[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[S. 4715 Reported in Senate (RS)]
<DOC>
Calendar No. 551
118th CONGRESS
2d Session
S. 4715
[Report No. 118-238]
To require the National Cyber Director to submit to Congress a plan to
establish an institute within the Federal Government to serve as a
centralized resource and training center for Federal cyber workforce
development.
_______________________________________________________________________
IN THE SENATE OF THE UNITED STATES
July 11 (legislative day, July 10), 2024
Mr. Rounds (for himself, Mr. Ossoff, and Ms. Rosen) introduced the
following bill; which was read twice and referred to the Committee on
Homeland Security and Governmental Affairs
November 12, 2024
Reported by Mr. Peters, with an amendment
[Strike out all after the enacting clause and insert the part printed
in italic]
_______________________________________________________________________
A BILL
To require the National Cyber Director to submit to Congress a plan to
establish an institute within the Federal Government to serve as a
centralized resource and training center for Federal cyber workforce
development.
Be it enacted by the Senate and House of Representatives of the
United States of America in Congress assembled,
<DELETED>SECTION 1. SHORT TITLE.</DELETED>
<DELETED> This Act may be cited as the ``Federal Cyber Workforce
Training Act of 2024''.</DELETED>
<DELETED>SEC. 2. FEDERAL CYBER WORKFORCE DEVELOPMENT
INSTITUTE.</DELETED>
<DELETED> (a) Definitions.--In this section:</DELETED>
<DELETED> (1) Agency.--The term ``agency'' has the meaning
given the term in section 551 of title 5, United States
Code.</DELETED>
<DELETED> (2) Appropriate congressional committees.--The
term ``appropriate congressional committees'' means--</DELETED>
<DELETED> (A) the Committee on Armed Services of the
Senate;</DELETED>
<DELETED> (B) the Committee on Homeland Security and
Governmental Affairs of the Senate;</DELETED>
<DELETED> (C) the Committee on Armed Services of the
House of Representatives;</DELETED>
<DELETED> (D) the Committee on Homeland Security of
the House of Representatives; and</DELETED>
<DELETED> (E) the Committee on Oversight and
Accountability of the House of
Representatives.</DELETED>
<DELETED> (3) Cyber work role.--The term ``cyber work role''
means--</DELETED>
<DELETED> (A) a role indicated in the NICE framework
for new hires and personnel seeking transition to mid-
career positions; and</DELETED>
<DELETED> (B) a role relating to work involving
designing, building, securing, operating, defending,
and protecting cyberspace resources.</DELETED>
<DELETED> (4) Director.--The term ``Director'' means the
National Cyber Director.</DELETED>
<DELETED> (5) Federal institute.--The term ``Federal
institute'' means the Federal institute described in the plan
required under subsection (b)(1).</DELETED>
<DELETED> (6) NICE framework.--The term ``NICE framework''
means Special Publication 800-181 of the National Institute of
Standards and Technology entitled ``Workforce Framework for
Cybersecurity (NICE Framework)'', or any successor
document.</DELETED>
<DELETED> (7) Work-based learning.--The term ``work-based
learning'' has the meaning given the term in section 3 of the
Carl D. Perkins Career and Technical Education Act of 2006 (20
U.S.C. 2302).</DELETED>
<DELETED> (b) Requirement.--</DELETED>
<DELETED> (1) In general.--Not later than 180 days after the
date of enactment of this Act, the Director, in consultation
with the Secretary of Homeland Security, the Secretary of
Defense, the Director of the Office of Personnel Management,
and the head of any other agency the Director determines
necessary, shall submit to Congress and make publicly available
a plan for the establishment of a Federal institute to
provide--</DELETED>
<DELETED> (A) training for personnel hired for cyber
work roles in the Federal Government, including new
hires and personnel seeking transition to mid-career
positions, which may include upskilling and reskilling
efforts; and</DELETED>
<DELETED> (B) training for personnel with
responsibilities for human resource functions relating
to cyber personnel.</DELETED>
<DELETED> (2) Institute functions.--The plan required under
paragraph (1) shall provide for the Federal institute to--
</DELETED>
<DELETED> (A) provide modularized cyber work role-
specific training, including hands-on learning and
skill-based assessments, to prepare newly hired Federal
personnel from a wide variety of academic and
professional backgrounds to perform effectively in
Federal cyber work roles;</DELETED>
<DELETED> (B) coordinate with the Secretary of
Homeland Security, the Secretary of Defense, and the
heads of other agencies determined necessary by the
Director to develop a cyber work role-specific
curriculum for the training provided under subparagraph
(A)--</DELETED>
<DELETED> (i) in accordance with the NICE
framework; and</DELETED>
<DELETED> (ii) in consideration of other
Federal cyber training programs;</DELETED>
<DELETED> (C) prioritize entry-level positions in
the provision of curriculum development and
training;</DELETED>
<DELETED> (D) address the training needs of--
</DELETED>
<DELETED> (i) personnel seeking transition
to mid-career positions; and</DELETED>
<DELETED> (ii) personnel with
responsibilities for human resources functions
relating to cyber personnel;</DELETED>
<DELETED> (E) include curriculum development and
training for Federal cyber workers seeking transition
to mid-career positions, which may include upskilling
and reskilling efforts;</DELETED>
<DELETED> (F) consider developing a specific module
to familiarize and train appropriate Federal Government
hiring managers and human resources staff in the unique
challenges in recruiting and hiring personnel for
Federal cyber work force roles;</DELETED>
<DELETED> (G) incorporate work-based learning in
personnel training;</DELETED>
<DELETED> (H) develop a badging system to
communicate qualification and proficiency for
individuals who successfully complete training through
the Federal institute with consideration of systems
used by the intelligence community;</DELETED>
<DELETED> (I) offer in-person and virtual options to
accommodate various learning environments for
individuals; and</DELETED>
<DELETED> (J) provide training to individuals
irrespective of whether an individual has a college
degree or a college degree in a cyber-related
discipline.</DELETED>
<DELETED> (3) Plan elements.--The plan required under
paragraph (1) shall--</DELETED>
<DELETED> (A) recommend an organizational placement
for the Federal institute, which may include a single
agency or a combination of agencies;</DELETED>
<DELETED> (B) to the greatest extent practicable,
align training and tools, including cyber work roles
and competencies and the associated tasks, knowledge,
and skills from--</DELETED>
<DELETED> (i) the Special Publication of the
National Institute of Standards and Technology
800-181, Revision 1, entitled ``National
Initiative for Cybersecurity Education
Workforce Framework for Cybersecurity'', or any
successor special publication; or</DELETED>
<DELETED> (ii) other applicable
publications, studies, or guidance of the
Federal Government;</DELETED>
<DELETED> (C) identify--</DELETED>
<DELETED> (i) elements of the Federal
institute and its functions that could use
existing facilities, resources, and programs of
the Federal Government; and</DELETED>
<DELETED> (ii) elements of the Federal
institute and its functions that would require
new facilities, resources, and programs of the
Federal Government in order to implement the
plan required under paragraph (1);</DELETED>
<DELETED> (D) recommend a course curriculum,
delivery method, and length of curriculum for the
training provided under paragraph (1)(A) using Federal
Government cyber training programs as models, including
the Joint Cyber Analysis Course of the Department of
Defense and the Federal Cyber Defense Skilling Academy
of the Cybersecurity and Infrastructure Security
Agency;</DELETED>
<DELETED> (E) recommend a policy for individuals who
do not complete required training;</DELETED>
<DELETED> (F) describe a security clearance process
to complete some level of security clearance for
appropriate individuals while individuals are enrolled
in training;</DELETED>
<DELETED> (G) recommend a governance structure for
the Federal institute that would ensure ongoing
interagency coordination in the development of a
curriculum, the provision of training, and other
considerations the Director determines
appropriate;</DELETED>
<DELETED> (H) provide an estimate of the funding and
new authorities required to establish and operate the
Federal institute;</DELETED>
<DELETED> (I) describe any requirements for the
Federal institute to conduct work in a classified
setting;</DELETED>
<DELETED> (J) identify how the Federal institute
would--</DELETED>
<DELETED> (i) provide some or all of the
training required by paragraph (1)(A) through 5
academic institutions from among academic
institutions that--</DELETED>
<DELETED> (I) are designated by the
National Security Agency as a National
Center of Academic Excellence in
cybersecurity for cyber defense, cyber
research, and cyber operations;
and</DELETED>
<DELETED> (II) have an operational
sensitive compartmented information
facility; and</DELETED>
<DELETED> (ii) select the 5 academic
institutions under clause (i);</DELETED>
<DELETED> (K) identify how the instructors of the
Federal institute will remain current with respect to
cybersecurity knowledge, skills and abilities through
scholarship or other means; and</DELETED>
<DELETED> (L) identify how the Federal institute
will maintain the quality and longevity of
instructors.</DELETED>
<DELETED> (4) Consultation.--In developing a plan for the
Federal institute, the Director shall consult with the Director
of the Office of Personnel Management, the Chief Human Capital
Officers Council, the Chief Information Officers Council, and
the Chief Learning Officers Council to establish tools for
human resources professionals of the Federal Government to
develop the knowledge, skills and abilities required to manage
the career life cycle of cyber professionals from recruitment
to retirement.</DELETED>
<DELETED> (c) Briefing.--Not later than 270 days after the date of
enactment of this Act, the Director shall provide to the appropriate
congressional committees a briefing on the plan required under
subsection (b)(1), including an estimate of the funding and the
authorities necessary to implement the plan.</DELETED>
<DELETED> (d) No Additional Funds.--No additional funds are
authorized to be appropriated for the purpose of carrying out this
Act.</DELETED>
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Federal Cyber Workforce Training Act
of 2024''.
SEC. 2. FEDERAL CYBER WORKFORCE DEVELOPMENT INSTITUTE.
(a) Definitions.--In this section:
(1) Agency.--The term ``agency'' has the meaning given the
term in section 551 of title 5, United States Code.
(2) Appropriate congressional committees.--The term
``appropriate congressional committees'' means--
(A) the Committee on Armed Services of the Senate;
(B) the Committee on Homeland Security and
Governmental Affairs of the Senate;
(C) the Committee on Armed Services of the House of
Representatives;
(D) the Committee on Homeland Security of the House
of Representatives; and
(E) the Committee on Oversight and Accountability
of the House of Representatives.
(3) Cyber work role.--The term ``cyber work role'' means--
(A) a role indicated in the NICE framework for new
hires and personnel seeking transition to mid-career
positions; and
(B) a role relating to work involving designing,
building, securing, operating, defending, and
protecting cyberspace resources.
(4) Director.--The term ``Director'' means the National
Cyber Director.
(5) Federal institute.--The term ``Federal institute''
means the Federal institute described in the plan required
under subsection (b)(1).
(6) NICE framework.--The term ``NICE framework'' means
Special Publication 800-181 of the National Institute of
Standards and Technology entitled ``Workforce Framework for
Cybersecurity (NICE Framework)'', or any successor document.
(7) Work-based learning.--The term ``work-based learning''
has the meaning given the term in section 3 of the Carl D.
Perkins Career and Technical Education Act of 2006 (20 U.S.C.
2302).
(b) Requirement.--
(1) In general.--Not later than 180 days after the date of
enactment of this Act, the Director, in consultation with the
Secretary of Homeland Security, the Secretary of Defense, the
Director of the Office of Personnel Management, and the head of
any other agency the Director determines necessary, shall
submit to Congress and make publicly available a plan for the
establishment of a Federal institute to provide--
(A) training for personnel hired for cyber work
roles in the Federal Government, including new hires
and personnel seeking transition to mid-career
positions, which may include upskilling and reskilling
efforts; and
(B) training for personnel with responsibilities
for human resource functions relating to cyber
personnel.
(2) Institute functions.--The plan required under paragraph
(1) shall provide for the Federal institute to--
(A) provide modularized cyber work role-specific
training, including hands-on learning and skill-based
assessments, to prepare newly hired Federal personnel
from a wide variety of academic and professional
backgrounds to perform effectively in Federal cyber
work roles;
(B) coordinate with the Secretary of Homeland
Security, the Secretary of Defense, and the heads of
other agencies determined necessary by the Director to
develop a cyber work role-specific curriculum for the
training provided under subparagraph (A)--
(i) in accordance with the NICE framework;
and
(ii) in consideration of other Federal
cyber training programs;
(C) prioritize entry-level positions in the
provision of curriculum development and training;
(D) address the training needs of--
(i) personnel seeking transition to mid-
career positions; and
(ii) personnel with responsibilities for
human resources functions relating to cyber
personnel;
(E) include curriculum development and training for
Federal cyber workers seeking transition to mid-career
positions, which may include upskilling and reskilling
efforts;
(F) consider developing a specific module to
familiarize and train appropriate Federal Government
hiring managers and human resources staff in the unique
challenges in recruiting and hiring personnel for
Federal cyber work force roles;
(G) incorporate work-based learning in personnel
training;
(H) develop a badging system to communicate
qualification and proficiency for individuals who
successfully complete training through the Federal
institute with consideration of systems used by the
intelligence community;
(I) offer in-person and virtual options to
accommodate various learning environments for
individuals; and
(J) provide training to individuals irrespective of
whether an individual has a college degree or a college
degree in a cyber-related discipline.
(3) Plan elements.--The plan required under paragraph (1)
shall--
(A) recommend an organizational placement for the
Federal institute, which may include a single agency or
a combination of agencies;
(B) to the greatest extent practicable, align
training and tools, including cyber work roles and
competencies and the associated tasks, knowledge, and
skills from--
(i) the NICE framework; or
(ii) other applicable publications,
studies, or guidance of the Federal Government;
(C) identify--
(i) elements of the Federal institute and
its functions that could use existing
facilities, resources, and programs of the
Federal Government; and
(ii) elements of the Federal institute and
its functions that would require new
facilities, resources, and programs of the
Federal Government in order to implement the
plan required under paragraph (1);
(D) recommend a course curriculum, delivery method,
and length of curriculum for the training provided
under paragraph (1)(A) using Federal Government cyber
training programs as models, including the Joint Cyber
Analysis Course of the Department of Defense and the
Federal Cyber Defense Skilling Academy of the
Cybersecurity and Infrastructure Security Agency;
(E) recommend a policy for individuals who do not
complete required training;
(F) describe a security clearance process to
complete some level of security clearance for
appropriate individuals while individuals are enrolled
in training;
(G) recommend a governance structure for the
Federal institute that would ensure ongoing interagency
coordination in the development of a curriculum, the
provision of training, and other considerations the
Director determines appropriate;
(H) provide an estimate of the funding and new
authorities required to establish and operate the
Federal institute;
(I) describe any requirements for the Federal
institute to conduct work in a classified setting;
(J) identify how the Federal institute would--
(i) provide some or all of the training
required by paragraph (1)(A) through 5 academic
institutions from among academic institutions
that--
(I) are designated by the National
Security Agency as a National Center of
Academic Excellence in cybersecurity
for cyber defense, cyber research, and
cyber operations; and
(II) have an operational sensitive
compartmented information facility; and
(ii) select the 5 academic institutions
under clause (i);
(K) identify how the instructors of the Federal
institute will remain current with respect to
cybersecurity knowledge, skills, and abilities through
scholarship or other means; and
(L) identify how the Federal institute will
maintain the quality and longevity of instructors.
(4) Consultation.--In developing a plan for the Federal
institute, the Director shall consult with the Director of the
Office of Personnel Management, the Chief Human Capital
Officers Council, the Chief Information Officers Council, and
the Chief Learning Officers Council to establish tools for
human resources professionals of the Federal Government to
develop the knowledge, skills, and abilities required to manage
the career life cycle of cyber professionals from recruitment
to retirement.
(c) Briefing.--Not later than 280 days after the date of enactment
of this Act, the Director shall provide to the appropriate
congressional committees a briefing on the plan required under
subsection (b)(1), including an estimate of the funding and the
authorities necessary to implement the plan.
(d) No Additional Funds.--No additional funds are authorized to be
appropriated for the purpose of carrying out this Act.
Calendar No. 551
118th CONGRESS
2d Session
S. 4715
[Report No. 118-238]
_______________________________________________________________________
A BILL
To require the National Cyber Director to submit to Congress a plan to
establish an institute within the Federal Government to serve as a
centralized resource and training center for Federal cyber workforce
development.
_______________________________________________________________________
November 12, 2024
Reported with an amendment