,,ii ,cal5d> ,no4 #eec #aad? ,,congress 
#b;d ,session  ,h4 ,r4 #ccfa ,report    
,no4 #aad-big ,,9 ,,! ,,s5ate ,,( ,,!   
,,unit$ ,,/ates  ,novemb] #c1           
#bjae,receiv$2 read twice & ref]r$ to ! 
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs  ,july #ab1        
#bjaf,report$ by ,mr4 ,johnson1 ) an    
amendment,strike out all aft] ! enact+  
clause & ins]t ! "p pr9t$ 9 italic  ,,an
 ,,act  ,to am5d ! ,homel& ,security    
,act ( #bjjb to e/abli% ! ,insid] ,?reat
 ,program1 & = o!r purposes4  #a4 ,%ort 
title ,?is ,act may be cit$ z !         
,dep>tm5t ( ,homel& ,security ,insid]   
,?reat & ,mitigation ,act ( #bjae4  #b4 
,e/abli%m5t ( ,insid] ,?reat ,program   
7a7 ,9 g5]al ,title ,i ( ! ,homel&      
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#aaa et seq47 is am5d$ by add+ at ! end 
! foll[+ new section3  #ajd4 ,insid]    
,?reat ,program  7a7 ,e/abli%m5t ,!     
,secret>y %all e/abli% an ,insid] ,?reat
 ,program )9 ! ,dep>tm5t4 ,su* ,program 
%all-- 7#a7 provide tra9+ & education = 

,dep>tm5t p]sonnel to id5tify1 prev5t1  
mitigate1 & respond to insid] ?reat     
risks to ! ,dep>tm5t's critical assets2 
7#b7 provide inve/igative support reg>d+
 pot5tial insid] ?reats t may pose a    
risk to ! ,dep>tm5t's critical assets2 &
  7#c7 conduct risk mitigation          
activities = insid] ?reats4  7b7 ,/e]+  
,committee  7#a7 ,9 g5]al ,! ,secret>y  
%all e/abli% a ,/e]+ ,committee )9 !    
,dep>tm5t4 ,! ,"u ,secret>y =           
,intellig5ce & ,analysis %all s]ve z !  
,*air ( ! ,/e]+ ,committee4 ,! ,*ief    
,security ,(fic] %all s]ve z ! ,vice    
,*air4 ,! ,/e]+ ,committee %all be      
compris$ ( repres5tatives ( ! ,(fice (  
,intellig5ce & ,analysis1 ! ,(fice ( !  
,*ief ,in=mation ,(fic]1 ! ,(fice ( !   
,g5]al ,c\nsel1 ! ,(fice = ,civil       
,rights & ,civil ,lib]ties1 ! ,privacy  
,(fice1 ! ,(fice ( ! ,*ief ,human       
,capital ,(fic]1 ! ,(fice ( ! ,*ief     
,f9ancial ,(fic]1 ! ,f$]al ,protective  
,s]vice1 ! ,(fice ( ! ,*ief ,procurem5t 
,(fic]1 ! ,sci5ce & ,te*nology          

,directorate1 & o!r compon5ts or (fices 
( ! ,dep>tm5t z appropriate4 ,su*       
repres5tatives %all meet on a regul>    
basis to discuss cases & issues relat$  
to insid] ?reats to ! ,dep>tm5t's       
critical assets1 9 accordance )         
subsection 7a74  7#b7 ,responsibilities 
,n lat] ?an #a ye> aft] ! date ( !      
enactm5t ( ?is section1 ! ,"u ,secret>y 
= ,intellig5ce & ,analysis & ! ,*ief    
,security ,(fic]1 9 coord9ation ) !     
,/e]+ ,committee e/abli%$ pursuant to   
p>agraph 7#a71 %all--  7,a7 develop a   
holi/ic /rategy = ,dep>tm5t-wide ef=ts  
to id5tify1 prev5t1 mitigate1 & respond 
to insid] ?reats to ! ,dep>tm5t's       
critical assets2  7,b7 develop a plan to
 implem5t ! insid] ?reat measures       
id5tifi$ 9 ! /rategy develop$ "u        
subp>agraph 7,a7 across ! compon5ts &   
(fices ( ! ,dep>tm5t2  7,c7 docum5t     
insid] ?reat policies & controls2  7,d7 
conduct a basel9e risk assessm5t (      
insid] ?reats pos$ to ! ,dep>tm5t's     
critical assets2  7,e7 exam9e exi/+     

programmatic & te*nology be/ practices  
adopt$ by ! ,f$]al ,gov]nm5t1 indu/ry1 &
 rese>* in/itutions to implem5t         
solutions t are validat$ &              
co/-effective2  7,f7 develop a timel9e =
 deploy+ workplace monitor+ te*nologies1
 employee aw>5ess campaigns1 & education
 & tra9+ programs relat$ to id5tify+1   
prev5t+1 mitigat+1 & respond+ to        
pot5tial insid] ?reats to ! ,dep>tm5t's 
critical assets2  7,g7 require ! ,*air &
 ,vice ,*air ( ! ,/e]+ ,committee to    
consult ) ! ,"u ,secret>y = ,sci5ce &   
,te*nology & o!r appropriate /akehold]s 
to ensure ! ,insid] ,?reat ,program is  
in=m$1 on an ongo+ basis1 by curr5t     
in=mation reg>d+ ?reats1 beset          
practices1 & available te*nology2 &     
7,h7 develop1 collect1 & report metrics 
on ! effectiv5ess ( ! ,dep>tm5t's insid]
 ?reat mitigation ef=ts4  7c7 ,report ,n
 lat] ?an #b ye>s aft] ! date ( !       
enactm5t ( ?is section & ! bi5nially    
!reaft] = ! next #d ye>s1 ! ,secret>y   
%all submit to ! ,committee on ,homel&  

,security & ! ,p]man5t ,select          
,committee on ,intellig5ce ( ! ,h\se (  
,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
 & ! ,select ,committee on ,intellig5ce 
( ! ,s5ate a report on h[ ! ,dep>tm5t & 
its compon5ts & (fices h implem5t$ !    
/rategy develop$ "u subsection          
7b77#b77;,a71 ! /atus ( ! ,dep>tm5t's   
risk assessm5t ( critical assets1 !     
types ( insid] ?reat tra9+ conduct$1 !  
numb] ( ,dep>tm5t employees :o h receiv$
 su* tra9+1 & in=mation on !            
effectiv5ess ( ! ,insid] ,?reat         
,program1 bas$ on metrics "u subsection 
7b77#b77;,h74  7d7 ,def9itions ,9 ?is   
section3 7#a7 ,critical assets ,! t]m   
critical assets means ! p1 facilities1  
in=mation1 & te*nology requir$ = !      
,dep>tm5t to fulfill its mission4  7#b7 
,insid] ,! t]m insid] means-- 7,a7 any  
p]son :o has access to classifi$        
national security in=mation & is employ$
 by1 detail$ to1 or assign$ to !        
,dep>tm5t1 includ+ memb]s ( ! ,arm$     

,=ces1 exp]ts or consultants to !       
,dep>tm5t1 indu/rial or comm]cial       
contractors1 lic5sees1 c]tificate       
hold]s1 or grantees ( ! ,dep>tm5t1      
includ+ all subcontractors1 p]sonal     
s]vices contractors1 or any o!r category
 ( p]son :o acts = or on behalf ( !     
,dep>tm5t1 z det]m9$ by ! ,secret>y2 or 
7,b7 ,/ate1 local1 tribal1 t]ritorial1 &
 private sector p]sonnel :o possess     
security cle>ances grant$ by !          
,dep>tm5t4  7#c7 ,insid] ?reat ,! t]m   
insid] ?reat means ! ?reat t an insid] w
 use 8 or h] au?oriz$ access1 witt+ly or
 unwitt+ly1 to d h>m to ! security ( !  
,unit$ ,/ates1 includ+ damage to !      
,unit$ ,/ates ?r\gh espionage1 t]rorism1
 ! unau?oriz$ disclosure ( classifi$    
national security in=mation1 or ?r\gh ! 
loss or degradation ( dep>tm5tal        
res\rces or capabilities4  4  7b7       
,cl]ical am5dm5t ,! table ( cont5ts ( ! 
,homel& ,security ,act ( #bjjb is am5d$ 
by ins]t+ aft] ! item relat+ to section 
#ajc ! foll[+ new item3  ,sec4 #ajd4    

,insid] ,?reat ,program4  4  #a4 ,%ort  
title ,?is ,act may be cit$ z !         
,dep>tm5t ( ,homel& ,security ,insid]   
,?reat & ,mitigation ,act ( #bjaf4  #b4 
,e/abli%m5t ( ,insid] ,?reat ,program   
7a7 ,9 g5]al ,title ,i ( ! ,homel&      
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#aaa et seq47 is am5d$ by add+ at ! end 
! foll[+3  #ajd4 ,insid] ,?reat ,program
  7a7 ,e/abli%m5t ,! ,secret>y %all     
e/abli% an ,insid] ,?reat ,program )9 ! 
,dep>tm5t1 :i* %all-- 7#a7 provide tra9+
 & education = employees ( ! ,dep>tm5t  
to id5tify1 prev5t1 mitigate1 & respond 
to insid] ?reat risks to ! ,dep>tm5t's  
critical assets2  7#b7 provide          
inve/igative support reg>d+ pot5tial    
insid] ?reats t may pose a risk to !    
,dep>tm5t's critical assets2 &  7#c7    
conduct risk mitigation activities =    
insid] ?reats4  7b7 ,/e]+ ,committee    
7#a7 ,9 g5]al  7,a7 ,e/abli%m5t ,!      
,secret>y %all e/abli% a ,/e]+          
,committee )9 ! ,dep>tm5t4  7,b7        
,memb]%ip ,! memb]%ip ( ! ,/e]+         

,committee %all be z foll[s3 7i7 ,! ,"u 
,secret>y = ,intellig5ce & ,analysis    
%all s]ve z ! ,*airp]son ( ! ,/e]+      
,committee4  7ii7 ,! ,*ief ,security    
,(fic] %all s]ve z ! ,vice ,*airp]son ( 
! ,/e]+ ,committee4  7iii7 ,! o!r memb]s
 ( ! ,/e]+ ,committee %all be compris$ (
 repres5tatives ( ! ,(fice (            
,intellig5ce & ,analysis1 ! ,(fice ( !  
,*ief ,in=mation ,(fic]1 ! ,(fice ( !   
,g5]al ,c\nsel1 ! ,(fice = ,civil       
,rights & ,civil ,lib]ties1 ! ,privacy  
,(fice1 ! ,(fice ( ! ,*ief ,human       
,capital ,(fic]1 ! ,(fice ( ! ,*ief     
,f9ancial ,(fic]1 ! ,f$]al ,protective  
,s]vice1 ! ,(fice ( ! ,*ief ,procurem5t 
,(fic]1 ! ,sci5ce & ,te*nology          
,directorate1 & o!r compon5ts or (fices 
( ! ,dep>tm5t1 z appropriate4  7,c7     
,meet+s ,! memb]s ( ! ,/e]+ ,committee  
%all meet on a regul> basis to discuss  
cases & issues relat$ to insid] ?reats  
to ! ,dep>tm5t's critical assets1 9     
accordance ) subsection 7a74  7#b7      
,responsibilities ,n lat] ?an #a ye>    

aft] ! date ( enactm5t ( ?is section1 ! 
,"u ,secret>y = ,intellig5ce & ,analysis
 & ! ,*ief ,security ,(fic]1 9          
coord9ation ) ! ,/e]+ ,committee1 %all--
  7,a7 develop a holi/ic /rategy =      
,dep>tm5t-wide ef=ts to id5tify1 prev5t1
 mitigate1 & respond to insid] ?reats to
 ! ,dep>tm5t's critical assets2  7,b7   
develop a plan to implem5t ! insid]     
?reat measures id5tifi$ 9 ! /rategy     
develop$ "u subp>agraph 7,a7 across !   
compon5ts & (fices ( ! ,dep>tm5t2  7,c7 
docum5t insid] ?reat policies &         
controls2  7,d7 conduct a basel9e risk  
assessm5t ( insid] ?reats pos$ to !     
,dep>tm5t's critical assets2  7,e7      
exam9e programmatic & te*nology be/     
practices adopt$ by ! ,f$]al ,gov]nm5t1 
indu/ry1 & rese>* in/itutions to        
implem5t solutions t are validat$ &     
co/-effective2  7,f7 develop a timel9e =
 deploy+ workplace monitor+ te*nologies1
 employee aw>5ess campaigns1 & education
 & tra9+ programs relat$ to id5tify+1   
prev5t+1 mitigat+1 & respond+ to        

pot5tial insid] ?reats to ! ,dep>tm5t's 
critical assets2  7,g7 consult ) ! ,"u  
,secret>y = ,sci5ce & ,te*nology & o!r  
appropriate /akehold]s to ensure !      
,insid] ,?reat ,program is in=m$1 on an 
ongo+ basis1 by curr5t in=mation reg>d+ 
?reats1 be/ practices1 & available      
te*nology2 &  7,h7 develop1 collect1 &  
report metrics on ! effectiv5ess ( !    
,dep>tm5t's insid] ?reat mitigation     
ef=ts4  7c7 ,discipl9e ( employees      
engag$ 9 insid] misconduct  7#a7 ,9     
g5]al ,9 accordance ) p>agraph 7#b71 !  
head ( an ag5cy or a compon5t ( an ag5cy
 employ+ an insid] employee %all        
propose--  7,a7 = an insid] employee :om
 an appropriate entity det]m9es kn[+ly  
or recklessly engag$ 9 insid]           
misconduct1 removal2 &  7,b7 = an insid]
 employee :om an appropriate entity     
det]m9es neglig5tly engag$ 9 insid]     
misconduct--  7i7 an adv]se action t is 
n less ?an a #ab-;day susp5sion1 )      
respect to ! fir/ in/ance2 &  7ii7      
removal1 = any subsequ5t in/ance4  7#b7 

,proc$ures  7,a7 ,notice ,an insid]     
employee aga9/ :om an adv]se action "u  
p>agraph 7#a7 is propos$ is entitl$ to  
writt5 notice4  7,b7 ,answ] & evid5ce   
7i7 ,9 g5]al ,an insid] employee :o is  
notifi$ "u subp>agraph 7,a7 t ! insid]  
employee is ! subject ( a propos$ adv]se
 action "u p>agraph 7#a7 is entitl$ to  
#ad days foll[+ su* notification to     
answ] & furni% evid5ce 9 support ( !    
answ]4  7ii7 ,no evid5ce ,aft] ! end ( !
 #ad-;day p]iod describ$ 9 clause 7i71  
if an insid] employee does n furni%     
evid5ce z describ$ 9 clause 7i7 or if ! 
head ( ! ag5cy or compon5t ( ! ag5cy    
employ+ ! insid] employee det]m9es t su*
 evid5ce is n suffici5t to rev]se !     
propos$ adv]se action1 ! head ( ! ag5cy 
or compon5t ( ! ag5cy %all c>ry out !   
adv]se action4  7,c7 ,scope ( proc$ures 
,p>agraphs 7#a7 & 7#b7 ( subsection 7b7 
& subsection 7c7 ( section #geac ( title
 #e1 ,unit$ ,/ates ,code1 & p>agraphs   
7#a7 & 7#b7 ( subsection 7b7 &          
subsection 7c7 ( #gedc ( title #e1      

,unit$ ,/ates ,code1 %all n apply )     
respect to an adv]se action c>ri$ out "u
 ?is subsection4  7#c7 ,limitation on   
o!r adv]se actions ,) respect to insid] 
misconduct1 if ! head ( ! ag5cy or      
compon5t ( ! ag5cy employ+ an insid]    
employee c>ries out an adv]se action    
aga9/ ! insid] employee "u ano!r        
provision ( law1 ! head ( ! ag5cy or    
compon5t ( ! ag5cy may c>ry out an      
additional adv]se action "u ?is         
subsection bas$ on ! same insid]        
misconduct4  7d7 ,report ,n lat] ?an #b 
ye>s aft] ! date ( ! enactm5t ( ?is     
section1 & e #b ye>s !reaft] = ! next #d
 ye>s1 ! ,secret>y %all submit to !     
,committee on ,homel& ,security & !     
,p]man5t ,select ,committee on          
,intellig5ce ( ! ,h\se ( ,repres5tatives
 & ! ,committee on ,homel& ,security &  
,gov]nm5tal ,affairs & ! ,select        
,committee on ,intellig5ce ( ! ,s5ate a 
report on--  7#a7 h[ ! ,dep>tm5t & its  
compon5ts & (fices h implem5t$ ! /rategy
 develop$ "u subsection 7b77#b77;,a72   

7#b7 ! /atus ( ! ,dep>tm5t's risk       
assessm5t ( critical assets2  7#c7 !    
types ( insid] ?reat tra9+ conduct$ by !
 ,dep>tm5t2  7#d7 ! numb] ( employees ( 
! ,dep>tm5t :o h receiv$ su* tra9+2 &   
7#e7 in=mation on ! effectiv5ess ( !    
,insid] ,?reat ,program1 bas$ on metrics
 "u subsection 7b77#b77;,h74  7e7       
,pres]vation ( m]it sy/em rights  7#a7  
,9 g5]al ,! ,/e]+ ,committee %all n seek
 to1 & ! au?orities provid$ "u ?is      
section %all n be us$ to1 det]1 detect1 
or mitigate disclosures ( in=mation by  
,gov]nm5t employees or contractors t are
 lawful "u & protect$ by section        
#ag7;d77#e7 ( ! ,c5tral ,intellig5ce    
,ag5cy ,act ( #aidi 7#ej ,u4,s4,c4      
#ceag7;d77#e77 7commonly kn[n z !       
,intellig5ce ,community ,:i/lebl[]      
,protection ,act ( #aiih71 *apt] #ab or 
#bc ( title #e1 ,unit$ ,/ates ,code1 !  
,inspector ,g5]al ,act ( #aigh 7#e      
,u4,s4,c4 ,app471 or any o!r :i/lebl[]  
/atute1 regulation1 or policy4  7#b7    
,implem5tation  7,a7 ,9 g5]al ,any      

activity c>ri$ out "u ?is section %all  
be subject to section #aae ( !          
,:i/lebl[] ,protection ,enhancem5t ,act 
( #bjab 7#e ,u4,s4,c4 #bcjb note74  7,b7
 ,requir$ /atem5t ,any activity to      
implem5t or en=ce any insid] ?reat      
activity or au?ority "u ?is section or  
,executive ,ord] #acehg 7#ej ,u4,s4,c4  
#cafa note7 %all include ! /atem5t      
requir$ by section #aae ( ! ,:i/lebl[]  
,protection ,enhancem5t ,act ( #bjab 7#e
 ,u4,s4,c4 #bcjb note7 t pres]ves rights
 "u :i/lebl[] laws & section #gbaa (    
title #e1 ,unit$ ,/ates ,code1 protect+ 
communications ) ,congress4  7f7        
,def9itions ,9 ?is section3 7#a7        
,appropriate entity ,! t]m appropriate  
entity means--  7,a7 ! head ( an ag5cy  
or a compon5t ( an ag5cy2  7,b7 an      
adm9i/rative law judge2  7,c7 ! ,m]it   
,sy/ems ,protection ,bo>d2  7,d7 !      
,(fice ( ,special ,c\nsel2  7,e7 an     
adjudicat+ body provid$ "u a union      
contract2  7,f7 a ,f$]al judge2 &  7,g7 
! ,inspector ,g5]al ( ! ,dep>tm5t4  7#b7

 ,critical assets ,! t]m critical assets
 means ! p1 facilities1 in=mation1 &    
te*nology requir$ = ! ,dep>tm5t to      
fulfill its mission4  7#c7 ,employee ,! 
t]m employee means an employee1 z def9$ 
"u section #gajc7;a7 ( title #e1 ,unit$ 
,/ates ,code4  7#d7 ,insid] ,! t]m      
insid] means--  7,a7 any p]son :o has   
access to classifi$ national security   
in=mation & is employ$ by1 detail$ to1  
or assign$ to ! ,dep>tm5t1 includ+      
memb]s ( ! ,arm$ ,=ces1 exp]ts or       
consultants to ! ,dep>tm5t1 indu/rial or
 comm]cial contractors1 lic5sees1       
c]tificate hold]s1 or grantees ( !      
,dep>tm5t1 includ+ all subcontractors1  
p]sonal s]vices contractors1 or any o!r 
category ( p]son :o acts = or on behalf 
( ! ,dep>tm5t1 z det]m9$ by ! ,secret>y2
 or  7,b7 ,/ate1 local1 tribal1         
t]ritorial1 & private sector p]sonnel :o
 possess security cle>ances grant$ by ! 
,dep>tm5t4  7#e7 ,insid] employee ,! t]m
 insid] employee means an insid] :o is  
an employee4  7#f7 ,insid] misconduct ,!

 t]m insid] misconduct means h>m to !   
security ( ! ,unit$ ,/ates1 includ+     
damage to ! ,unit$ ,/ates ?r\gh         
espionage1 t]rorism1 or ! unau?oriz$    
disclosure ( classifi$ national security
 in=mation1 or ?r\gh ! loss or          
degradation ( dep>tm5tal res\rces or    
capabilities1 ?r\gh use ( au?oriz$      
access by an insid] employee4  7#g7     
,insid] ?reat ,! t]m insid] ?reat means 
! ?reat t an insid] w use ! au?oriz$    
access ( ! insid]1 witt+ly or unwitt+ly1
 to d h>m to ! security ( ! ,unit$      
,/ates1 includ+ damage to ! ,unit$      
,/ates ?r\gh espionage1 t]rorism1 or !  
unau?oriz$ disclosure ( classifi$       
national security in=mation1 or ?r\gh ! 
loss or degradation ( dep>tm5tal        
res\rces or capabilities4  7#h7 ,/e]+   
,committee ,! t]m ,/e]+ ,committee means
 ! ,/e]+ ,committee e/abli%$ "u         
subsection 7b77#a77;,a74  4  7b7        
,cl]ical am5dm5t ,! table ( cont5ts = ! 
,homel& ,security ,act ( #bjjb is am5d$ 
by ins]t+ aft] ! item relat+ to section 

#ajc ! foll[+3  ,sec4 #ajd4 ,insid]     
,?reat ,program4  4  ,july #ab1         
#bjaf,report$ ) an am5dm5t