DEPARTMENT OF DEFENSE CYBER WORKFORCE EFFORTS.

SEC. 1726. DEPARTMENT OF DEFENSE CYBER WORKFORCE EFFORTS. (a) [10 U.S.C. 1599f note] Resources for Cyber Education.— (1) In general.—The Chief Information Officer of the Department of Defense, in consultation with the Director of the National Security Agency (NSA), shall examine the current policies permitting National Security Agency employees to use up to 140 hours of paid time toward NSA’s cyber education programs. (2) Report.— (A) In general.—Not later than 90 days after the date of the enactment of this Act, the Chief Information Officer shall submit to the congressional defense committees and the congressional intelligence committees a strategy for expanding the policies described in paragraph (1) to— (i) individuals who occupy positions described in section 1599f of title 10, United States Code; and (ii) any other individuals who the Chief Information Officer determines appropriate. (B) Implementation plan.—The report required under subparagraph (A) shall detail the utilization of the policies in place at the National Security Agency, as well as an implementation plan that describes the mechanisms needed to expand the use of such policies to accommodate wider participation by individuals described in such subparagraph. Such implementation plan shall detail how such individuals would be able to connect to the instructional and participatory opportunities available through the efforts, programs, initiatives, and investments accounted for in the report required under section 1649 of the National Defense Authorization Act for Fiscal Year 2020 (Public Law 116-92), including the following programs: (i) GenCyber. (ii) Centers for Academic Excellence - Cyber Defense. (iii) Centers for Academic Excellence - Cyber Operations. (C) Deadline.—Not later than 120 days after the submission of the report required under subparagraph (A), the Chief Information Officer of the Department of Defense shall carry out the implementation plan contained in such report. (b) [10 U.S.C. 2224 note] Improving the Training With Industry Program.— (1) In general.—Not later than 120 days after the date of the enactment of this Act, the Principal Cyber Advisor of the Department of Defense, in consultation with the Principal Cyber Advisors of the military services and the Under Secretary of Defense for Personnel and Readiness, shall submit to the Secretary of Defense and the congressional defense committees a review of the current utilization and utility of the Training With Industry (TWI) programs, including relating to the following: (A) Recommendations regarding how to improve and better utilize such programs, including regarding individuals who have completed such programs. (B) An implementation plan to carry out such recommendations. (2) Additional.—Not later than 90 days after the submission of the report required under paragraph (1), the Secretary of Defense shall carry out such elements of the implementation plan required under paragraph (1)(B) as the Secretary considers appropriate and notify the congressional defense committees of the determinations of the Secretary relating thereto. (c) Alignment of Cybersecurity Training Programs.— (1) In general.—Not later than 120 days after the date of the enactment of this Act, the Secretary of Defense shall submit to the congressional defense committees a report containing recommendations on how cybersecurity training programs described in section 1649 of the National Defense Authorization Act for Fiscal Year 2020 can be better aligned and harmonized. (2) Report.—The report required under paragraph (1) shall provide recommendations concerning the following topics and information: (A) Developing a comprehensive mechanism for utilizing and leveraging the Cyber Excepted Service workforce of the Department of Defense referred to in subsection (a), as well as mechanisms for military participation. (B) Unnecessary redundancies in such programs, or in any related efforts, initiatives, or investments. (C) Mechanisms for tracking participation and transition of participation from one such program to another. (D) Department level oversight and management of such programs. (3) Cyber workforce pipeline and early childhood education.— (A) Elements.—The Secretary of Defense shall, when completing the report required under paragraph (1), take into consideration existing Federal childhood cyber education programs, including the programs identified in the report required under section 1649 of the National Defense Authorization Act for Fiscal Year 2020 (Public Law 116-92) and the Department of Homeland Security’s Cybersecurity Education and Training Assistance Program (CETAP), that can provide opportunities to military-connected students and members of the Armed Forces to pursue cyber careers. (B) Definition.—In this paragraph, the term “military-connected student” means an individual who— (i) is a dependent a member of the Armed Forces serving on active duty; and (ii) is enrolled in a preschool, an elementary or secondary school, or an institution of higher education. (b) Discharge Through Director.—In carrying out this section, the Chief Information Officer of the Department of Defense shall act through the Director of the office established under section 2192c of title 10, United States Code.