Federal Cybersecurity Workforce Expansion Act
- Sponsor
- Sen. Hassan, Margaret Wood [D-NH]
- Committees
- Homeland Security and Governmental Affairs Committee (primary)
- Last action
- Jul 22, 2026
Bottom line
The bill establishes two pilot programs to address the federal cybersecurity workforce shortage by training new professionals, including veterans and military spouses, and facilitating their entry into federal service.
What it actually does
This bill authorizes the Director of the Cybersecurity and Infrastructure Security Agency (CISA) to establish two pilot programs: one for cybersecurity apprenticeships within the Department of Homeland Security, and another for cybersecurity training for veterans and military spouses transitioning to civilian life. Both programs aim to expand the federal cybersecurity workforce pipeline by providing structured training, work-based learning, and pathways to federal employment, with specific provisions for coordination with other federal agencies and reporting requirements.
Proponents argue
Supporters argue that this bill is a critical step to address the severe and growing shortage of qualified cybersecurity personnel within the Federal Government and nationally. They contend that by creating structured apprenticeship programs and leveraging the skills and dedication of veterans and military spouses, the bill will build a robust pipeline of talent, enhance national security against cyber threats, and provide valuable career opportunities for service members transitioning to civilian life.
Opponents contend
Critics may raise concerns about the potential for duplication of existing federal training initiatives or the efficiency of establishing new pilot programs rather than expanding proven ones. They might also question the long-term sustainability and scalability of these programs beyond their 5-year pilot phase, and whether the proposed mechanisms will effectively translate training into sustained federal employment, especially given the competitive nature of the cybersecurity job market.
The bill is relatively concise and clearly structured, making it accessible for an informed reader to understand its core provisions and implications within a reasonable timeframe.
Section 4
Cybersecurity Apprenticeship Pilot Program
This section directs the Secretary of Homeland Security to establish a cybersecurity apprenticeship pilot program within the Department of Homeland Security (DHS) within three years. The program will employ up to 25 new participants annually in cyber workforce positions, aiming to lead to permanent federal employment. It requires the program to be registered with the Department of Labor or a State apprenticeship agency and approved by the Secretary of Veterans Affairs for educational assistance. The Secretary may contract with eligible entities to run the program, prioritizing those with experience in workforce development and recruiting underrepresented communities.
Supporters argue
Supporters argue that a dedicated federal apprenticeship program is essential to cultivate specialized cybersecurity talent directly aligned with government needs, providing practical experience that traditional education often lacks. They emphasize the importance of formal registration and veteran benefits to maximize program appeal and effectiveness.
Critics contend
Some may argue that creating a new pilot program, rather than expanding existing federal hiring authorities or training programs, could lead to administrative overhead and fragmentation. Concerns might also be raised about the limited scale of 25 participants per year, questioning its immediate impact on a national shortage.
Tradeoffs
The bill balances the need for specialized federal cybersecurity training with the administrative complexities of establishing a new, registered apprenticeship program. It also seeks to ensure quality and recognition through Department of Labor and Veterans Affairs approvals, which adds layers of coordination.
Section 5
Pilot Program on Cybersecurity Training for Veterans and Military Spouses
This section mandates the Secretary of Homeland Security, in coordination with the Secretary of Veterans Affairs, to establish a pilot program within three years to provide free cybersecurity training to eligible veterans and military spouses. The program must include coursework for postsecondary credit, virtual learning, hands-on assessments, federal work-based learning, and lead to recognized postsecondary credentials. It emphasizes coordination with various federal agencies to leverage existing resources and ensure participants can utilize their educational assistance benefits.
Section 6
Federal Cybersecurity Workforce Assessment Extension
This section amends the Federal Cybersecurity Workforce Assessment Act of 2015 by extending the deadline for the annual assessment report from 2022 to 2028. This means federal agencies will continue to be required to conduct and report on their cybersecurity workforce assessments for an additional six years.
Participants in the CISA apprenticeship pilot program must enter into a service agreement, obligating them to accept and continue employment in a federal cyber workforce position for a period equal to their apprenticeship length if offered. Failure to complete this service, for reasons other than involuntary separation, requires repayment of training costs, prorated by the unserved period.
Section 4(h)
Why it matters:This is standard legislative practice for programs involving significant federal investment in individual training, ensuring a return on investment for the government. It's not intentionally evasive but requires careful reading.
Case for: Proponents argue this ensures accountability and a return on the federal investment in training, discouraging participants from using the program as a stepping stone without committing to federal service. It helps guarantee that the trained personnel actually fill federal vacancies.
Case against: Critics might argue that such repayment clauses could deter some potential applicants, particularly those who might face unforeseen personal circumstances or find better opportunities in the private sector, limiting the program's reach. It could also create a financial burden for individuals who genuinely cannot fulfill the obligation.
Estimated impact: This provision creates a significant financial and service obligation for all participants in the CISA apprenticeship pilot program, potentially impacting their career flexibility post-training.
The bill grants specific hiring authorities: participants in the CISA apprenticeship pilot program may be appointed to cybersecurity-specific positions in the excepted service during the program (Sec. 4(i)), and those who successfully complete the program may be appointed to a cyber workforce position in the excepted service for which they are qualified (Sec. 4(j)).
Section 4(i) and 4(j)
Why it matters:This is standard legislative practice for establishing specific hiring pathways for new federal programs, often placed in dedicated subsections. It's not evasive.
Case for: Proponents argue these authorities are crucial for streamlining the hiring process for program participants, ensuring a direct and efficient path from training to federal employment without navigating the often lengthy competitive service process. This makes federal service more attractive to new talent.
Case against: Some might argue that relying on excepted service appointments could bypass some of the merit-based protections and transparency associated with competitive service hiring, potentially leading to less diverse or less qualified hires if not carefully managed. However, for specialized roles like cybersecurity, excepted service is often used.
Estimated impact: These provisions significantly ease the transition of pilot program participants into federal employment, making the program more attractive and effective in filling critical roles.
Both the CISA Cybersecurity Apprenticeship Pilot Program and the Pilot Program on Cybersecurity Training for Veterans and Military Spouses are authorized to terminate 5 years after their establishment date.
Section 4(m) and 5(h)
Why it matters:This is standard legislative practice for pilot programs, which are often designed with a sunset clause to allow for evaluation before deciding on permanent authorization or expansion. It's not evasive.
Case for: Proponents argue that sunset clauses ensure that programs are evaluated for effectiveness and efficiency before becoming permanent, preventing the perpetuation of ineffective initiatives. It allows for flexibility to adapt to evolving cybersecurity needs.
Case against: Critics might argue that a 5-year termination clause creates uncertainty for participants and program administrators, potentially hindering long-term planning and investment. It could also make it harder to attract top talent if the career path isn't guaranteed beyond the pilot phase.
Estimated impact: These clauses mean both pilot programs are temporary and will require future legislative action to continue or become permanent, influencing their long-term impact and the stability of the career pathways they create.