Review - HR 1034 Introduced - DHS Cybersecurity OJT

Earlier this month the late Rep Sylvester (D,TX) introduced HR 1034, the DHS Cybersecurity On-the-Job Training Program Act. The bill would establish in CISA “the ‘DHS Cybersecurity On-the-Job Training Program’ to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department.” No funding would be authorized by this legislation.

This bill is very similar to HR 3208 that was introduced by the late Rep Jackson-Lee (D,TX) in May of 2023. HR 3208 was passed in the House by a somewhat bipartisan vote of 377 to 43 on September 23rd, 2024. The Senate Homeland Security and Governmental Affairs Committee held a hearing on the bill on November 20th, 2024, and ordered the bill reported favorably. None of the numerous changes made from the version of the bill passed in the House last session would have a substantive effect on the proposed program.

Moving Forward

The single cosponsor of this bill, Rep Luttrell (R,TX), is a member of the House Homeland Security Committee to which this bill was assigned for consideration. This means that there may be sufficient influence to see the bill considered in Committee. While the composition of the House has not changed significantly from the 118^th Congress, the political dynamic has shifted, so passage of this bill in the House this term is not necessarily assured.

 

For more information on the provisions of this bill, including an expanded discussion about the influences that may make its passage more difficult, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-1034-introduced - subscription required.

HR 3208 Passed in House – DHS Cybersecurity OJT

After debating HR 3208, the DHS Cybersecurity On-the-Job Training Program Act, yesterday for almost six minutes, the House completed consideration today, passing the bill in a somewhat bipartisan vote of 377 to 43, all the nay votes were Republicans. The bill would establish in CISA “the ‘DHS Cybersecurity On-the-Job Training Program’ to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department.”

The bill now heads to the Senate. It is not likely to be considered under regular order. While the bill could be brought up under the suspension of the rules process, the level of opposition from Republicans in the House would likely mean that Rep Paul (R,KY), Sen Johnson, (R,WI), or Sen Tuberville (R,AL) would object to such action. Since Paul is the Ranking Member of the Senate Homeland Security and Governmental Affairs Committee, he would have virtual veto authority to prevent the bill being added to an omnibus spending bill later in the session.

HR 3208 Reported in House – CISA Cyber OJT

Last month, the House Homeland Security Committee published their Report on HR 3208 [removed from paywall], the DHS Cybersecurity On-the-Job Training Program. The Committee met on May 17^th, 2023, and recommended the bill favorably reported without amendment by a voice vote. The legislation is now cleared for possible consideration by the full House.

The bill would establish in CISA “the ‘DHS Cybersecurity On-the-Job Training Program’ to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department.”

The Report

The report notes (pg 2) that as the DHS Cyber Talent Management System (CTMS) continues to ramp up its efforts to increase the number of skilled cybersecurity professionals within the Department, CISA will need to reskill existing DHS employees to support the Department’s vital cybersecurity mission. It further explains that:

“The bill formally authorizes CISA’s training activities in this space, in consultation with the Under Secretary for Management, while also giving them the flexibility needed to expand and adapt the program to address the growing cyber workforce gap.”

The Committee had not received a Congressional Budget Office report on the cost of the provisions of this legislation.

Moving Forward

With a voice vote approval in Committee and no ‘Alternate View’ section outline Democratic concerns about the bill, it is clear that this bill has broad, bipartisan support. As such it could reasonably be expected to be considered under the House suspension of the rules process. I expect that, if the bill were considered, that it would receive similar support on the floor.

Review - HR 3208 Introduced – DHS Cybersecurity OJT

Earlier this month, Rep Jackson-Lee (D,TX) introduced HR 3208, the DHS Cybersecurity On-the-Job Training Program Act. The bill would establish in CISA “the ‘DHS Cybersecurity On-the-Job Training Program’ to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department.” No funding would be authorized by this legislation.

Moving Forward

Jackson-Lee and three of her six cosponsors {Rep Payne (D,NJ), Rep Thompson (D,MS), and Rep Clarke (D,NY)}, are members of the House Homeland Security Committee, to which this bill was assigned for consideration. This means that there could be sufficient influence to see this bill considered in Committee. While I see nothing in this bill that should engender any organized opposition, it seems odd that there are no Republican cosponsors for the bill. While this is a divided House, I still expect to see bipartisan support for bills like this which seem to be inherently non-partisan. That there are no Republican sponsors makes me suspect that there are issues here that I cannot see.

 

For more information about the provisions of this bill, as well as a discussion about differences from a similar bill introduced last session, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-3208-introduced - subscription required.

Bills Introduced – Week of 5-6-23

VACATION DELAYED

This week with both the House and Senate in Washington, 314 bills were introduced. Eight of those bills may receive additional attention in this blog:

HR 3147 To establish a defense industrial base advanced capabilities pilot program. Houlahan, Chrissy [Rep.-D-PA-6]

S 1493 A bill to amend title V of the Public Health Service Act to secure the suicide prevention lifeline from cybersecurity incidents, and for other purposes. Sinema, Kyrsten [Sen.-I-AZ] 

S 1500 A bill to amend the Help America Vote Act of 2002 to require the Election Assistance Commission to provide for the conduct of penetration testing as part of the testing and certification of voting systems and to provide for the establishment of an Independent Security Testing and Coordinated Vulnerability Disclosure Pilot Program for Election Systems. Sen. Warner, Mark R. [D-VA]

HR 3169 To require the inspection of certain foreign cranes before use at a United States port, and for other purposes. Gimenez, Carlos A. [Rep.-R-FL-28]

S 1526 A bill to amend the National Telecommunications and Information Administration Organization Act to establish the Office of Policy Development and Cybersecurity, and for other purposes. Hickenlooper, John W. [Sen.-D-CO]

HR 3208 To amend the Homeland Security Act of 2002 to establish a DHS Cybersecurity On-the-Job Training Program, and for other purposes. Jackson Lee, Sheila [Rep.-D-TX-18]

HR 3224 To amend the Homeland Security Act of 2002 to extend the authorization of the Countering Weapons of Mass Destruction Office of the Department of Homeland Security, and for other purposes. D'Esposito, Anthony [Rep.-R-NY-4]

S 1560 Rural Hospital Cybersecurity Enhancement Act Hawley, Josh [Sen.-R-MO]

I will be covering HR 3208, HR 3224, and S 1526.

I will be watching the remaining bills for language and definitions that specifically include control system or medical device cybersecurity requirements within the scope of the legislation.

Bills Introduced – 9-27-13

While the Congress is still in deep disagreement on the 2014 spending program they do continue to be hard at work drafting new legislation proposals. There were three bills introduced yesterday that might be of specific interest to readers of this blog:

HR 3202 Latest Title: To require the Secretary of Homeland Security to prepare a comprehensive security assessment of the transportation security card program, and for other purposes. Sponsor: Rep Jackson Lee, Sheila (D,TX)

HR 3208 Latest Title: To clarify that certain natural gas facilities are not subject to the Natural Gas Act. Sponsor: Rep McKinley, David B. (R,WV)

HJ RES 66 Latest Title: Making continuing appropriations for fiscal year 2014, and for other purposes. Sponsor: Rep Reed, Tom (R,NY)

TWIC

The bill from Rep. Jackson-Lee is almost certainly a direct (though certainly delayed) response to the Government Accounting Office recommendation made in a Congressional Hearing on May 8^th. It will be interesting to see what gets included in this bill.

Natural Gas

I’m not sure what the purpose of this bill is; there is nothing on Rep. McKinley’s web site about the bill. I suspect that it deals with exportation of natural gas, but we will just have to wait and see.

Another Continuing Resolution

This is another conservative Republican alternative Continuing Resolution. It would continue the current sequestered spending limits until December 15^th (and extends the CFATS authorization to that date). It delays Obamacare funding for one year instead of killing Obamacare; so it is an attempt at compromise, probably not enough though. Rep. Reed is not a member of the Appropriations Committee, so it is unlikely that this will get to the floor, but it has already been printed by the GPO so it is possible that it could reach the floor of the House.