,,ii #aadth ,,congress #ast ,session ,s4 #bjjg ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,august #f1 #bjae,mr4 ,bennet 7for himself and ,mr4 ,portman7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to create a consistent framework to expedite the recruitment of highly qualified personnel who perform information technology1 cybersecurity1 and cyber-related functions to enhance cybersecurity across the ,federal ,government4 #a4 ,short title ,this ,act may be cited as the ,federal ,cybersecurity ,workforce ,assessment ,act4 #b4 ,definitions ,in this ,act3 7#a7 ,appropriate congressional committees ,the term appropriate congressional committees means-- 7,a7 the ,committee on ,armed ,services of the ,senate2 7,b7 the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate2 7,c7 the ,committee on ,armed ,services in the ,house of ,representatives2 7,d7 the ,committee on ,homeland ,security of the ,house of ,representatives2 and 7,e7 the ,committee on ,oversight and ,government ,reform of ,house of ,representatives4 7#b7 ,director ,the term ,director means the ,director of the ,office of ,personnel ,management4 7#c7 ,roles ,the term roles has the meaning given the term in the ,national ,initiative for ,cybersecurity ,education's ,cybersecurity ,workforce ,framework4 #c4 ,national ,cybersecurity ,workforce ,measurement ,initiative 7a7 ,in general ,the head of each ,federal agency shall-- 7#a7 identify all positions within the agency that require the performance of information technology1 cybersecurity1 or other cyber-related functions2 and 7#b7 assign the corresponding employment code1 which shall be added to the ,national ,initiative for ,cybersecurity ,education's ,national ,cybersecurity ,workforce ,framework1 in accordance with subsection 7b74 7b7 ,employment codes 7#a7 ,procedures 7,a7 ,coding structure ,not later than #ahj days after the date of the enactment of this ,act1 the ,secretary of ,commerce1 acting through the ,national ,institute of ,standards and ,technology1 shall update the ,national ,initiative for ,cybersecurity ,education's ,cybersecurity ,workforce ,framework to include a corresponding coding structure4 7,b7 ,identification of civilian cyber personnel ,not later than #i months after the date of enactment of this ,act1 the ,director1 in coordination with the ,director of ,national ,intelligence1 shall establish procedures to implement the ,national ,initiative for ,cybersecurity ,education's coding structure to identify all ,federal civilian positions that require the performance of information technology1 cybersecurity1 or other cyber-related functions4 7,c7 ,identification of non-civilian cyber personnel ,not later than #ah months after the date of enactment of this ,act1 the ,secretary of ,defense shall establish procedures to implement the ,national ,initiative for ,cybersecurity ,education's coding structure to identify all ,federal non-civilian positions that require the performance of information technology1 cybersecurity or other cyber-related functions4 7,d7 ,baseline assessment of existing cybersecurity workforce ,not later than #c months after the date on which the procedures are developed under subparagraphs 7,b7 and 7,c71 respectively1 the head of each ,federal agency shall submit to the appropriate congressional committees of jurisdiction a report that identifies-- 7i7 the percentage of personnel with information technology1 cybersecurity1 or other cyber-related job functions who currently hold the appropriate industry-recognized certifications as identified in the ,national ,initiative for ,cybersecurity ,education's ,cybersecurity ,workforce ,framework2 7ii7 the level of preparedness of other civilian and non-civilian cyber personnel without existing credentials to pass certification exams2 and 7iii7 a strategy for mitigating any gaps identified in clause 7i7 or 7ii7 with the appropriate training and certification for existing personnel4 7,e7 ,procedures for assigning codes ,not later than #c months after the date on which the procedures are developed under subparagraphs 7,b7 and 7,c71 respectively1 the head of each ,federal agency shall establish procedures-- 7i7 to identify all encumbered and vacant positions with information technology1 cybersecurity1 or other cyber-related functions 7as defined in the ,national ,initiative for ,cybersecurity ,education's coding structure72 and 7ii7 to assign the appropriate employment code to each such position1 using agreed standards and definitions4 7#b7 ,code assignments ,not later than #a year after the date after the procedures are established under paragraph 7#a77;,e71 the head of each ,federal agency shall complete assignment of the appropriate employment code to each position within the agency with information technology1 cybersecurity1 or other cyber-related functions4 7c7 ,progress report ,not later than #ahj days after the date of enactment of this ,act1 the ,director shall submit a progress report on the implementation of this section to the appropriate congressional committees4 #d4 ,identification of cyber-related roles of critical need 7a7 ,in general ,beginning not later than #a year after the date on which the employment codes are assigned to employees pursuant to section #c7;b77#b71 and annually through #bjbb1 the head of each ,federal agency1 in consultation with the ,director and the ,secretary of ,homeland ,security1 shall-- 7#a7 identify information technology1 cybersecurity1 or other cyber-related roles of critical need in the agency's workforce2 and 7#b7 submit a report to the ,director that-- 7,a7 describes the information technology1 cybersecurity1 or other cyber-related roles identified under paragraph 7#a72 and 7,b7 substantiates the critical need designations4 7b7 ,guidance ,the ,director shall provide ,federal agencies with timely guidance for identifying information technology1 cybersecurity1 or other cyber-related roles of critical need1 including-- 7#a7 current information technology1 cybersecurity1 and other cyber-related roles with acute skill shortages2 and 7#b7 information technology1 cybersecurity1 or other cyber-related roles with emerging skill shortages4 7c7 ,cybersecurity needs report ,not later than #b years after the date of the enactment of this ,act1 the ,director1 in consultation with the ,secretary of ,homeland ,security1 shall-- 7#a7 identify critical needs for information technology1 cybersecurity1 or other cyber-related workforce across all ,federal agencies2 and 7#b7 submit a progress report on the implementation of this section to the appropriate congressional committees4 #e4 ,government ,accountability ,office status reports ,the ,comptroller ,general of the ,united ,states shall-- 7#a7 analyze and monitor the implementation of sections #c and #d2 and 7#b7 not later than #c years after the date of the enactment of this ,act1 submit a report to the appropriate congressional committees that describes the status of such implementation4