,i #aafth ,,congress #ast ,session ,h4 ,r4 #cijg ,,in ,,the ,,house ,,of ,,representatives ,july #bc1 #bjai,mr4 ,king of ,new ,york 7for himself1 ,mr4 ,green of ,tennessee1 and ,mr4 ,walker7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to establish the ,insider ,threat ,program1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,department of ,homeland ,security ,insider ,threat and ,mitigation ,act of #bjai4 #b4 ,establishment of ,insider ,threat ,program 7a7 ,in general ,title ,i of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #aaa et seq47 is amended by adding at the end the following new section3 #ajd4 ,insider ,threat ,program 7a7 ,establishment ,the ,secretary shall establish an ,insider ,threat ,program within the ,department4 ,such ,program shall-- 7#a7 provide training and education for ,department personnel to identify1 prevent1 mitigate1 and respond to insider threat risks to the ,department's critical assets2 7#b7 provide investigative support regarding potential insider threats that may pose a risk to the ,department's critical assets2 and 7#c7 conduct risk mitigation activities for insider threats4 7b7 ,steering ,committee 7#a7 ,in general ,the ,secretary shall establish a ,steering ,committee within the ,department4 ,the ,under ,secretary for ,intelligence and ,analysis shall serve as the ,chair of the ,steering ,committee4 ,the ,chief ,security ,officer shall serve as the ,vice ,chair4 ,the ,steering ,committee shall be comprised of representatives of the ,office of ,intelligence and ,analysis1 the ,office of the ,chief ,information ,officer1 the ,office of the ,general ,counsel1 the ,office for ,civil ,rights and ,civil ,liberties1 the ,privacy ,office1 the ,office of the ,chief ,human ,capital ,officer1 the ,office of the ,chief ,financial ,officer1 the ,federal ,protective ,service1 the ,office of the ,chief ,procurement ,officer1 the ,science and ,technology ,directorate1 and other components or offices of the ,department as appropriate4 ,such representatives shall meet on a regular basis to discuss cases and issues related to insider threats to the ,department's critical assets1 in accordance with subsection 7a74 7#b7 ,responsibilities ,not later than one year after the date of the enactment of this section1 the ,under ,secretary for ,intelligence and ,analysis and the ,chief ,security ,officer1 in coordination with the ,steering ,committee established pursuant to paragraph 7#a71 shall carry out the following3 7,a7 ,develop a holistic strategy for ,department-wide efforts to identify1 prevent1 mitigate1 and respond to insider threats to the ,department's critical assets4 7,b7 ,develop a plan to implement the insider threat measures identified in the strategy developed under subparagraph 7,a7 across the components and offices of the ,department4 7,c7 ,document insider threat policies and controls4 7,d7 ,conduct a baseline risk assessment of insider threats posed to the ,department's critical assets4 7,e7 ,examine existing programmatic and technology best practices adopted by the ,federal ,government1 industry1 and research institutions to implement solutions that are validated and cost-effective4 7,f7 ,develop a timeline for deploying workplace monitoring technologies1 employee awareness campaigns1 and education and training programs related to identifying1 preventing1 mitigating1 and responding to potential insider threats to the ,department's critical assets4 7,g7 ,require the ,chair and ,vice ,chair of the ,steering ,committee to consult with the ,under ,secretary for ,science and ,technology and other appropriate stakeholders to ensure the ,insider ,threat ,program is informed1 on an ongoing basis1 by current information regarding threats1 beset practices1 and available technology4 7,h7 ,develop1 collect1 and report metrics on the effectiveness of the ,department's insider threat mitigation efforts4 7c7 ,definitions ,in this section3 7#a7 ,critical assets ,the term critical assets means the people1 facilities1 information1 and technology required for the ,department to fulfill its mission4 7#b7 ,insider ,the term insider means-- 7,a7 any person who has access to classified national security information and is employed by1 detailed to1 or assigned to the ,department1 including members of the ,armed ,forces1 experts or consultants to the ,department1 industrial or commercial contractors1 licensees1 certificate holders1 or grantees of the ,department1 including all subcontractors1 personal services contractors1 or any other category of person who acts for or on behalf of the ,department1 as determined by the ,secretary2 or 7,b7 ,state1 local1 ,tribal1 territorial1 and private sector personnel who possess security clearances granted by the ,department4 7#c7 ,insider threat ,the term insider threat means the threat that an insider will use his or her authorized access1 wittingly or unwittingly1 to do harm to the security of the ,united ,states1 including damage to the ,united ,states through espionage1 terrorism1 the unauthorized disclosure of classified national security information1 or through the loss or degradation of departmental resources or capabilities4 4 7b7 ,reporting 7#a7 ,in general ,not later than two years after the date of the enactment of section #ajd of the ,homeland ,security ,act of #bjjb 7as added by subsection 7a7 of this section7 and biennially thereafter for the next four years1 the ,secretary of ,homeland ,security shall submit to the ,committee on ,homeland ,security and the ,permanent ,select ,committee on ,intelligence of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs and the ,select ,committee on ,intelligence of the ,senate a report on how the ,department of ,homeland ,security and its components and offices have implemented the strategy developed pursuant to subsection 7b77#b77;,a7 of such section #ajd1 the status of the ,department's risk assessment of critical assets1 the types of insider threat training conducted1 the number of ,department employees who have received such training1 and information on the effectiveness of the ,insider ,threat ,program 7established pursuant to subsection 7a7 of such section #ajd71 based on metrics developed1 collected1 and reported pursuant to subsection 7b77#b77;,h7 of such section #ajd4 7#b7 ,definitions ,in this subsection1 the terms critical assets1 insider1 and insider threat have the meanings given such terms in section #ajd of the ,homeland ,security ,act of #bjjb 7as added by subsection 7a7 of this section74 7c7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended by inserting after the item relating to section #ajc the following new item3 ,sec4 #ajd4 ,insider ,threat ,program4 4