided
under paragraph (1)(A) using Federal Government cyber
training programs as models, including the Joint Cyber
Analysis Course of the Department of Defense and the
Federal Cyber Defense Skilling Academy of the
Cybersecurity and Infrastructure Security Agency;
(E) recommend a policy for individuals who do not
complete required training;
(F) describe a security clearance process to
complete some level of security clearance for
appropriate individuals while individuals are enrolled
in training;
(G) recommend a governance structure for the
Federal institute that would ensure ongoing interagency
coordination in the development of a curriculum, the
provision of training, and other considerations the
Director determines appropriate;
(H) provide an estimate of the funding and new
authorities required to establish and operate the
Federal institute;
(I) describe any requirements for the Federal
institute to conduct work in a classified setting;
(J) identify how the Federal institute would--
(i) provide some or all of the training
required by paragraph (1)(A) through 5 academic
institutions from among academic institutions
that--
(I) are designated by the National
Security Agency as a National Center of
Academic Excellence in cybersecurity
for cyber defense, cyber research, and
cyber operations; and
(II) have an operational sensitive
compartmented information facility; and
(ii) select the 5 academic institutions
under clause (i);
(K) identify how the instructors of the Federal
institute will remain current with respect to
cybersecurity knowledge, skills and abilities through
scholarship or other means; and
(L) identify how the Federal institute will
maintain the quality and longevity of instructors.
(4) Consultation.--In developing a plan for the Federal
institute, the Director shall consult with the Director of the
Office of Personnel Management, the Chief Human Capital
Officers Council, the Chief Information Officers Council, and
the Chief Learning Officers Council to establish tools for
human resources professionals of the Federal Government to
develop the knowledge, skills and abilities required to manage
the career life cycle of cyber professionals from recruitment
to retirement.
(c) Briefing.--Not later than 270 days after the date of enactment
of this Act, the Director shall provide to the appropriate
congressional committees a briefing on the plan required under
subsection (b)(1), including an estimate of the funding and the
authorities necessary to implement the plan.
(d) No Additional Funds.--No additional funds are authorized to be
appropriated for the purpose of carrying out this Act.
<all>