Summary

Creates a voluntary DHS on-the-job cybersecurity training program that lets Department employees who are not currently in cybersecurity roles receive cybersecurity training and be coded appropriately as cybersecurity personnel. The program director must develop curriculum and participation rules, make training available to DHS (and optionally other federal) employees, and produce annual reports for seven years; the Under Secretary for Management must also report on vacancies, support recruitment, and use tools such as continuing service agreements to retain trainees.

Key Points

• Creates a voluntary DHS on-the-job cybersecurity training program for employees not currently in cyber roles.
• Requires a director-led curriculum aligned with the NICE framework and existing federal training assets.
• Training must be made available to DHS employees and may be extended to other federal employees.
• Mandates seven years of annual reporting on participants, hires, and program success metrics to congressional homeland security committees.
• Requires the Under Secretary for Management to report on DHS cybersecurity vacancies and support recruitment and retention measures for seven years.
• Encourages use of continuing service agreements and outreach to graduates to promote hiring into DHS cyber jobs.
• Does not specify or appropriate funding; implementation would rely on DHS resources or future appropriations.
• Amends the Homeland Security Act table of contents to include the new program provision.

Categories & Tags