<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Reported-in-Senate" dms-id="A1" public-private="public"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>116 S406 RS: Federal Rotational Cyber Workforce Program Act of 2019</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2019-02-07</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code><calendar>Calendar No. 46</calendar><congress>116th CONGRESS</congress><session>1st Session</session><legis-num>S. 406</legis-num><associated-doc role="report">[Report No. 116–15]</associated-doc><current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber><action><action-date date="20190207">February 7, 2019</action-date><action-desc><sponsor name-id="S380">Mr. Peters</sponsor> (for himself, <cosponsor name-id="S344">Mr. Hoeven</cosponsor>, <cosponsor name-id="S388">Ms. Hassan</cosponsor>, and <cosponsor name-id="S345">Mr. Johnson</cosponsor>) introduced the following bill; which was read twice and referred to the <committee-name committee-id="SSGA00">Committee on Homeland Security and Governmental Affairs</committee-name></action-desc></action><action stage="Reported-in-Senate"><action-date>March 25, 2019</action-date><action-desc>Reported by <sponsor name-id="S345">Mr. Johnson</sponsor>, with an amendment</action-desc><action-instruction>Omit the part struck through and insert the part printed in italic</action-instruction></action><legis-type>A BILL</legis-type><official-title>To establish a Federal rotational cyber workforce program for the Federal cyber workforce. </official-title></form>
	<legis-body display-enacting-clause="yes-display-enacting-clause">
 <section id="idf5f1dc9c-34c7-457e-af54-e174b5e4edc7" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Federal Rotational Cyber Workforce Program Act of 2019</short-title></quote>.</text> </section><section id="idb7ce8124-4dbf-47ed-8c6e-7789c20eb689"><enum>2.</enum><header>Definitions</header><text display-inline="no-display-inline">In this Act:</text>
 <paragraph id="id6fc78b76-491d-47ab-9fc2-caa5bb386f85"><enum>(1)</enum><header>Agency</header><text>The term <term>agency</term> has the meaning given the term <term>Executive agency</term> in section 105 of title 5, United States Code, except that the term does not include the Government Accountability Office.</text>
 </paragraph><paragraph id="idb35e6610-10bb-4ce8-a79e-26202452d3fa"><enum>(2)</enum><header>Council</header><text>The term <term>Council</term> means the Chief Human Capital Officers Council established under section 1303 of the <deleted-phrase reported-display-style="strikethrough">Homeland Security</deleted-phrase><added-phrase reported-display-style="italic">Chief Human Capital Officers</added-phrase> Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/5/1401">5 U.S.C. 1401</external-xref> note).</text>
 </paragraph><paragraph id="idb6f57e7d-1a82-4839-b8b1-01938f9c9cab"><enum>(3)</enum><header>Cyber workforce position</header><text>The term <term>cyber workforce position</term> means a position identified as having information technology, cybersecurity, or other cyber-related functions under section 303 of the Federal Cybersecurity Workforce Assessment Act of 2015 (<external-xref legal-doc="usc" parsable-cite="usc/5/301">5 U.S.C. 301</external-xref> note).</text>
 </paragraph><paragraph id="id2bd6a227-f686-40bb-a190-403f55aca729"><enum>(4)</enum><header>Director</header><text>The term <term>Director</term> means the Director of the Office of Personnel Management.</text> </paragraph><paragraph id="id1675f2e1-f86b-4c52-9a12-9d949f4d6371"><enum>(5)</enum><header>Employee</header><text>The term <term>employee</term> has the meaning given the term in section 2105 of title 5, United States Code.</text>
 </paragraph><paragraph id="idb7bce469-e0cb-4e4f-902c-d97162a5a482"><enum>(6)</enum><header>Employing agency</header><text>The term <term>employing agency</term> means the agency from which an employee is detailed to a rotational cyber workforce position.</text> </paragraph><paragraph id="ide5af4072-9257-4bdd-a700-539591ef67a2"><enum>(7)</enum><header>Rotational cyber workforce position</header><text>The term <term>rotational cyber workforce position</term> means a cyber workforce position with respect to which a determination has been made under section 3(a)(1).</text>
 </paragraph><paragraph commented="no" display-inline="no-display-inline" id="id552c670f-1e5d-47de-9d34-ff8885ba952b"><enum>(8)</enum><header display-inline="yes-display-inline">Rotational cyber workforce program</header><text display-inline="yes-display-inline">The term <term>rotational cyber workforce program</term> means the program for the detail of employees among rotational cyber workforce positions at agencies.</text>
			</paragraph></section><section id="idb12ecb4b-078f-4022-8325-3c219a9a3dd5"><enum>3.</enum><header>Rotational cyber workforce positions</header>
			<subsection id="id59074031-28bb-4b53-bc18-51b4a83a42aa"><enum>(a)</enum><header>Determination with respect to rotational service</header>
 <paragraph id="id9d539073-998c-4e14-a740-7c89905df2a0"><enum>(1)</enum><header>In general</header><text>The head of each agency, in the sole and exclusive discretion of the head of the agency, may determine that a cyber workforce position in that agency is eligible for the rotational cyber workforce program.</text>
 </paragraph><paragraph id="idd3393882-41b0-489c-8936-bf9f77e67a4a"><enum>(2)</enum><header>Notice provided</header><text>The head of an agency shall submit to the Director—</text> <subparagraph id="idce6d941b-d9fa-4ec2-a8cc-23140617c63a"><enum>(A)</enum><text>notice regarding any determination made by the head of the agency under paragraph (1); and</text>
 </subparagraph><subparagraph id="id37ea2167-4cc2-4e75-8529-2243546bfe3d"><enum>(B)</enum><text>for each position with respect to which the head of the agency makes a determination under paragraph (1), the information required under subsection (b)(1).</text>
 </subparagraph></paragraph></subsection><subsection id="id7606d817-607c-4543-8536-8e8e064eee09"><enum>(b)</enum><header>Preparation of list</header><text>The Director, with assistance from the Council and the Secretary of Homeland Security, shall develop a list of rotational cyber workforce positions that—</text>
 <paragraph id="idee5474bc-5e03-4346-bf38-90ecd970c247"><enum>(1)</enum><text>with respect to each such position, to the extent that the information does not disclose sensitive national security information, includes—</text>
 <subparagraph id="id44836d75-7b60-41f5-9b32-ee1b981c5f09"><enum>(A)</enum><text>the title of the position;</text> </subparagraph><subparagraph id="id6300a13f-e153-4292-9390-2b0d2cec5326"><enum>(B)</enum><text>the occupational series with respect to the position;</text>
 </subparagraph><subparagraph id="idb87080ed-6ed3-4af9-bfdb-1b357f41bcbe"><enum>(C)</enum><text>the grade level with respect to the position;</text> </subparagraph><subparagraph id="id9196ab35-0b3d-4294-b74a-2f507dff544f"><enum>(D)</enum><text>the agency in which the position is located;</text>
 </subparagraph><subparagraph id="idb8f6e3d1-6d6f-4c38-ac09-593c3af91297"><enum>(E)</enum><text>the duty location with respect to the position; and</text> </subparagraph><subparagraph id="id5522b29a-c7ad-49e3-8827-98c00016c1ff"><enum>(F)</enum><text>the major duties and functions of the position; and</text>
 </subparagraph></paragraph><paragraph commented="no" display-inline="no-display-inline" id="idab0416a7-6b61-4a91-9223-dd9bdc67d36c"><enum>(2)</enum><text>shall be used to support the rotational cyber workforce program.</text> </paragraph></subsection><subsection id="id6683fdf2-de0d-48a3-9e23-44f6c11cc1c2"><enum>(c)</enum><header>Distribution of list</header><text>Not less frequently than annually, the Director shall distribute an updated list developed under subsection (b) to the head of each agency and other appropriate entities.</text>
			</subsection></section><section id="idf49c0514-08b3-4f2e-b017-ce9d2e216050"><enum>4.</enum><header>Rotational cyber workforce program</header>
			<subsection id="idcce2ac63-991e-469c-ac02-1304c274c020"><enum>(a)</enum><header>Operation plan</header>
 <paragraph id="id8bd0ad55-1622-4d64-b0b8-74d4f102e751"><enum>(1)</enum><header>In general</header><text>Not later than 270 days after the date of enactment of this Act, the Director, in consultation with the Council, the Chief Information Officer of the Department of Homeland Security, representatives of other agencies, and any other entity as the Director determines appropriate, shall develop and issue a Federal Rotational Cyber Workforce Program operation plan providing policies, processes, and procedures for a program for the detailing of employees among rotational cyber workforce positions at agencies.</text>
 </paragraph><paragraph id="id0a404c6e-5d37-44f5-8ef0-52750d1b2680"><enum>(2)</enum><header>Updating</header><text>The Director may, in consultation with the Council and other entities as the Director determines appropriate, periodically update the operation plan developed and issued under paragraph (1).</text>
 </paragraph></subsection><subsection id="id72a57719-b7e2-462d-bb24-a84cd8b391c8"><enum>(b)</enum><header>Requirements</header><text>The operation plan developed and issued under subsection (a) shall, at a minimum—</text> <paragraph id="idb2509fca-9762-498c-aff4-756b17c1f162"><enum>(1)</enum><text>identify agencies for participation in the rotational cyber workforce program;</text>
 </paragraph><paragraph id="id12a8531b-304e-4179-8f62-6224dc4c99d8"><enum>(2)</enum><text>establish procedures for the rotational cyber workforce program, including—</text> <subparagraph id="idad64d495-25b3-44d3-9088-aecfa7bda9d6"><enum>(A)</enum><text>any training, education, or career development requirements associated with participation in the rotational cyber workforce program;</text>
 </subparagraph><subparagraph id="idfe0c8ad6-61e3-4c19-87f1-d56f4ef0e990"><enum>(B)</enum><text>any prerequisites or requirements for participation in the rotational cyber workforce program; and</text> </subparagraph><subparagraph id="id3321d182-e7fb-46e6-8b50-d08d3f1e6af1"><enum>(C)</enum><text>appropriate rotational cyber workforce program performance measures, reporting requirements, employee exit surveys, and other accountability devices for the evaluation of the program;</text>
 </subparagraph></paragraph><paragraph id="id51a3e158-3f70-4d17-becf-1be47e10aea5"><enum>(3)</enum><text>provide that participation in the rotational cyber workforce program by an employee shall be voluntary;</text>
 </paragraph><paragraph id="id580d2be6-125d-43b4-98ec-923672f1062c"><enum>(4)</enum><text>provide that an employee shall be eligible to participate in the rotational cyber workforce program if the head of the employing agency of the employee, or a designee of the head of the employing agency of the employee, approves of the participation of the employee;</text>
 </paragraph><paragraph id="id272a1ddf-3b48-465f-a63b-a0ce315af761"><enum>(5)</enum><text>provide that the detail of an employee to a rotational cyber workforce position under the rotational cyber workforce program shall be on a nonreimbursable basis;</text>
 </paragraph><paragraph id="id4fd35744-90b2-450a-993c-4ea1e98a4854"><enum>(6)</enum><text>provide that agencies may agree to partner to ensure that the employing agency of an employee that participates in the rotational cyber workforce program is able to fill the position vacated by the employee;</text>
 </paragraph><paragraph id="id17768e90-64f4-4faf-88f8-109f225770b3"><enum>(7)</enum><text>require that an employee detailed to a rotational cyber workforce position under the rotational cyber workforce program, upon the end of the period of service with respect to the detail—</text>
 <subparagraph id="id8efcc87f-78f2-4120-ab98-152fe3ecd42d"><enum>(A)</enum><text>shall be entitled to return to the position held by the employee, or a corresponding position, in the employing agency of the employee; and</text>
 </subparagraph><subparagraph id="id7c6f9ce2-a4a1-4282-a2a6-224788426486"><enum>(B)</enum><text>shall not be entitled to return to another position in the employing agency of the employee, including a more senior position, if the position held by the employee upon accepting the detail remains open;</text>
 </subparagraph></paragraph><paragraph id="id70e4f71a-34d7-4f7d-b1e8-06d74d37578c"><enum>(8)</enum><text>provide that discretion with respect to the assignment of an employee under the rotational cyber workforce program shall remain with the employing agency of the employee;</text>
 </paragraph><paragraph id="id387573199996439d9b49676bfdef6d74"><enum>(9)</enum><text>require that an employee detailed to a rotational cyber workforce position under the rotational cyber workforce program in an agency that is not the employing agency of the employee shall have all the rights that would be available to the employee if the employee were detailed under a provision of law other than this Act from the employing agency to the agency in which the rotational cyber workforce position is located;</text>
 </paragraph><paragraph id="idd4f89e8259d2478baa429df345a81e90"><enum>(10)</enum><text>provide that participation by an employee in the rotational cyber workforce program shall not constitute a change in the conditions of the employment of the employee; and</text>
 </paragraph><paragraph id="id68a40248-35a9-463a-9a76-2ff5253b529b"><enum>(11)</enum><text>provide that an employee participating in the rotational cyber workforce program shall receive performance evaluations relating to service in the rotational cyber workforce program in a participating agency that are—</text>
 <subparagraph id="id71088c55-1f1c-4f7c-b62e-d3dc841c0bba"><enum>(A)</enum><text>prepared by an appropriate officer, supervisor, or management official of the employing agency;</text> </subparagraph><subparagraph id="idb71a3b25-7072-4eac-8c3f-0e96303b6c34"><enum>(B)</enum><text>based, acting in coordination with the supervisor at the agency in which the employee is performing that service, on objectives identified in the operation plan with respect to the employee; and</text>
 </subparagraph><subparagraph id="id859e891c-1a85-4996-a421-749c845aaeae"><enum>(C)</enum><text>based in whole or in part on the contribution of the employee to the agency in which the employee performed such service, as communicated from that agency to the employing agency of the employee.</text>
					</subparagraph></paragraph></subsection><subsection id="idba24ae91-c6d5-4c40-bd18-7ce7869d1e04"><enum>(c)</enum><header>Program requirements for rotational service</header>
 <paragraph id="idacb3bb20-cfd9-44b7-a1bd-51ad3936d2fd"><enum>(1)</enum><header>In general</header><text>An employee serving in a cyber workforce position in an agency may, with the approval of the head of the agency, submit an application for detail to a rotational cyber workforce position that appears on the list developed under section 3(b).</text>
				</paragraph><paragraph id="id088e8e24-cd8e-43d5-a61c-638124328efc"><enum>(2)</enum><header>Selection and term</header>
 <subparagraph id="id827aa11b-1f26-40f2-9547-969f68a37ba7"><enum>(A)</enum><header>Selection</header><text>The head of an agency shall select an employee for a rotational cyber workforce position under the rotational cyber workforce program in a manner that is consistent with the merit system principles under section 2301(b) of title 5, United States Code.</text>
 </subparagraph><subparagraph id="id59cb1d78-870f-46aa-9f08-8f390a526939"><enum>(B)</enum><header>Term</header><text>Except as provided in subparagraph (C), and notwithstanding section 3341(b) of title 5, United States Code, a detail to a rotational cyber workforce position shall be for a period of not less than 180 days and not more than 1 year.</text>
 </subparagraph><subparagraph id="id03247105-99ea-4a9b-aa35-0cdb7e45c028"><enum>(C)</enum><header>Extension</header><text>The Chief Human Capital Officer of the agency to which an employee is detailed under the rotational cyber workforce program may extend the period of a detail described in subparagraph (B) for a period of 60 days unless the Chief Human Capital Officer of the employing agency of the employee objects to that extension.</text>
					</subparagraph></paragraph><paragraph id="id084d06fb-6068-4adf-934b-77d22f2f576c"><enum>(3)</enum><header>Written service agreements</header>
 <subparagraph id="id5375d216-a6f8-423c-b157-bd523b652b2d"><enum>(A)</enum><header>In general</header><text>The detail of an employee to a rotational cyber position shall be contingent upon the employee entering into a written service agreement with the employing agency under which the employee is required to complete a period of employment with the employing agency following the conclusion of the detail that is equal in length to the period of the detail.</text>
 </subparagraph><subparagraph id="id2676ff32-1b20-4204-ab8d-2490b03e8098"><enum>(B)</enum><header>Continued service agreements</header><text>A written service agreement under subparagraph (A) shall not supersede or modify the terms or conditions of any other service agreement entered into by the employee under any other authority or relieve the obligations between the employee and the employing agency under such a service agreement. Nothing in this subparagraph prevents an employing agency from terminating a service agreement entered into under any other authority under the terms of such agreement or as required by law or regulation.</text>
 </subparagraph></paragraph></subsection></section><section id="id6353dd38-8762-4986-8af0-90efc3bc416c"><enum>5.</enum><header>Reporting by GAO</header><text display-inline="no-display-inline">Not later than the end of the second fiscal year after the fiscal year in which the operation plan under section 4(a) is issued, the Comptroller General of the United States shall submit to Congress a report assessing the operation and effectiveness of the rotational cyber workforce program, which shall address, at a minimum—</text>
 <paragraph id="iddc307a8d-4d13-4ed9-8996-7a31ac0a4aa3"><enum>(1)</enum><text>the extent to which agencies have participated in the rotational cyber workforce program, including whether the head of each such participating agency has—</text>
 <subparagraph id="ida6f27f44-bdc4-4577-9641-1ec40355fe2e"><enum>(A)</enum><text>identified positions within the agency that are rotational cyber workforce positions;</text> </subparagraph><subparagraph id="id1f26dd72-3af1-4423-bbb7-9e84276408ae"><enum>(B)</enum><text>had employees from other participating agencies serve in positions described in subparagraph (A); and</text>
 </subparagraph><subparagraph id="iddd645441-239e-4406-a1af-44f53d7d7843"><enum>(C)</enum><text>had employees of the agency request to serve in rotational cyber workforce positions under the rotational cyber workforce program in participating agencies, including a description of how many such requests were approved; and</text>
 </subparagraph></paragraph><paragraph id="idc017d84a-c2da-4c8b-94f7-cb50dd3c8e01"><enum>(2)</enum><text>the experiences of employees serving in rotational cyber workforce positions under the rotational cyber workforce program, including an assessment of—</text>
 <subparagraph id="id00f7fc42-7d8b-49d9-ae9d-9f1522943632"><enum>(A)</enum><text>the period of service;</text> </subparagraph><subparagraph id="id539ee339-5bc1-4488-9b20-b7df11a13858"><enum>(B)</enum><text>the positions (including grade level and occupational series) held by employees before completing service in a rotational cyber workforce position under the rotational cyber workforce program;</text>
 </subparagraph><subparagraph id="idc9c1774e-aa27-4ad1-afcf-b63ab8a71d29"><enum>(C)</enum><text>the extent to which each employee who completed service in a rotational cyber workforce position under the rotational cyber workforce program achieved a higher skill level, or attained a skill level in a different area, with respect to information technology, cybersecurity, or other cyber-related functions; and</text>
 </subparagraph><subparagraph id="id4f4fda38-5077-4cb5-8218-efc5ec673da0"><enum>(D)</enum><text>the extent to which service in rotational cyber workforce positions has affected intra-agency and interagency integration and coordination of cyber practices, functions, and personnel management.</text>
 </subparagraph></paragraph></section><section id="id1f56c0ff-f0cf-4a58-909a-1815e6d16b9a"><enum>6.</enum><header>Sunset</header><text display-inline="no-display-inline">Effective 5 years after the date of enactment of this Act, this Act is repealed.</text></section></legis-body><endorsement><action-date>March 25, 2019</action-date><action-desc>Reported with an amendment</action-desc></endorsement></bill> 

