1. Short title This Act may be cited as the Cyber Security Exchange Act . 2. Cybersecurity professional exchange programs (a) Establishment of programs (1) Reports to Congress (A) In general Not later than 180 days after the date of enactment of this Act, the Director of National Intelligence, the Secretary of Defense, the Secretary of Homeland Security, the Secretary of Energy, and the Attorney General shall each submit to the appropriate committees of Congress with respect to that agency head a report that contains— (i) a plan and timeline for implementing the program described in paragraph (2) at the agency (or, in the case of the Director of National Intelligence, at an element of the intelligence community); and (ii) an evaluation of the benefits to the agency (or, in the case of the Director of National Intelligence, to an element of the intelligence community) from the establishment of the program described in paragraph (2). (B) Inability to establish program If an agency head described in subparagraph (A) determines that the agency head is unable to establish the program required under paragraph (2) at the agency (or, in the case of the Director of National Intelligence, at an element of the intelligence community), the agency head shall submit to Congress a notification that describes— (i) the legal basis for that inability