EXAMINING DHS’S EFFORTS TO STRENGTHEN ITS CYBERSECURITY WORKFORCE JOINT HEARING BEFORETHE SUBCOMMITTEE ON CYBERSECURITY AND INFRASTRUCTURE PROTECTION ANDTHE SUBCOMMITTEE ON OVERSIGHT AND MANAGEMENT EFFICIENCY OFTHE COMMITTEE ON HOMELAND SECURITY HOUSE OF REPRESENTATIVES ONE HUNDRED FIFTEENTH CONGRESS SECOND SESSION MARCH 7, 2018 Serial No. 115–52 Printed for the use of the Committee on Homeland Security Available via the World Wide Web: http://www.govinfo.gov U.S. GOVERNMENT PUBLISHING OFFICE 30–788 PDF WASHINGTON : 2018 VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00001 Fmt 5011 Sfmt 5011 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH Congress.#13 COMMITTEE ON HOMELAND SECURITY MICHAEL T. MCCAUL, Texas, Chairman LAMAR SMITH, Texas BENNIE G. THOMPSON, Mississippi PETER T. KING, New York SHEILA JACKSON LEE, Texas MIKE ROGERS, Alabama JAMES R. LANGEVIN, Rhode Island LOU BARLETTA, Pennsylvania CEDRIC L. RICHMOND, Louisiana SCOTT PERRY, Pennsylvania WILLIAM R. KEATING, Massachusetts JOHN KATKO, New York DONALD M. PAYNE, JR., New Jersey WILL HURD, Texas FILEMON VELA, Texas MARTHA MCSALLY, Arizona BONNIE WATSON COLEMAN, New Jersey JOHN RATCLIFFE, Texas KATHLEEN M. RICE, New York DANIEL M. DONOVAN, JR., New York J. LUIS CORREA, California MIKE GALLAGHER, Wisconsin VAL BUTLER DEMINGS, Florida CLAY HIGGINS, Louisiana NANETTE DIAZ BARRAGA´N, California JOHN H. RUTHERFORD, Florida THOMAS A. GARRETT, JR., Virginia BRIAN K. FITZPATRICK, Pennsylvania RON ESTES, Kansas DON BACON, Nebraska BRENDAN P. SHIELDS, Staff Director STEVEN S. GIAIER, Chief Counsel MICHAEL S. TWINCHEK, Chief Clerk HOPE GOINS, Minority Staff Director SUBCOMMITTEE ON CYBERSECURITY AND INFRASTRUCTURE PROTECTION JOHN RATCLIFFE, Texas, Chairman JOHN KATKO, New York CEDRIC L. RICHMOND, Louisiana DANIEL M. DONOVAN, JR., New York SHEILA JACKSON LEE, Texas MIKE GALLAGHER, Wisconsin JAMES R. LANGEVIN, Rhode Island BRIAN K. FITZPATRICK, Pennsylvania VAL BUTLER DEMINGS, Florida DON BACON, Nebraska BENNIE G. THOMPSON, Mississippi (ex officio) MICHAEL T. MCCAUL, Texas (ex officio) KRISTEN M. DUNCAN, Subcommittee Staff Director SUBCOMMITTEE ON OVERSIGHT AND MANAGEMENT EFFICIENCY SCOTT PERRY, Pennsylvania, Chairman J. LUIS CORREA, California JOHN RATCLIFFE, Texas KATHLEEN M. RICE, New York CLAY HIGGINS, Louisiana NANETTE DIAZ BARRAGA´N, California THOMAS A. GARRETT, JR., Virginia BENNIE G. THOMPSON, Mississippi (ex officio) RON ESTES, Kansas MICHAEL T. MCCAUL, Texas (ex officio) DIANA BERGWIN, Subcommittee Staff Director ERICA D. WOODS, Interim Subcommittee Minority Staff Director (II) VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00002 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH C O N T E N T S Page STATEMENTS The Honorable John Ratcliffe, a Representative in Congress From the State of Texas, and Chairman, Subcommittee on Cybersecurity and Infrastruc- ture Protection: Oral Statement ..................................................................................................... 1 Prepared Statement ............................................................................................. 2 The Honorable Scott Perry, a Representative in Congress From the State of Pennsylvania, and Chairman, Subcommittee on Oversight and Manage- ment Efficiency: Oral Statement ..................................................................................................... 4 Prepared Statement ............................................................................................. 6 The Honorable J. Luis Correa, a Representative in Congress From the State of California, and Ranking Member, Subcommittee on Oversight and Man- agement Efficiency: Oral Statement ..................................................................................................... 3 Prepared Statement ............................................................................................. 4 The Honorable Michael T. McCaul, a Representative in Congress From the State of Texas, and Chairman, Committee on Homeland Security: Oral Statement ..................................................................................................... 7 Prepared Statement ............................................................................................. 8 The Honorable Bennie G. Thompson, a Representative in Congress From the State of Mississippi, and Ranking Member, Committee on Homeland Security: Prepared Statement ............................................................................................. 8 The Honorable Sheila Jackson Lee, a Representative in Congress From the State of Texas: Prepared Statement ............................................................................................. 9 The Honorable Cedric L. Richmond, a Representative in Congress From the State of Louisiana, and Ranking Member, Subcommittee on Cybersecurity and Infrastructure Protection: Prepared Statement ............................................................................................. 12 WITNESSES Mr. Gregory Wilshusen, Director of Information Security Issues, Government Accountability Office: Oral Statement ..................................................................................................... 14 Prepared Statement ............................................................................................. 15 Ms. Angela Bailey, Chief Human Capital Officer, Management Directorate, U.S. Department of Homeland Security: Oral Statement ..................................................................................................... 22 Joint Prepared Statement ................................................................................... 23 Ms. Rita Moss, Director, Office of Human Capital, National Protection and Programs Directorate, U.S. Department of Homeland Security: Oral Statement ..................................................................................................... 28 Joint Prepared Statement ................................................................................... 23 APPENDIX Questions From Chairman John Ratcliffe for Gregory C. Wilshusen ................. 47 Questions From Honorable Ron Estes for Gregory C. Wilshusen ....................... 48 (III) VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00003 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH IV Page Questions From Chairman John Ratcliffe for the Department of Homeland Security ................................................................................................................. 48 Questions From Honorable Ron Estes for the Department of Homeland Secu- rity ......................................................................................................................... 51 VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00004 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH EXAMINING DHS’S EFFORTS TO STRENGTHEN ITS CYBERSECURITY WORKFORCE Wednesday, March 7, 2018 U.S. HOUSE OF REPRESENTATIVES, COMMITTEE ON HOMELAND SECURITY, SUBCOMMITTEE ON CYBERSECURITY AND INFRASTRUCTURE PROTECTION, AND SUBCOMMITTEE ON OVERSIGHT AND MANAGEMENT EFFICIENCY, Washington, DC. The subcommittees met, pursuant to notice, at 2:05 p.m., in room HVC–210, Capitol Visitor Center, Hon. John Ratcliffe [Chairman of the Cybersecurity and Infrastructure Protection subcommittee] pre- siding. Present: Representatives Ratcliffe, Perry, Katko, Higgins, Dono- van, Garrett, Estes, Fitzpatrick, Correa, Jackson Lee, Langevin, Barraga´n, and Demings. Also present: Representative McCaul. Mr. RATCLIFFE. Good afternoon. The Committee on Homeland Se- curity, Subcommittees on Cybersecurity and Infrastructure Protec- tion and Oversight Management Efficiency will come to order. The subcommittees are meeting today to examine how the De- partment of Homeland Security is working to address its cyberse- curity work force needs. I now recognize myself for an opening statement. I would like to begin by thanking our panel for taking the time to be here to testify today. Your thoughts and opinions certainly are important as we oversee the implementation of work force au- thorities at the Department of Homeland Security. We have seen cyber attacks affect almost every facet of our daily lives, with sometimes devastating impact. They remind us how vul- nerable governments and economies are to the very real threat that our cyber adversaries pose. As the lead civilian agency for our Federal cybersecurity posture, the Department of Homeland Security is a key piece of this equa- tion, especially the National Protection Programs Directorate. A knowledgeable and skilled cybersecurity work force at DHS is on the front lines of securing our Federal networks and protecting our critical infrastructure. It is against this backdrop that DHS must compete with the pri- vate sector to recruit and to retain the best talent possible, in order to carry out its cybersecurity mission and protect our critical infra- structure. In 2014 Congress passed several pieces of legislation in order to augment the cybersecurity work force at DHS, including (1) VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00005 Fmt 6633 Sfmt 6602 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH 2 the Homeland Security, Cybersecurity Workforce Assessment Act and the Border Patrol Agent Pay Reform Act. Among other effects, these laws expanded DHS’s hiring authori- ties and allowed the Department to better recruit and hire quali- fied cyber professionals. Unfortunately, these new authorities have not yet been fully implemented. Last month, the Government Accountability Office released a re- port entitled, ‘‘Urgent need for DHS to take actions to identify its position and critical skill requirements.’’ The findings are pretty troubling. While DHS has taken actions to idetify, categorize, and assign employment codes to its cybersecurity positions, its efforts have been neither timely, nor complete. Identifying DHS work force capability gaps and recruiting to fill them, is a problem that this committee has long examined. How- ever, GAO found that DHS has not identified its Department-wide security or cybersecurity critical needs. Ensuring that DHS collects complete and accurate data on all filled and vacant cybersecurity positions for identification and coding efforts is a task that DHS must not ignore, nor fail to complete. A scatter-shot approach to fulfilling work force needs without comprehensive data to back up those needs is not an effective use of Federal resources. In fact, there may even be the potential of delaying assistance to critical infrastructure sectors and State and local governments if DHS does not have an adequate amount of cyber workers with the correct skills. At the same time, I am pleased to hear that DHS ac- knowledged and agreed with all of the recommendations presented by GAO in this report. DHS will create a periodic review process for cyber roles by the end of next month, and, most importantly, DHS promised to de- velop Department-wide guidance for identifying areas and positions of critical need by this summer. While DHS must work to overcome slow hiring processes and work force pipeline issues in order to build the essential work force required to meet its cyber mission, at the end of the day DHS can- not bring people into the hiring pipeline if it does not have accurate accounting of what its current and future needs really are. NPPD is our Government’s premier civilian cybersecurity agency, a distinction that I hope will soon be bolstered by its elevation to the Cybersecurity and Infrastructure Security Agency, with pend- ing legislation over in the Senate. So let us look at some of the challenges we will be discussing today as collective opportunities to lead together. We must get this right, and I believe that we will. [The statement of Chairman Ratcliffe follows:] STATEMENTOFCHAIRMANJOHNRATCLIFFE MARCH7, 2018 I would like begin by thanking our panel for taking the time today to testify. Your thoughts and opinions are very important as we oversee the implementation of workforce authorities at the Department of Homeland Security. We have seen cyber attacks affect almost every facet of our daily lives with dev- astating impacts, and they remind us of how vulnerable governments and economies are to the very real threat that our cyber adversaries pose. As the lead civilian agency for our Federal cybersecurity posture, the Department of Homeland Security is a key piece of this equation, especially the National Protection and Programs Di- VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00006 Fmt 6633 Sfmt 6621 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH 3 rectorate. A knowledgeable and skilled cybersecurity workforce at DHS is on the front lines of securing our Federal networks and protecting critical infrastructure. Against this backdrop, DHS must compete with the private sector to recruit and retain the best talent possible in order to carry out its cybersecurity mission and protect our critical infrastructure. In 2014, Congress passed several pieces of legisla- tion in order to augment the cybersecurity workforce at DHS, including the Home- land Security Cybersecurity Workforce Assessment Act and the Border Patrol Agent Pay Reform Act. Among other effects, these laws expanded DHS’s hiring authorities and allowed the Department to better recruit and hire qualified cyber professionals. Unfortunately, these new authorities have not yet been fully implemented. Last month, the Government Accountability Office released a report entitled ‘‘Ur- gent Need for DHS to Take Actions to Identify Its Position and Critical Skill Re- quirements’’—and the findings are troubling. While DHS has taken actions to iden- tify, categorize, and assign employment codes to its cybersecurity positions, its ef- forts have been neither timely nor complete. Identifying DHS workforce capability gaps and recruiting to fill them is a problem this committee has long examined; however, GAO found that DHS has not identified its Department-wide cybersecurity critical needs. Ensuring that DHS collects complete and accurate data on all filled and vacant cybersecurity positions for identification and coding efforts is a task that DHS must not ignore or fail to complete. A scattershot approach to fulfilling work- force needs without comprehensive data to back those needs up is not an effective use of Federal resources. In fact, there may even be the potential of delaying assist- ance to critical infrastructure sectors and State and local governments if DHS does not have an adequate amount of cyber workers with the correct skills. At the same time, I am pleased to hear that DHS acknowledged and agreed with all of the recommendations presented by GAO in this report. DHS will create a peri- odic review process for cyber roles by the end of next month, and, most significantly, DHS promised to develop Department-wide guidance for identifying areas and posi- tions of critical need by this summer. While DHS must work to overcome slow hir- ing processes and workforce pipeline issues in order to build the essential workforce required to meet its cyber mission, at the end of the day, DHS cannot bring people into the hiring pipeline if it does not have accurate accounting of what its current and future needs are. NPPD is our Government’s premier civilian cybersecurity agency—a distinction that I hope will soon be bolstered by its elevation to the Cybersecurity and Infra- structure Security Agency with pending legislation in the Senate. So let us look at some of the challenges we will be discussing today as collective opportunities to lead together. We must get this right, and I believe that we will. Mr. RATCLIFFE. The Chair now recognizes the gentleman from California, Mr. Correa, for any statement that he may have. Mr. CORREA. Thank you, Mr. Chairman. Want to thank you and Chairman Perry for holding this most important hearing today. Of course, I want to thank also our witnesses for being here today. All of you know, watching TV, watching news very frequently. You hear stories about China, Russia, and others targeting our cyber system, including our election system and, of course, our critical in- frastructures. Our National security, our economy, in many ways our daily lives, depend on a stable, safe, and resilient cyber system. The De- partment of Homeland Security plays a critical role in protecting the Nation’s cyber space, which includes not only our own DHS computers but also those belonging to other civilian agencies in our critical infrastructure and, of course, including our collection sys- tem. To fulfill this role, DHS must have cybersecurity work force that is knowledgeable, well-trained, and dedicated to our mission. Sadly and unfortunately, according to the GAO, DHS has not taken the proper and necessary steps to staff the Department with cyber pro- fessionals. Specifically, DHS has not identified or reported to Con- gress on its own Department-wide cybersecurity critical work force VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00007 Fmt 6633 Sfmt 6602 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH 4 needs. Additionally, according to the GAO, DHS has overstated the number of filled positions. Without appropriate tracking DHS is not in the position to effec- tively examine its cybersecurity work force, identify its critical skills gaps or improve its work force planning. DHS has been given a number of tools to help bolster its work force, including special hiring authority, allowing DHS to expedite the hiring process and providing monetary incentives and also a flexible approach to re- cruiting and retention of cyber experts. I look forward to speaking with the witnesses today about the specifics of the GAO findings and I want to see how we can move forward and make sure we safeguard America’s cybersecurity. Mr. Chair, I yield. [The statement of Ranking Member Correa follows:] STATEMENTOFRANKINGMEMBERJ. LUISCORREA MARCH7, 2018 Almost daily, we learn of nefarious attempts by Russia, China, and others to im- pact our cyber systems, including election systems and critical infrastructure. Our National security, our economy, and in many ways our daily lives depend on a stable, safe, and resilient cyber space. The Department of Homeland Security plays a critical role in protecting the Na- tion’s cyber space, which includes not only DHS’s own computer systems and infor- mation, but also those belonging to other Federal civilian agencies and our critical infrastructure, including election systems. To fulfill this role, DHS must have a cybersecurity workforce that is well-trained, resilient, and dedicated to the mission. However, according to the Government Accountability Office, DHS has not taken the steps necessary to staff the Department with cyber professionals properly. Specifically, DHS has not identified or reported to Congress on its Department- wide cybersecurity critical workforce needs. Additionally, according to GAO, DHS overstated the number of filled and vacant cybersecurity positions assigned with the proper identification codes for the specific role. Without appropriate tracking, DHS will not be positioned to effectively examine its cybersecurity workforce, identify its critical skill gaps, or improve its workforce planning. President Trump has claimed to be in support of strengthening Federal networks and critical infrastructure, which undoubtedly will require a more robust workforce. DHS has been given a range of tools to help bolster the cyber workforce, including special hiring authority for cybersecurity positions that allows DHS to expedite the hiring process, provide monetary incentives, and adopt a nimble approach to recruit- ment and retention. I look forward to speaking with witnesses today about the specifics of the GAO findings and ways we can move the Department in a positive direction. Mr. RATCLIFFE. Thank the gentleman. The Chair now recognizes the Chairman of the subcommittee on Oversight and Management Efficiency, the gentleman from Pennsylvania, Mr. Perry, for his opening statement. Mr. PERRY. Good afternoon. I would like to thank Chairman Ratcliffe for holding this hearing today and including the Oversight and Management Efficiency subcommittee in this very important and timely discussion of the Department of Homeland Security’s ef- forts to strengthen its cybersecurity work force. I also thank the Ranking Member of the subcommittee, Mr. Correa, as well as the witnesses that are willing to be here today. In today’s world our Nation and its critical infrastructure face an increasingly diverse and sophisticated array of cybersecurity threats from both State and non-State actors. Adversaries across VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00008 Fmt 6633 Sfmt 6602 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH 5 the globe have invested heavily in building out cyber capabilities and have demonstrated an increasing capacity to successfully exe- cute cyber attacks against the United States and our allies. As the lead civilian agency for securing the Nation’s public and private critical infrastructure, which is dependent on IT systems and electronic data, the Department of Homeland Security and its work force play a critical role in protecting the Nation’s cyber space. Given this role, data continuing to show cyber personnel short- ages at DHS must remain a top concern for both DHS and this committee. Demand for cyber-related positions continues to outpace the number of individuals qualified to fill them and agencies like DHS must find a way to compete with the private sector in attract- ing highly-skilled cyber workers. To address these challenges the committee has passed several pieces of legislation in recent years that were signed into law, pro- viding DHS with additional hiring authorities to better recruit and retain a qualified cyber work force. The Homeland Security Cyber- security Workforce Assessment Act, enacted into law as part of the Border Patrol Agency Pay Reform Act of 2014, Public Law No. 113– 277, required DHS to survey its work force and identify, categorize, and code all vacant and non-vacant cybersecurity positions. The Act aimed to help DHS assess its current cyber work force in order to identify skills gaps and critical needs and improve stra- tegic work force planning to more effectively recruit, hire, train, and retain cyber personnel. Unfortunately, according to a recent U.S. Government Accountability Office Report, DHS has failed to implement the actions required by this Act in a timely, accurate, or complete manner. GAO audited 6 components and found that the Department has not met any, any of the deadlines established by the Act. Two-and- a-half years after the statutory deadline to identify the code posi- tions, 3 of the 6 components studied still have not identified all of their cyber positions and, as of August 2017, the Department has only assigned employment codes to 79 percent of its identified cyber positions. Further, while DHS has identified cyber work force capacity and capability gaps, it has not submitted to Congress and the U.S. Office of Personnel Management required reports on crit- ical needs aligned with the National Initiative for Cybersecurity Education’s National Cybersecurity Workforce Framework. Congress has acted to provide DHS with the tools to help meet the work force needs demanded by the current cyber threat envi- ronment. The Department’s failure to utilize these tools is unac- ceptable. Bureaucratic delays in hiring the personnel needed to secure our Nation’s cyber space are detrimental to our National security. Sadly, the failure to properly implement cyber-related hiring au- thorities is emblematic of the systemic hiring issues continuing to plague the Department. A management report released by DHS’s Office of the Inspector General last fall aptly summarized that the Department and its components continue to encounter significant hiring difficulties re- lated to long hire times and a lack of human resource staff, auto- mated system, and processes to determine needed staff. VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00009 Fmt 6633 Sfmt 6602 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH 6 Just last week, the Oversight and Management Efficiency Sub- committee heard testimony on the ineffectiveness and delays asso- ciated with the Department’s fitness determination process, an in- tegral part of the contract work force’s on-boarding process. These problems are especially alarming, given the significant re- sponsibilities facing DHS as it prepares to meet cyber work force needs and undertake the border security-related hiring surge man- dated by the President. I want to thank our panel for testifying this afternoon and I look forward to hearing an update on the Department’s implementation of Public Law 113–277’s requirements, as well as how DHS’s Man- agement Directorate is working with components to improve hiring processes. I thank you and yield back the balance. [The statement of Chairman Perry follows:] STATEMENTOFCHAIRMANSCOTTPERRY MARCH7, 2018 Good afternoon. I would like to thank Chairman Ratcliffe for holding this hearing today and including the Oversight and Management Efficiency Subcommittee in this very important and timely discussion on the Department of Homeland Security’s ef- forts to strengthen its cybersecurity workforce. In today’s world, our Nation and its critical infrastructure face an increasingly di- verse and sophisticated array of cybersecurity threats from both state and non-state actors. Adversaries across the globe have invested heavily in building out cyber ca- pabilities and have demonstrated an increasing capacity to successfully execute cyber attacks against the United States and our allies. As the lead civilian agency for securing the Nation’s public and private critical infrastructure, which is dependent on IT systems and electronic data, the Depart- ment of Homeland Security (DHS) and its workforce play a critical role in protecting the Nation’s cyber space. Given this role, data continuing to show cyber personnel shortages at DHS must remain a top concern for both DHS and this committee. De- mand for cyber-related positions continues to outpace the number of individuals qualified to fill them and agencies like DHS must compete with the private sector in attracting highly-skilled cyber workers. To address these challenges, this committee has passed several pieces of legisla- tion in recent years that were signed into law providing DHS with additional hiring authorities to better recruit and retain a qualified cyber workforce. The Homeland Security Cybersecurity Workforce Assessment Act, enacted into law as part of the Border Patrol Agent Pay Reform Act of 2014 (Public Law 113–277), required DHS to survey its workforce and identify, categorize, and code all vacant and non-vacant cybersecurity positions. The act aimed to help DHS assess its current cyber work- force in order to identify skills gaps and critical needs, and improve strategic work- force planning to more effectively recruit, hire, train, and retain cyber personnel. Unfortunately, according to a recent U.S. Government and Accountability Office (GAO) report, DHS has failed to implement the actions required by this act in a timely, accurate, or complete manner. GAO audited six components and found that the Department has not met any of the deadlines established by the act. Two-and- a-half years after the statutory deadline to identify and code positions, three of the six components studied still have not identified all of their cyber positions and, as of August 2017, the Department has only assigned employment codes to 79 percent of its identified cyber positions. Further, while DHS has identified cyber workforce capacity and capability gaps, it has not submitted to Congress and the U.S. Office of Personnel Management (OPM) required reports on critical needs aligned with the National Initiative for Cybersecurity Education’s National Cybersecurity Workforce Framework. Congress has acted to provide DHS with the tools to help meet the workforce needs demanded by the current cyber threat environment. The Department’s failure to utilize these tools is unacceptable. Bureaucratic delays in hiring the personnel needed to secure our Nation’s cyber space are detrimental to our National security. Sadly, the failure to properly implement cyber-related hiring authorities is em- blematic of the systemic hiring issues continuing to plague the Department. A man- VerDate Mar 15 2010 12:24 Jul 20, 2018 Jkt 000000 PO 00000 Frm 00010 Fmt 6633 Sfmt 6621 H:\115TH CONGRESS\18JT0307\18JT0307.TXT HEATH