42 U.S.C. § 18996

The Director, acting through the National Center for Science and Engineering Statistics established in section 1862p of this title and in coordination with the Director of the National Institute of Standards and Technology and other appropriate Federal statistical agencies, shall establish a cybersecurity workforce data initiative that— (1) assesses the feasibility of providing nationally representative estimates and statistical information on the cybersecurity workforce; (2) utilizes the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800–181), or other frameworks, as appropriate, to enable a consistent measurement of the cybersecurity workforce; (3) utilizes and complements existing data on employer requirements and unfilled positions in the cybersecurity workforce; (4) consults key stakeholders and the broader community of practice in cybersecurity workforce development to determine data requirements needed to strengthen the cybersecurity workforce; (5) evaluates existing Federal survey data for information pertinent to developing national estimates of the cybersecurity workforce; (6) evaluates administrative data and other supplementary data sources, as available, to describe and measure the cybersecurity workforce; and (7) collects statistical data, to the greatest extent practicable, on credential attainment and employment outcomes information for the cybersecurity workforce.