H. R. 2029—735
(B) IDENTIFICATION OF CIVILIAN CYBER PERSONNEL.—
Not later than 9 months after the date of enactment of
this Act, the Director, in coordination with the Secretary
of Homeland Security, the Director of the National Institute
of Standards and Technology, and the Director of National
Intelligence, shall establish procedures to implement the
National Initiative for Cybersecurity Education coding
structure to identify all Federal civilian positions that
require the performance of information technology, cybersecurity, or other cyber-related functions.
(C) IDENTIFICATION OF NONCIVILIAN CYBER PERSONNEL.—Not later than 18 months after the date of enactment of this Act, the Secretary of Defense shall establish
procedures to implement the National Initiative for Cybersecurity Education’s coding structure to identify all Federal
noncivilian positions that require the performance of
information technology, cybersecurity, or other cyberrelated functions.
(D) BASELINE ASSESSMENT OF EXISTING CYBERSECURITY
WORKFORCE.—Not later than 3 months after the date on
which the procedures are developed under subparagraphs
(B) and (C), respectively, the head of each Federal agency
shall submit to the appropriate congressional committees
of jurisdiction a report that identifies—
(i) the percentage of personnel with information
technology, cybersecurity, or other cyber-related job
functions who currently hold the appropriate industryrecognized certifications as identified under the
National Initiative for Cybersecurity Education;
(ii) the level of preparedness of other civilian and
noncivilian cyber personnel without existing credentials to take certification exams; and
(iii) a strategy for mitigating any gaps identified
in clause (i) or (ii) with the appropriate training and
certification for existing personnel.
(E) PROCEDURES FOR ASSIGNING CODES.—Not later than
3 months after the date on which the procedures are developed under subparagraphs (B) and (C), respectively, the
head of each Federal agency shall establish procedures—
(i) to identify all encumbered and vacant positions
with information technology, cybersecurity, or other
cyber-related functions (as defined in the National Initiative for Cybersecurity Education’s coding structure);
and
(ii) to assign the appropriate employment code to
each such position, using agreed standards and definitions.
(2) CODE ASSIGNMENTS.—Not later than 1 year after the
date after the procedures are established under paragraph
(1)(E), the head of each Federal agency shall complete assignment of the appropriate employment code to each position
within the agency with information technology, cybersecurity,
or other cyber-related functions.
(c) PROGRESS REPORT.—Not later than 180 days after the date
of enactment of this Act, the Director shall submit a progress
report on the implementation of this section to the appropriate
congressional committees.