Expanding Cybersecurity Workforce Act of 2025

#6429 | HR Congress #119

Subjects:

Last Action: Referred to the House Committee on Homeland Security. (12/4/2025)

Bill Text Source: Congress.gov

Summary and Impacts
Original Text

Bill Summary

The "Expanding Cybersecurity Workforce Act of 2025" aims to enhance the cybersecurity workforce by creating a program within the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland Security. This program is specifically designed to promote opportunities in the cybersecurity field for disadvantaged communities, including older adults, racial and ethnic minorities, people with disabilities, women, veterans, and formerly incarcerated individuals, among others.

Key provisions of the bill include:

1. **Program Establishment**: CISA is required to establish a program to encourage participation in cybersecurity careers from diverse and underrepresented populations within 180 days of the bill's enactment.

2. **Outreach Efforts**: CISA will conduct outreach to various institutions, such as educators and workforce development offices, to raise awareness about cybersecurity career paths and the new program.

3. **Tailored Approach**: The program will be customized to address the specific needs of different regions and sectors across the U.S.

4. **Annual Reporting**: CISA must provide annual reports to Congress on the program's effectiveness and its impact on the cybersecurity workforce demographics.

5. **Funding Authorization**: The bill authorizes $20 million annually from fiscal year 2026 through 2031 to support the program.

Overall, the legislation seeks to build a more inclusive cybersecurity workforce by targeting support and resources to those historically underrepresented in the field.

Possible Impacts

Here are three examples of how the "Expanding Cybersecurity Workforce Act of 2025" could affect people:

1. **Increased Access to Cybersecurity Careers for Disadvantaged Groups**: The Act aims to promote the cybersecurity field among disadvantaged communities, including racial and ethnic minorities, individuals with disabilities, women, and veterans. By providing tailored education and training programs, these groups may gain access to careers in cybersecurity that they previously found difficult to enter due to barriers such as socioeconomic status, educational background, or lack of awareness. This could lead to greater economic opportunities and improved job security for individuals from these communities.

2. **Localized Outreach and Education**: The legislation mandates that the Cybersecurity and Infrastructure Security Agency (CISA) conduct outreach to various institutions, including community colleges and local workforce development offices. This localized approach means that individuals in different regions—be it urban, suburban, or rural—will receive relevant information and access to training programs that meet their specific needs. As a result, people in geographically diverse areas will have the opportunity to participate in the cybersecurity workforce, which can help bridge the digital divide and promote economic growth in underrepresented regions.

3. **Annual Reporting and Accountability**: The requirement for annual reports on the efficacy of the Program ensures accountability and continuous improvement. By assessing how well the program is impacting the cybersecurity workforce and making recommendations for Congress, stakeholders can adapt and refine initiatives to better serve participants. This could lead to more effective training programs and policies that respond to the evolving needs of the cybersecurity industry, ultimately benefiting individuals who seek to enter this field.

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 6429 Introduced in House (IH)]

<DOC>






119th CONGRESS
  1st Session
                                H. R. 6429

To establish in the Cybersecurity and Infrastructure Security Agency of 
     the Department of Homeland Security a program to promote the 
   cybersecurity field to disadvantaged communities, including older 
 individuals, racial and ethnic minorities, people with disabilities, 
     geographically diverse communities, socioeconomically diverse 
communities, women, individuals from nontraditional educational paths, 
    individuals who are veterans, and individuals who were formerly 
                 incarcerated, and for other purposes.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                            December 4, 2025

   Ms. Brown (for herself, Ms. Stevens, Mrs. Ramirez, Ms. Wasserman 
Schultz, Ms. Norton, Mr. Quigley, Ms. Kelly of Illinois, Mr. Lynch, Mr. 
   Carson, Ms. Ansari, Ms. Crockett, Mrs. Beatty, Ms. Brownley, Mr. 
  Thompson of Mississippi, Mr. Landsman, Ms. Velazquez, Mr. Larsen of 
 Washington, Ms. Plaskett, Mrs. Hayes, Mr. Min, Mrs. McBath, Mr. Bell, 
 Mr. Goldman of New York, Mrs. Cherfilus-McCormick, Mr. Horsford, Ms. 
  Johnson of Texas, Mr. Evans of Pennsylvania, Mrs. Foushee, and Mr. 
Carter of Louisiana) introduced the following bill; which was referred 
                 to the Committee on Homeland Security

_______________________________________________________________________

                                 A BILL


 
To establish in the Cybersecurity and Infrastructure Security Agency of 
     the Department of Homeland Security a program to promote the 
   cybersecurity field to disadvantaged communities, including older 
 individuals, racial and ethnic minorities, people with disabilities, 
     geographically diverse communities, socioeconomically diverse 
communities, women, individuals from nontraditional educational paths, 
    individuals who are veterans, and individuals who were formerly 
                 incarcerated, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Expanding Cybersecurity Workforce 
Act of 2025''.

SEC. 2. EXPANSION OF CISA'S CYBERSECURITY EDUCATION AND TRAINING 
              ASSISTANCE PROGRAM.

    (a) In General.--Not later than 180 days after the date of the 
enactment of this Act, the Director of the Cybersecurity and 
Infrastructure Security Agency of the Department of Homeland Security 
shall establish within the Cybersecurity Education and Training 
Assistance Program of the Agency a program (in this section referred to 
as the ``Program'') to promote the cybersecurity field to disadvantaged 
communities, including older individuals, racial and ethnic minorities, 
people with disabilities, geographically diverse communities, 
socioeconomically diverse communities, women, individuals from 
nontraditional educational paths, individuals who are veterans, and 
individuals who were formerly incarcerated.
    (b) Outreach.--To carry out subsection (a) and promote awareness of 
the Program, the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Security shall conduct 
outreach to different institutions to raise awareness of and promote 
the cybersecurity workforce, including to educators, unions, chambers 
of commerce, State and local workforce development offices, private 
sector entities, community colleges, parents of K-12 students, and 
other institutions as the Director determines appropriate.
    (c) Applicability.--The Director of the Cybersecurity and 
Infrastructure Security Agency of the Department of Homeland Security 
shall tailor the Program to the unique needs of each region and sector 
across the United States.
    (d) Annual Reports.--Not later than one year after the date of the 
enactment of this Act and annually thereafter, the Director of the 
Cybersecurity and Infrastructure Security Agency of the Department of 
Homeland Security shall submit to the Committee on Homeland Security of 
the House of Representatives and the Committee on Homeland Security and 
Governmental Affairs of the Senate a report on the efficacy of the 
Program, including how the Program is impacting the general 
characteristics of the cyber workforce throughout the United States, 
and suggestions for Congress regarding how to improve the Program.
    (e) Authorization of Appropriations.--There is authorized to be 
appropriated to the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Security $20,000,000 for 
fiscal year 2026 and each fiscal year thereafter through 2031.
    (f) Definitions.--In this section:
            (1) Disability.--The term ``disability'' means an 
        intellectual or developmental disability.
            (2) Geographically diverse.--The term ``geographically 
        diverse'' means that the participants should be represented as 
        close as possible to an equal spread of high-density urban 
        areas, suburban areas, and rural areas of the United States or 
        over-represent low-income communities.
            (3) Nontraditional educational path.--The term 
        ``nontraditional educational path'' means a graduate of any of 
        the following:
                    (A) A two year degree program, trade school, or 
                community college.
                    (B) A historically Black college or university.
                    (C) A Hispanic-serving institution (as such term is 
                defined in section 502(a) of the Higher Education Act 
                of 1965 (20 U.S.C. 1101a(a))).
                    (D) A Tribal College or University (as such term is 
                defined in section 316(b) of the Higher Education Act 
                of 1965 (20 U.S.C. 1059c(b))).
                    (E) An Alaska Native-serving institution (as such 
                term is defined in section 317(b) of the Higher 
                Education Act of 1965 (20 U.S.C. 1059d(b))).
                    (F) A Native Hawaiian-serving institution (as such 
                term is defined in section 317(b) of the Higher 
                Education Act of 1965 (20 U.S.C. 1059d(b))).
                    (G) A Predominantly Black Institution (as such term 
                is defined in section 318(b) of the Higher Education 
                Act of 1965 (20 U.S.C. 1059e(b))).
                    (H) A Native American-serving, nontribal 
                institution (as such term is defined in section 319(b) 
                of the Higher Education Act of 1965 (20 U.S.C. 
                1059f(b))).
                    (I) An Asian-American and Native American Pacific 
                Islander-serving institution (as such term is defined 
                in section 320(b) of the Higher Education Act of 1965 
                (20 U.S.C. 1059g(b))).
            (4) Older.--The term ``older'' means an individual who has 
        attained the age of 40 or older as of the date on which such 
        individual is scheduled to begin participation in the Program.
            (5) Racial and ethnic minority.--The term ``racial and 
        ethnic minority'' means Black or African American, Hispanic or 
        Latino, Asian American, or Native American.
            (6) Socioeconomically diverse.--The term 
        ``socioeconomically diverse'' means a spread of income levels, 
        including low-income individuals.
                                 <all>