Modernizing the Acquisition of Cybersecurity Experts Act of 2023

What it does

This bill modifies educational requirements for cybersecurity positions in the federal government.

Specifically, the bill prohibits federal agencies from establishing minimum educational requirements for cybersecurity positions unless such requirements are mandated by law for the position in the state or locality in which the work is to be performed. Agencies may also only consider an applicant's education in conjunction with other minimum qualifications for a position if the applicant's education directly reflects the required competencies for the position.

The bill applies to positions in the competitive service that are classified under the Information Technology Management Series or any other position that is designated as a cybersecurity position under the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework.

The Office of Personnel Management must annually publish on its website (1) any changes to minimum qualifications relating to education for these positions, and (2) data on the level of education of those occupying these positions.

Summary by the Congressional Research Service, Oct 2, 2023 (Passed House). CRS summarizes bills impartially; it does not take positions.