H.R. 5000

119th CONGRESS 1st Session

To amend title 5, United States Code, to limit the use of educational requirements or qualifications in evaluating candidates for certain cybersecurity positions in the competitive service, and for other purposes.

IN THE HOUSE OF REPRESENTATIVES · August 19, 2025 · Sponsor: Ms. Mace · Committee: Committee on Oversight and Government Reform

Table of contents

• H.R. 5000
  • SEC. 1. Short title
  • SEC. 2. Educational requirements for competitive service cybersecurity positions

SEC. 1. Short title

• This Act may be cited as the Cybersecurity Hiring Modernization Act.

SEC. 2. Educational requirements for competitive service cybersecurity positions

• Section 3308 of title 5, United States Code, is amended—
  • by striking and inserting ; and
    • (b) Education requirements for cybersecurity positions
      • (1) In general
        • With respect to any covered position—
          • an agency may prescribe a minimum educational requirement for employment in such a position only if a minimum education qualification is required by law to perform the duties of the position in the State or locality where the duties of the position are to be performed; and
          • an agency may consider education in determining a candidate’s satisfaction of any other minimum qualification only if the candidate’s education directly reflects the competencies necessary to satisfy that qualification and perform the duties of the position.
      • (2) Publication
        • Not later than one year after the date of the enactment of the and annually thereafter, the Office of Personnel Management shall publish on the Office’s website—
          • any changes made to minimum qualifications standards concerning education for covered positions; and
          • aggregate data indicating the level of educational attainment, sorted by position classification, of all accessions to covered positions.
      • (3) Covered position defined
        • In this subsection, the term means— covered position
          • any position in the competitive service classified under the GS–2210 information technology management series, or any successor series; and
          • any other position in the competitive service designated as under the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800–181), or successor framework. cybersecurity
  • by adding at the end the following: