; and and inserting a semicolon; (2) in paragraph (4), by striking the period at the end and inserting ; and ; and (3) by adding at the end the following: (5) identify and develop standards and guidelines for improving the cybersecurity workforce for an agency as part of the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800–181), or successor framework. . (b) Publication of standards and guidelines on cybersecurity awareness Not later than 3 years after the date of the enactment of this Act and pursuant to section 20 of the National Institute of Standards and Technology Act ( 15 U.S.C. 278g–3 ), the Director of the National Institute of Standards and Technology shall publish standards and guidelines for improving cybersecurity awareness of employees and contractors of Federal agencies. 4. Modifications to Federal cyber scholarship-for-service program Section 302 of the Cybersecurity Enhancement Act of 2014 ( 15 U.S.C. 7442 ) is amended— (1) in subsection (b)— (A) in paragraph (2), by striking information technology and inserting information technology and cybersecurity ; (B) by amending paragraph (3) to read as follows: (3) prioritize the placement of scholarship recipients fulfilling the post-award employment obligation under this section to ensure that— (A) not less than 70 percent of such recipients are placed in an executive agency (as defined in section 105 of title 5, United States Code); (B) not more than 10 percent of such recipients are placed as educators in the field of cybersecurity at qualified institutions of higher education that provide scholarships under this section; and (C) not more than 20 percent of such recipients are placed in positions described in paragraphs (2) through (5) of subsection (d); and