#aacth ,,congress #b;d ,session ,h4 ,r4 #cajg ,,an ,,act ,to require the ,secretary of ,homeland ,security to establish cybersecurity occupation classifications1 assess the cybersecurity workforce1 develop a strategy to address identified gaps in the cybersecurity workforce1 and for other purposes4 #a4 ,homeland security cybersecurity workforce 7a7 ,in general ,subtitle ,c of title ,,ii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #ada et seq47 is amended by adding at the end the following new section3 #bbf4 ,cybersecurity occupation categories1 workforce assessment1 and strategy 7a7 ,short title ,this section may be cited as the ,homeland ,security ,cybersecurity ,boots-on-the-,ground ,act4 7b7 ,cybersecurity occupation categories 7#a7 ,in general ,not later than #ij days after the date of the enactment of this section1 the ,secretary shall develop and issue comprehensive occupation categories for individuals performing activities in furtherance of the cybersecurity mission of the ,department4 7#b7 ,applicability ,the ,secretary shall ensure that the comprehensive occupation categories issued under paragraph 7#a7 are used throughout the ,department and are made available to other ,federal agencies4 7c7 ,cybersecurity workforce assessment 7#a7 ,in general ,not later than #ahj days after the date of the enactment of this section and annually thereafter1 the ,secretary shall assess the readiness and capacity of the workforce of the ,department to meet its cybersecurity mission4 7#b7 ,contents ,the assessment required under paragraph 7#a7 shall1 at a minimum1 include the following3 7,a7 ,information where cybersecurity positions are located within the ,department1 specified in accordance with the cybersecurity occupation categories issued under subsection 7b74 7,b7 ,information on which cybersecurity positions are-- 7i7 performed by-- 7,i7 permanent full time departmental employees1 together with demographic information about such employees' race1 ethnicity1 gender1 disability status1 and veterans status2 7,,ii7 individuals employed by independent contractors2 and 7,,iii7 individuals employed by other ,federal agencies1 including the ,national ,security ,agency2 and 7ii7 vacant4 7,c7 ,the number of individuals hired by the ,department pursuant to the authority granted to the ,secretary in #bjji to permit the ,secretary to fill #a1jjj cybersecurity positions across the ,department over a three year period1 and information on what challenges1 if any1 were encountered with respect to the implementation of such authority4 7,d7 ,information on vacancies within the ,department's cybersecurity supervisory workforce1 from first line supervisory positions through senior departmental cybersecurity positions4 7,e7 ,information on the percentage of individuals within each cybersecurity occupation category who received essential training to perform their jobs1 and in cases in which such training is not received1 information on what challenges1 if any1 were encountered with respect to the provision of such training4 7,f7 ,information on recruiting costs incurred with respect to efforts to fill cybersecurity positions across the ,department in a manner that allows for tracking of overall recruiting and identifying areas for better coordination and leveraging of resources within the ,department4 7d7 ,workforce strategy 7#a7 ,in general ,not later than #ahj days after the date of the enactment of this section1 the ,secretary shall develop1 maintain1 and1 as necessary1 update1 a comprehensive workforce strategy that enhances the readiness1 capacity1 training1 recruitment1 and retention of the cybersecurity workforce of the ,department4 7#b7 ,contents ,the comprehensive workforce strategy developed under paragraph 7#a7 shall include-- 7,a7 a multiphased recruitment plan1 including relating to experienced professionals1 members of disadvantaged or underserved communities1 the unemployed1 and veterans2 7,b7 a #e-year implementation plan2 7,c7 a #aj-year projection of the ,department's cybersecurity workforce needs2 and 7,d7 obstacles impeding the hiring and development of a cybersecurity workforce at the ,department4 7e7 ,information security training ,not later than #bgj days after the date of the enactment of this section1 the ,secretary shall establish and maintain a process to verify on an ongoing basis that individuals employed by independent contractors who serve in cybersecurity positions at the ,department receive initial and recurrent information security training comprised of general security awareness training necessary to perform their job functions1 and role-based security training that is commensurate with assigned responsibilities4 ,the ,secretary shall maintain documentation to ensure that training provided to an individual under this subsection meets or exceeds requirements for such individual's job function4 7f7 ,updates ,the ,secretary shall submit to the appropriate congressional committees annual updates regarding the cybersecurity workforce assessment required under subsection 7c71 information on the progress of carrying out the comprehensive workforce strategy developed under subsection 7d71 and information on the status of the implementation of the information security training required under subsection 7e74 7g7 ,,gao study ,the ,secretary shall provide the ,comptroller ,general of the ,united ,states with information on the cybersecurity workforce assessment required under subsection 7c7 and progress on carrying out the comprehensive workforce strategy developed under subsection 7d74 ,the ,comptroller ,general shall submit to the ,secretary and the appropriate congressional committees a study on such assessment and strategy4 7h7 ,cybersecurity ,fellowship ,program ,not later than #abj days after the date of the enactment of this section1 the ,secretary shall submit to the appropriate congressional committees a report on the feasibility of establishing a ,cybersecurity ,fellowship ,program to offer a tuition payment plan for undergraduate and doctoral candidates who agree to work for the ,department for an agreed-upon period of time4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of such ,act is amended by adding after the item relating to section #bbe the following new item3 ,sec4 #bbf4 ,cybersecurity occupation categories1 workforce assessment1 and strategy4 4 #b4 ,personnel authorities 7a7 ,in general ,subtitle ,c of title ,,ii of the ,homeland ,security ,act of #bjjb1 as amended by section #a of this ,act1 is further amended by adding at the end the following new section3 #bbg4 ,personnel authorities 7a7 ,in general 7#a7 ,personnel authorities ,the ,secretary may exercise with respect to qualified employees of the ,department the same authority that the ,secretary of ,defense has with respect to civilian intelligence personnel and the scholarship program under sections #afja1 #afjb1 #afjc1 and #bbjj;a of title #aj1 ,united ,states ,code1 to establish as positions in the excepted service1 appoint individuals to such positions1 fix pay1 and pay a retention bonus to any employee appointed under this section if the ,secretary determines that such is needed to retain essential personnel4 ,before announcing the payment of a bonus under this paragraph1 the ,secretary shall submit to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate a written explanation of such determination4 ,such authority shall be exercised-- 7,a7 to the same extent and subject to the same conditions and limitations that the ,secretary of ,defense may exercise such authority with respect to civilian intelligence personnel of the ,department of ,defense2 and 7,b7 in a manner consistent with the merit system principles set forth in section #bcja of title #e1 ,united ,states ,code4 7#b7 ,civil service protections ,sections #abba and #bcjb1 and chapter #ge of title #e1 ,united ,states ,code1 shall apply to the positions established pursuant to the authorities provided under paragraph 7#a74 7#c7 ,plan for execution of authorities ,not later than #abj days after the date of the enactment of this section1 the ,secretary shall submit to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate a report that contains a plan for the use of the authorities provided under this subsection4 7b7 ,annual report ,not later than one year after the date of the enactment of this section and annually thereafter for four years1 the ,secretary shall submit to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate a detailed report 7including appropriate metrics on actions occurring during the reporting period7 that discusses the processes used by the ,secretary in implementing this section and accepting applications1 assessing candidates1 ensuring adherence to veterans' preference1 and selecting applicants for vacancies to be filled by a qualified employee4 7c7 ,definition of qualified employee ,in this section1 the term qualified employee means an employee who performs functions relating to the security of ,federal civilian information systems1 critical infrastructure information systems1 or networks of either of such systems4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of such ,act is amended by adding after the item relating to section #bbf 7as added by section #a of this ,act7 the following new item3 ,sec4 #bbg4 ,personnel authorities4 4 #c4 ,clarification regarding authorization of appropriations ,no additional amounts are authorized to be appropriated by reason of this ,act or the amendments made by this ,act4 ,passed the ,house of ,representatives ,july #bh1 #bjad4;,clerk4