,,ii  #aacth ,,congress  #b;d ,session  
,s4 #bcgb  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,may #ba1 #bjad
 ,mr4 ,bennet 7for himself and ,mr4     
,portman7 introduced the following bill2
 which was read twice and referred to   
the ,committee on ,homeland ,security   
and ,governmental ,affairs  ,a ,,bill   
,to provide additional oversight and    
guidance to the ,department of ,homeland
 ,security4  #a4  ,short title  ,this   
,act may be cited as the ,federal       
,cybersecurity ,workforce ,assessment   
,act4  #b4  ,definitions  ,in this ,act3
  7#a7  ,appropriate congressional      
committees ,the term appropriate        
congressional committees means--  7,a7  
the ,committee on ,homeland ,security   
and ,governmental ,affairs of the       
,senate2  7,b7 the ,committee on        
,homeland ,security of the ,house of    
,representatives2 and  7,c7 the         
,committee on ,house ,administration of 
the ,house of ,representatives4  7#b7   
,cybersecurity work category2 data      

element code2 specialty area ,the terms 
,cybersecurity ,work ,category1 ,data   
,element ,code1 and ,specialty ,area    
have the meanings given such terms in   
the ,office of ,personnel ,management's 
,guide to ,data ,standards4  7#c7       
,director ,the term ,director means the 
,director of the ,office of ,personnel  
,management4  7#d7 ,secretary ,the term 
,secretary means the ,secretary of      
,homeland ,security4  #c4  ,national    
,cybersecurity ,workforce ,measurement  
,initiative  7a7  ,in general  ,the head
 of each ,federal agency shall-- 7#a7   
identify all cybersecurity workforce    
positions within the agency2  7#b7      
determine the primary ,cybersecurity    
,work ,category and ,specialty ,area of 
such positions2 and  7#c7 assign the    
corresponding ,data ,element ,code1 as  
set forth in the ,office of ,personnel  
,management's ,guide to ,data ,standards
 which is aligned with the ,national    
,initiative for ,cybersecurity          
,education's ,national ,cybersecurity   

,workforce ,framework report1 in        
accordance with subsection 7b74  7b7    
,employment codes  7#a7 ,procedures ,not
 later than #ij days after the date of  
the enactment of this ,act1 the head of 
each ,federal agency shall establish    
procedures-- 7,a7 to identify open      
positions that include cybersecurity    
functions 7as defined in the ,,opm      
,guide to ,data ,standards72 and  7,b7  
to assign the appropriate employment    
code to each such position1 using agreed
 standards and definitions4  7#b7 ,code 
assignments ,not later than #i months   
after the date of the enactment of this 
,act1 the head of each ,federal agency  
shall assign the appropriate employment 
code to-- 7,a7 each employee within the 
agency who carries out cybersecurity    
functions2 and  7,b7 each open position 
within the agency that has been         
identified as having cybersecurity      
functions4  7c7  ,progress report  ,not 
later than #a year after the date of the
 enactment of this ,act1 the ,director  

shall submit a progress report on the   
implementation of this section to the   
appropriate congressional committees4   
#d4  ,identification of ,cybersecurity  
,work ,category and ,specialty ,areas of
 critical need  7a7  ,in general        
,beginning not later than #a year after 
the date on which the employment codes  
are assigned to employees pursuant to   
section #c7;b77#b71 and annually through
 #bjba1 the head of each ,federal       
agency1 in consultation with the        
,director and the ,secretary1 shall--   
7#a7 identify ,cybersecurity ,work      
,categories and ,specialty ,areas of    
critical need in the agency's           
cybersecurity workforce2 and  7#b7      
submit a report to the ,director that-- 
7,a7 describes the ,cybersecurity ,work 
,categories and ,specialty ,areas       
identified under paragraph 7#a72 and    
7,b7 substantiates the critical need    
designations4  7b7  ,guidance  ,the     
,director shall provide ,federal        
agencies with timely guidance for       

identifying ,cybersecurity ,work        
,categories and ,specialty ,areas of    
critical need1 including--  7#a7 current
 ,cybersecurity ,work ,categories and   
,specialty ,areas with acute skill      
shortages2 and  7#b7 ,cybersecurity     
,work ,categories and ,specialty ,areas 
with emerging skill shortages4  7c7     
,cybersecurity critical needs report    
,not later than #ah months after the    
date of the enactment of this ,act1 the 
,director1 in consultation with the     
,secretary1 shall--  7#a7 identify      
,specialty ,areas of critical need for  
cybersecurity workforce across all      
,federal agencies2 and  7#b7 submit a   
progress report on the implementation of
 this section to the appropriate        
congressional committees4  #e4          
,government ,accountability ,office     
status reports  ,the ,comptroller       
,general of the ,united ,states shall-- 
7#a7 analyze and monitor the            
implementation of sections #c and #d2   
and  7#b7 not later than #c years after 

the date of the enactment of this ,act1 
submit a report to the appropriate      
congressional committees that describes 
the status of such implementation4