Bill Overview
Title: Federal Rotational Cyber Workforce Program Act of 2021
Description: This bill establishes a rotational cyber workforce program under which certain federal employees may be detailed among rotational cyber workforce positions at other agencies. This bill authorizes an agency to determine whether a workforce position involving information technology, cybersecurity, or other cyber-related functions in that agency is eligible for the program. Additionally, the bill requires the Office of Personnel Management to issue a Federal Rotational Cyber Workforce Program operation plan providing policies, processes, and procedures for detailing employees among rotational cyber workforce positions at agencies. The Government Accountability Office must assess the operation and effectiveness of the rotational cyber workforce program by addressing the extent to which agencies have participated in the program and the experiences of employees serving in the program.
Sponsors: Sen. Peters, Gary C. [D-MI]
Target Audience
Population: Federal employees in information technology, cybersecurity, or other cyber-related functions at U.S. federal agencies
Estimated Size: 245000
- The rotational cyber workforce program is designed to impact federal employees who are in positions related to information technology, cybersecurity, or other cyber-related functions.
- The program applies to federal agencies, meaning all U.S. federal agencies with cyber-related positions could potentially be impacted.
- The bill facilitates rotations among positions, affecting current employees and possibly future employees who enter such positions.
Reasoning
- The rotational cyber workforce program is aimed at federal employees in IT and cyber-related positions; therefore, the impact must reflect this specific group.
- Given the budget constraints, the program can't broadly impact all federal employees but should significantly affect those directly engaged in cyber roles.
- The scores consider both initial enthusiasm and the longevity of benefits as employees gain more diversified experience through rotations.
- While younger employees might see more excitement and potential career growth, older employees close to retirement might perceive less impact.
- Being a specialized program, the commonness of affected individuals is scored lower due to the specific qualifications required and the limited number of federal cyber roles.
Simulated Interviews
Cybersecurity Analyst (Washington, D.C.)
Age: 29 | Gender: female
Wellbeing Before Policy: 7
Duration of Impact: 5.0 years
Commonness: 4/20
Statement of Opinion:
- The program sounds like a great opportunity for career development and gaining new experiences.
- I am excited about the potential rotations to different agencies to learn various cyber practices.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 8 | 7 |
| Year 2 | 9 | 7 |
| Year 3 | 8 | 7 |
| Year 5 | 8 | 6 |
| Year 10 | 7 | 6 |
| Year 20 | 6 | 5 |
IT Project Manager (Denver, Colorado)
Age: 45 | Gender: male
Wellbeing Before Policy: 6
Duration of Impact: 3.0 years
Commonness: 6/20
Statement of Opinion:
- While the rotation sounds beneficial, I'm more concerned about stability and maintaining my current role.
- I'm hesitant about moving to a different agency without knowing the team dynamics.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 6 | 6 |
| Year 2 | 6 | 6 |
| Year 3 | 7 | 6 |
| Year 5 | 6 | 5 |
| Year 10 | 6 | 5 |
| Year 20 | 5 | 4 |
Network Security Engineer (Atlanta, Georgia)
Age: 52 | Gender: female
Wellbeing Before Policy: 5
Duration of Impact: 0.0 years
Commonness: 7/20
Statement of Opinion:
- The program might be beneficial for younger employees, but I'm close to retirement and prefer stability over new experiences.
- I doubt I would opt into the program, but it's a good initiative for the agency.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 5 | 5 |
| Year 2 | 5 | 5 |
| Year 3 | 5 | 5 |
| Year 5 | 5 | 5 |
| Year 10 | 5 | 5 |
| Year 20 | 5 | 5 |
Cyber Threat Intelligence Analyst (San Francisco, California)
Age: 34 | Gender: male
Wellbeing Before Policy: 7
Duration of Impact: 4.0 years
Commonness: 5/20
Statement of Opinion:
- I'm hoping this program will allow me to gain perspectives on different agency strategies.
- Having a rotational program can expand my network and open up career advancement opportunities.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 8 | 7 |
| Year 2 | 8 | 7 |
| Year 3 | 8 | 7 |
| Year 5 | 7 | 6 |
| Year 10 | 7 | 6 |
| Year 20 | 6 | 5 |
Information Security Officer (Chicago, Illinois)
Age: 39 | Gender: female
Wellbeing Before Policy: 6
Duration of Impact: 6.0 years
Commonness: 6/20
Statement of Opinion:
- The rotation program could help reconcile differences in how agencies interpret policies.
- Although I'm skeptical about the logistics, I'm willing to try out the program for growth.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 7 | 6 |
| Year 2 | 7 | 6 |
| Year 3 | 7 | 6 |
| Year 5 | 7 | 6 |
| Year 10 | 6 | 5 |
| Year 20 | 6 | 4 |
IT Infrastructure Specialist (Los Angeles, California)
Age: 50 | Gender: male
Wellbeing Before Policy: 6
Duration of Impact: 2.0 years
Commonness: 10/20
Statement of Opinion:
- I see potential benefits, but my role is less about cyber activities and more infrastructure-focused.
- The impact on my career path may be minimal, but I'm open to any new challenge.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 6 | 6 |
| Year 2 | 6 | 6 |
| Year 3 | 6 | 6 |
| Year 5 | 6 | 5 |
| Year 10 | 5 | 5 |
| Year 20 | 5 | 4 |
Software Developer (New York, New York)
Age: 28 | Gender: other
Wellbeing Before Policy: 8
Duration of Impact: 8.0 years
Commonness: 3/20
Statement of Opinion:
- An exciting initiative for gaining broader experience and exploring different federal agencies.
- I'm eager to see how this experience will shape my technical and leadership skills.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 9 | 8 |
| Year 2 | 9 | 8 |
| Year 3 | 9 | 8 |
| Year 5 | 8 | 7 |
| Year 10 | 8 | 7 |
| Year 20 | 8 | 6 |
Cybersecurity Architect (Houston, Texas)
Age: 37 | Gender: female
Wellbeing Before Policy: 7
Duration of Impact: 5.0 years
Commonness: 5/20
Statement of Opinion:
- Great way to unify cybersecurity approaches across different departments.
- Some concern on the practical execution and real benefits beyond knowledge exchange.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 8 | 7 |
| Year 2 | 8 | 7 |
| Year 3 | 7 | 7 |
| Year 5 | 7 | 6 |
| Year 10 | 7 | 6 |
| Year 20 | 6 | 5 |
IT Security Specialist (Miami, Florida)
Age: 40 | Gender: male
Wellbeing Before Policy: 6
Duration of Impact: 6.0 years
Commonness: 6/20
Statement of Opinion:
- If well implemented, it offers a chance to see different IT security practices.
- I wonder if this will lead to long-term standardization of practices between agencies.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 7 | 6 |
| Year 2 | 7 | 6 |
| Year 3 | 7 | 6 |
| Year 5 | 7 | 5 |
| Year 10 | 6 | 5 |
| Year 20 | 6 | 5 |
Systems Administrator (Seattle, Washington)
Age: 31 | Gender: female
Wellbeing Before Policy: 6
Duration of Impact: 7.0 years
Commonness: 4/20
Statement of Opinion:
- The program seems beneficial, particularly for less experienced professionals like myself looking to build a career in federal IT.
- It will depend on how easy it is to transition between roles and agencies.
Wellbeing Over Time (With vs Without Policy)
| Year | With Policy | Without Policy |
|---|---|---|
| Year 1 | 7 | 6 |
| Year 2 | 8 | 6 |
| Year 3 | 8 | 6 |
| Year 5 | 8 | 6 |
| Year 10 | 7 | 5 |
| Year 20 | 6 | 4 |
Cost Estimates
Year 1: $5000000 (Low: $4000000, High: $6000000)
Year 2: $4500000 (Low: $3500000, High: $5500000)
Year 3: $4000000 (Low: $3000000, High: $5000000)
Year 5: $3500000 (Low: $2500000, High: $4500000)
Year 10: $3000000 (Low: $2000000, High: $4000000)
Year 100: $1000000 (Low: $500000, High: $2000000)
Key Considerations
- Effective implementation will require collaboration among multiple federal agencies.
- The success of the program depends on clear guidelines and effective oversight.
- The program's impact on existing cybersecurity operations and their effectiveness should be continuously monitored.