Us Congress 2023-2024 Regular Session

Us Congress Senate Bill SB903 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11 II
22 118THCONGRESS
33 1
44 STSESSION S. 903
55 To require the Secretary of the Army to carry out a pilot project to establish
66 a Civilian Cybersecurity Reserve, and for other purposes.
77 IN THE SENATE OF THE UNITED STATES
88 MARCH21, 2023
99 Ms. R
1010 OSEN(for herself and Mrs. BLACKBURN) introduced the following bill;
1111 which was read twice and referred to the Committee on Armed Services
1212 A BILL
1313 To require the Secretary of the Army to carry out a pilot
1414 project to establish a Civilian Cybersecurity Reserve, and
1515 for other purposes.
1616 Be it enacted by the Senate and House of Representa-1
1717 tives of the United States of America in Congress assembled, 2
1818 SECTION 1. SHORT TITLE. 3
1919 This Act may be cited as the ‘‘Department of Defense 4
2020 Civilian Cybersecurity Reserve Act’’. 5
2121 SEC. 2. CIVILIAN CYBERSECURITY RESERVE PILOT 6
2222 PROJECT. 7
2323 (a) D
2424 EFINITIONS.—In this Act: 8
2525 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
2626 kjohnson on DSK79L0C42PROD with BILLS 2
2727 •S 903 IS
2828 (1) APPROPRIATE CONGRESSIONAL COMMIT -1
2929 TEES.—The term ‘‘appropriate congressional com-2
3030 mittees’’ means— 3
3131 (A) the Committee on Homeland Security 4
3232 and Governmental Affairs of the Senate; 5
3333 (B) the Committee on Armed Services of 6
3434 the Senate; 7
3535 (C) the Committee on Homeland Security 8
3636 of the House of Representatives; and 9
3737 (D) the Committee on Armed Services of 10
3838 the House of Representatives. 11
3939 (2) C
4040 OMPETITIVE SERVICE.—The term ‘‘com-12
4141 petitive service’’ has the meaning given the term in 13
4242 section 2102 of title 5, United States Code. 14
4343 (3) E
4444 XCEPTED SERVICE.—The term ‘‘excepted 15
4545 service’’ has the meaning given the term in section 16
4646 2103 of title 5, United States Code. 17
4747 (4) T
4848 EMPORARY POSITION .—The term ‘‘tem-18
4949 porary position’’ means a position in the competitive 19
5050 or excepted service for a period of 180 days or less. 20
5151 (b) P
5252 ILOTPROJECT.— 21
5353 (1) I
5454 N GENERAL.—The Secretary of the Army 22
5555 shall carry out a pilot project to establish a Civilian 23
5656 Cybersecurity Reserve. 24
5757 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
5858 kjohnson on DSK79L0C42PROD with BILLS 3
5959 •S 903 IS
6060 (2) PURPOSE.—The purpose of the Civilian Cy-1
6161 bersecurity Reserve is to enable the Army to provide 2
6262 manpower to the United States Cyber Command to 3
6363 effectively— 4
6464 (A) preempt, defeat, deter, or respond to 5
6565 malicious cyber activity; 6
6666 (B) conduct cyberspace operations; 7
6767 (C) secure information and systems of the 8
6868 Department of Defense against malicious cyber 9
6969 activity; and 10
7070 (D) assist in solving cyber workforce-re-11
7171 lated challenges. 12
7272 (3) A
7373 LTERNATIVE METHODS .—Consistent with 13
7474 section 4703 of title 5, United States Code, in car-14
7575 rying out the pilot project required under paragraph 15
7676 (1), the Secretary may, without further authoriza-16
7777 tion from the Office of Personnel Management, pro-17
7878 vide for alternative methods of— 18
7979 (A) establishing qualifications require-19
8080 ments for, recruitment of, and appointment to 20
8181 positions; and 21
8282 (B) classifying positions. 22
8383 (4) A
8484 PPOINTMENTS.—Under the pilot project 23
8585 required under paragraph (1), in order to fulfill the 24
8686 purpose under paragraph (2), the Secretary— 25
8787 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
8888 kjohnson on DSK79L0C42PROD with BILLS 4
8989 •S 903 IS
9090 (A) may activate members of the Civilian 1
9191 Cybersecurity Reserve by— 2
9292 (i) noncompetitively appointing mem-3
9393 bers of the Civilian Cybersecurity Reserve 4
9494 to temporary positions in the competitive 5
9595 service; or 6
9696 (ii) appointing members of the Civil-7
9797 ian Cybersecurity Reserve to temporary po-8
9898 sitions in the excepted service; 9
9999 (B) shall notify Congress whenever a mem-10
100100 ber is activated under subparagraph (A); and 11
101101 (C) may appoint not more than 50 mem-12
102102 bers to the Civilian Cybersecurity Reserve 13
103103 under subparagraph (A) at any time. 14
104104 (5) S
105105 TATUS AS EMPLOYEES .—An individual ap-15
106106 pointed under paragraph (4) shall be considered a 16
107107 Federal civil service employee under section 2105 of 17
108108 title 5, United States Code. 18
109109 (6) A
110110 DDITIONAL EMPLOYEES .—Individuals ap-19
111111 pointed under paragraph (4) shall be in addition to 20
112112 any employees of the United States Cyber Command 21
113113 who provide cybersecurity services. 22
114114 (7) E
115115 MPLOYMENT PROTECTIONS .—The Sec-23
116116 retary of Labor shall prescribe such regulations as 24
117117 necessary to ensure the reemployment, continuation 25
118118 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
119119 kjohnson on DSK79L0C42PROD with BILLS 5
120120 •S 903 IS
121121 of benefits, and non-discrimination in reemployment 1
122122 of individuals appointed under paragraph (4), pro-2
123123 vided that such regulations shall include, at a min-3
124124 imum, those rights and obligations set forth under 4
125125 chapter 43 of title 38, United States Code. 5
126126 (8) S
127127 TATUS IN RESERVE .—During the period 6
128128 beginning on the date on which an individual is re-7
129129 cruited to serve in the Civilian Cybersecurity Reserve 8
130130 and ending on the date on which the individual is 9
131131 appointed under paragraph (4), and during any pe-10
132132 riod in between any such appointments, the indi-11
133133 vidual shall not be considered a Federal employee. 12
134134 (c) E
135135 LIGIBILITY; APPLICATION ANDSELECTION.— 13
136136 (1) I
137137 N GENERAL.—Under the pilot project re-14
138138 quired under subsection (b)(1), the Secretary of the 15
139139 Army shall establish criteria for— 16
140140 (A) individuals to be eligible for the Civil-17
141141 ian Cybersecurity Reserve; and 18
142142 (B) the application and selection processes 19
143143 for the Civilian Cybersecurity Reserve. 20
144144 (2) R
145145 EQUIREMENTS FOR INDIVIDUALS .—The 21
146146 criteria established under paragraph (1)(A) with re-22
147147 spect to an individual shall include— 23
148148 (A) if the individual has previously served 24
149149 as a member of the Civilian Cybersecurity Re-25
150150 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
151151 kjohnson on DSK79L0C42PROD with BILLS 6
152152 •S 903 IS
153153 serve, that the previous appointment ended not 1
154154 less than 60 days before the individual may be 2
155155 appointed for a subsequent temporary position 3
156156 in the Civilian Cybersecurity Reserve; and 4
157157 (B) cybersecurity expertise. 5
158158 (3) P
159159 RESCREENING.—The Secretary shall— 6
160160 (A) conduct a prescreening of each indi-7
161161 vidual prior to appointment under subsection 8
162162 (b)(4) for any topic or product that would cre-9
163163 ate a conflict of interest; and 10
164164 (B) require each individual appointed 11
165165 under subsection (b)(4) to notify the Secretary 12
166166 if a potential conflict of interest arises during 13
167167 the appointment. 14
168168 (4) A
169169 GREEMENT REQUIRED .—An individual 15
170170 may become a member of the Civilian Cybersecurity 16
171171 Reserve only if the individual enters into an agree-17
172172 ment with the Secretary to become such a member, 18
173173 which shall set forth the rights and obligations of 19
174174 the individual and the Army. 20
175175 (5) E
176176 XCEPTION FOR CONTINUING MILITARY 21
177177 SERVICE COMMITMENTS .—A member of the Selected 22
178178 Reserve under section 10143 of title 10, United 23
179179 States Code, may not be a member of the Civilian 24
180180 Cybersecurity Reserve. 25
181181 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
182182 kjohnson on DSK79L0C42PROD with BILLS 7
183183 •S 903 IS
184184 (6) PROHIBITION.—Any individual who is an 1
185185 employee of the executive branch may not be re-2
186186 cruited or appointed to serve in the Civilian Cyberse-3
187187 curity Reserve. 4
188188 (d) S
189189 ECURITYCLEARANCES.— 5
190190 (1) I
191191 N GENERAL.—The Secretary of the Army 6
192192 shall ensure that all members of the Civilian Cyber-7
193193 security Reserve undergo the appropriate personnel 8
194194 vetting and adjudication commensurate with the du-9
195195 ties of the position, including a determination of eli-10
196196 gibility for access to classified information where a 11
197197 security clearance is necessary, according to applica-12
198198 ble policy and authorities. 13
199199 (2) C
200200 OST OF SPONSORING CLEARANCES .—If a 14
201201 member of the Civilian Cybersecurity Reserve re-15
202202 quires a security clearance in order to carry out the 16
203203 duties of the member, the Army shall be responsible 17
204204 for the cost of sponsoring the security clearance of 18
205205 the member. 19
206206 (e) I
207207 MPLEMENTATION PLAN.— 20
208208 (1) I
209209 N GENERAL.—Not later than 180 days 21
210210 after the date on which the Secretary of Defense 22
211211 submits to the Committee on Armed Services of the 23
212212 Senate and the Committee on Armed Services of the 24
213213 House of Representatives the report required under 25
214214 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
215215 kjohnson on DSK79L0C42PROD with BILLS 8
216216 •S 903 IS
217217 section 1540(d)(2) of the James M. Inhofe National 1
218218 Defense Authorization Act for Fiscal Year 2023 2
219219 (Public Law 117–263) on the feasibility and advis-3
220220 ability of creating and maintaining a civilian cyber-4
221221 security reserve corps, the Secretary of the Army 5
222222 shall— 6
223223 (A) submit to the appropriate congres-7
224224 sional committees an implementation plan for 8
225225 the pilot project required under subsection 9
226226 (b)(1); and 10
227227 (B) provide to the appropriate congres-11
228228 sional committees a briefing on the implementa-12
229229 tion plan. 13
230230 (2) P
231231 ROHIBITION.—The Secretary of the Army 14
232232 may not take any action to begin implementation of 15
233233 the pilot project required under subsection (b)(1) 16
234234 until the Secretary fulfills the requirements under 17
235235 paragraph (1). 18
236236 (f) P
237237 ROJECTGUIDANCE.—Not later than two years 19
238238 after the date of the enactment of this Act, the Secretary 20
239239 of the Army shall, in consultation with the Office of Per-21
240240 sonnel Management and the Office of Government Ethics, 22
241241 issue guidance establishing and implementing the pilot 23
242242 project required under subsection (b)(1). 24
243243 (g) B
244244 RIEFINGS ANDREPORT.— 25
245245 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
246246 kjohnson on DSK79L0C42PROD with BILLS 9
247247 •S 903 IS
248248 (1) BRIEFINGS.—Not later than one year after 1
249249 the date on which the guidance required under sub-2
250250 section (f) is issued, and every year thereafter until 3
251251 the date on which the pilot project required under 4
252252 subsection (b)(1) terminates under subsection (i), 5
253253 the Secretary of the Army shall provide to the ap-6
254254 propriate congressional committees a briefing on ac-7
255255 tivities carried out under the pilot project, includ-8
256256 ing— 9
257257 (A) participation in the Civilian Cybersecu-10
258258 rity Reserve, including the number of partici-11
259259 pants, the diversity of participants, and any 12
260260 barriers to recruitment or retention of mem-13
261261 bers; 14
262262 (B) an evaluation of the ethical require-15
263263 ments of the pilot project; 16
264264 (C) whether the Civilian Cybersecurity Re-17
265265 serve has been effective in providing additional 18
266266 capacity to the Army; and 19
267267 (D) an evaluation of the eligibility require-20
268268 ments for the pilot project. 21
269269 (2) R
270270 EPORT.—Not earlier than 180 days and 22
271271 not later than 90 days before the date on which the 23
272272 pilot project required under subsection (b)(1) termi-24
273273 nates under subsection (i), the Secretary shall sub-25
274274 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
275275 kjohnson on DSK79L0C42PROD with BILLS 10
276276 •S 903 IS
277277 mit to the appropriate congressional committees a 1
278278 report and provide a briefing on recommendations 2
279279 relating to the pilot project, including recommenda-3
280280 tions for— 4
281281 (A) whether the pilot project should be 5
282282 modified, extended in duration, or established 6
283283 as a permanent program, and if so, an appro-7
284284 priate scope for the program; 8
285285 (B) how to attract participants, ensure a 9
286286 diversity of participants, and address any bar-10
287287 riers to recruitment or retention of members of 11
288288 the Civilian Cybersecurity Reserve; 12
289289 (C) the ethical requirements of the pilot 13
290290 project and the effectiveness of mitigation ef-14
291291 forts to address any conflict of interest con-15
292292 cerns; and 16
293293 (D) an evaluation of the eligibility require-17
294294 ments for the pilot project. 18
295295 (h) E
296296 VALUATION.—Not later than three years after 19
297297 the pilot project required under subsection (b)(1) is estab-20
298298 lished, the Comptroller General of the United States 21
299299 shall— 22
300300 (1) conduct a study evaluating the pilot project; 23
301301 and 24
302302 (2) submit to Congress— 25
303303 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\S903.IS S903
304304 kjohnson on DSK79L0C42PROD with BILLS 11
305305 •S 903 IS
306306 (A) a report on the results of the study; 1
307307 and 2
308308 (B) a recommendation with respect to 3
309309 whether the pilot project should be modified. 4
310310 (i) S
311311 UNSET.—The pilot project required under sub-5
312312 section (b)(1) shall terminate on the date that is four 6
313313 years after the date on which the pilot project is estab-7
314314 lished. 8
315315 (j) N
316316 OADDITIONALFUNDS.— 9
317317 (1) I
318318 N GENERAL.—No additional funds are au-10
319319 thorized to be appropriated for the purpose of car-11
320320 rying out this Act. 12
321321 (2) E
322322 XISTING AUTHORIZED AMOUNTS .—Funds 13
323323 to carry out this Act may, as provided in advance in 14
324324 appropriations Acts, only come from amounts au-15
325325 thorized to be appropriated to the Army. 16
326326 Æ
327327 VerDate Sep 11 2014 01:00 Mar 31, 2023 Jkt 039200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6301 E:\BILLS\S903.IS S903
328328 kjohnson on DSK79L0C42PROD with BILLS