H.R. 3599 would direct the Office of Personnel Management to create policies and procedures to allow federal cybersecurity professionals to temporarily work for another agency for up to one year. That requirement would expire five years following enactment. In addition, the bill would require the Government Accountability Office to report to the Congress on the effectiveness of the rotational program.
CBO estimates that implementing H.R. 3599 would cost less than $500,000 over the 2021‑2026 period to issue regulations, train staff, and prepare the required report. Such spending would be subject to the availability of appropriations. For this estimate, CBO assumes that the bill will be enacted in fiscal year 2021. Under that assumption, agencies could incur some costs in 2021, but CBO expects that most of the costs would be incurred in 2022 and later.
Enacting H.R. 3599 could affect direct spending by some agencies that can use fees, receipts from the sale of goods, and other collections to cover operating costs. Because most of those agencies can adjust amounts collected to reflect changes in operating costs, any net changes in direct spending by those agencies would be negligible, CBO estimates.