Federal cyber workforce development institute

(a)

Definitions

In this section: (1)

Agency

The term agency has the meaning given the term in section 551 of title 5, United States Code. (2)

Appropriate congressional committees

The term appropriate congressional committees means— (A)the Committee on Armed Services of the Senate; (B)the Committee on Homeland Security and Governmental Affairs of the Senate; (C)the Committee on Armed Services of the House of Representatives; (D)the Committee on Homeland Security of the House of Representatives; and (E)the Committee on Oversight and Government Reform of the House of Representatives. (3)

Cyber work role

The term cyber work role means— (A)a role indicated in the NICE framework for new hires and personnel seeking transition to mid-career positions; and (B)a role relating to work involving designing, building, securing, operating, defending, and protecting cyberspace resources. (4)

Director

The term Director means the National Cyber Director. (5)

Federal institute

The term Federal institute means the Federal institute described in the plan required under subsection (b)(1). (6)

NICE framework

The term NICE framework means Special Publication 800–181 of the National Institute of Standards and Technology entitled Workforce Framework for Cybersecurity (NICE Framework), or any successor document. (7)

Work-based learning

The term work-based learning has the meaning given the term in section 3 of the Carl D. Perkins Career and Technical Education Act of 2006 (20 U.S.C. 2302). (b)

Requirement

(1)

In general

Not later than 180 days after the date of enactment of this Act, the Director, in consultation with the Secretary of Homeland Security, the Secretary of Defense, the Director of the Office of Personnel Management, and the head of any other agency the Director determines necessary, shall submit to Congress and make publicly available a plan for the establishment of a Federal institute to provide— (A)training for personnel hired for cyber work roles in the Federal Government, including new hires and personnel seeking transition to mid-career positions, which may include upskilling and reskilling efforts; and (B)training for personnel with responsibilities for human resource functions relating to cyber personnel. (2)

Institute functions

The plan required under paragraph (1) shall provide for the Federal institute to— (A)provide modularized cyber work role-specific training, including hands-on learning and skill-based assessments, to prepare newly hired Federal personnel from a wide variety of academic and professional backgrounds to perform effectively in Federal cyber work roles; (B)coordinate with the Secretary of Homeland Security, the Secretary of Defense, and the heads of other agencies determined necessary by the Director to develop a cyber work role-specific curriculum for the training provided under subparagraph (A)— (i)in accordance with the NICE framework; and (ii)in consideration of other Federal cyber training programs; (C)prioritize entry-level positions in the provision of curriculum development and training; (D)address the training needs of— (i)personnel seeking transition to mid-career positions; and (ii)personnel with responsibilities for human resources functions relating to cyber personnel; (E)include curriculum development and training for Federal cyber workers seeking transition to mid-career positions, which may include upskilling and reskilling efforts; (F) consider developing a specific module to familiarize and train appropriate Federal Government hiring managers and human resources staff in the unique challenges in recruiting and hiring personnel for Federal cyber workforce roles; (G)incorporate work-based learning in personnel training; (H)develop a badging system to communicate qualification and proficiency for individuals who successfully complete training through the Federal institute with consideration of systems used by the intelligence community; (I)offer in-person and virtual options to accommodate various learning environments for individuals; and (J)provide training to individuals irrespective of whether an individual has a college degree or a college degree in a cyber-related discipline. (3)

Plan elements

The plan required under paragraph (1) shall— (A)recommend an organizational placement for the Federal institute, which may include a single agency or a combination of agencies; (B)to the greatest extent practicable, align training and tools, including cyber work roles and competencies and the associated tasks, knowledge, and skills from— (i)Special Publication 800–181, Revision 1, of the National Institute of Standards and Technology entitled National Initiative for Cybersecurity Education Workforce Framework for Cybersecurity, or any successor special publication; or (ii)other applicable publications, studies, or guidance of the Federal Government; (C)identify— (i)elements of the Federal institute and its functions that could use existing facilities, resources, and programs of the Federal Government; and (ii)elements of the Federal institute and its functions that would require new facilities, resources, and programs of the Federal Government in order to implement the plan required under paragraph (1); (D)recommend a course curriculum, delivery method, and length of curriculum for the training provided under paragraph (1)(A) using Federal Government cyber training programs as models, including the Joint Cyber Analysis Course of the Department of Defense and the Federal Cyber Defense Skilling Academy of the Cybersecurity and Infrastructure Security Agency; (E)recommend a policy for individuals who do not complete required training; (F)describe a security clearance process to complete some level of security clearance for appropriate individuals while individuals are enrolled in training; (G)recommend a governance structure for the Federal institute that would ensure ongoing interagency coordination in the development of a curriculum, the provision of training, and other considerations the Director determines appropriate; (H)provide an estimate of the funding and new authorities required to establish and operate the Federal institute; (I)describe any requirements for the Federal institute to conduct work in a classified setting; (J)identify how the Federal institute would— (i)provide some or all of the training required by paragraph (1)(A) through 5 academic institutions from among academic institutions that— (I)are designated by the National Security Agency as a National Center of Academic Excellence in cybersecurity for cyber defense, cyber research, and cyber operations; and (II)have an operational sensitive compartmented information facility; and (ii)select the 5 academic institutions under clause (i); (K)identify how the instructors of the Federal institute will remain current with respect to cybersecurity knowledge, skills and abilities through scholarship or other means; and (L)identify how the Federal institute will maintain the quality and longevity of instructors. (4)

Consultation

In developing a plan for the Federal institute, the Director shall consult with the Director of the Office of Personnel Management, the Chief Human Capital Officers Council, the Chief Information Officers Council, and the Chief Learning Officers Council to establish tools for human resources professionals of the Federal Government to develop the knowledge, skills and abilities required to manage the career life cycle of cyber professionals from recruitment to retirement. (c)

Briefing

Not later than 270 days after the date of enactment of this Act, the Director shall provide to the appropriate congressional committees a briefing on the plan required under subsection (b)(1), including an estimate of the funding and the authorities necessary to implement the plan. (d)

No additional funds

No additional funds are authorized to be appropriated for the purpose of carrying out this Act.