; (3) in consultation with relevant Department component heads, identify a roster of positions that may be a good fit for the Program and make recommendations to the Secretary relating to such identified positions; (4) develop a curriculum for the Program, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Secretary; (5) recruit individuals employed by the Department to participate in the Program; (6) determine the best means for training and retention of Department employees enrolled in the Program; (7) maintain an accurate numeration and description of all filled and unfilled cybersecurity positions within the Department by office and component; (8) keep up-to-date a roster of open positions relating to cybersecurity, as determined and approved by the Secretary, and the skills applicants must attain to qualify to fill such positions; (9) maintain information on individuals enrolled in the Program; and (10) annually submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report containing information relating to the duties specified in this subsection. . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 230 the following new item: Sec. 230A. DHS Cybersecurity On-the-Job Training and Employment Apprentice Program. .