,i #aad? ,,congress #a/ ,session ,h4 ,r4 #cffd ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,octob] #a1 #bjae ,ms4 ,e%oo introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,sci5ce1 ,space1 & ,te*nology ,a ,,bill ,to provide = ! id5tification & docum5tation ( be/ practices = cyb] hygi5e by ! ,national ,in/itute ( ,/&>ds & ,te*nology1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,promot+ ,good ,cyb] ,hygi5e ,act ( #bjae4 #b4 ,cyb] hygi5e be/ practices 7a7 ,e/abli%m5t ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 ! ,national ,in/itute ( ,/&>ds & ,te*nology1 9 consultation ) ! ,f$]al ,trade ,commission & ! ,dep>tm5t ( ,homel& ,security1 aft] notice & an opportunity = public comm5t1 %all e/abli% a li/ ( be/ practices = effective & usable cyb] hygi5e = use by ! ,f$]al ,gov]nm5t1 ! private sector1 & any individual or organization utiliz+ an in=mation sy/em or device4 ,su* li/ %all-- 7#a7 be a li/ ( simple1 basic controls t h ! mo/ impact 9 def5d+ aga9/ common cyb]security ?reats & risks2 7#b7 utilize te*nologies t are comm]cial (f-!-%elf & bas$ on int]national /&>ds2 & 7#c7 be bas$ on ! ,cyb]security ,framework conta9$ 9 ,executive ,ord] #acfcf1 entitl$ ,improv+ ,critical ,infra/ructure ,cyb]security1 issu$ 9 ,febru>y #bjac4 7b7 ,volunt>y practices ,! be/ practices on ! li/ e/abli%$ "u ?is section %all be consid]$ volunt>y & are n int5d$ to be con/ru$ z a li/ ( m&atory actions4 7c7 ,basel9e ,! be/ practices on ! li/ e/abli%$ "u ?is section are int5d$ z a basel9e = ! ,f$]al ,gov]nm5t1 ! private sector1 & any individual or organization utiliz+ an in=mation sy/em or device4 ,su* entities are enc\rag$ to use & improve on ^? be/ practices4 7d7 ,updates ,! ,national ,in/itute ( ,/&>ds & ,te*nology %all review & update ! li/ ( be/ practices e/abli%$ "u ?is section on an annual basis4 7e7 ,public availability ,! li/ ( be/ practices e/abli%$ "u ?is section %all be publi%$ 9 a cle> & concise =mat & made available prom95tly on ! public websites ( ! ,f$]al ,trade ,commission & ! ,small ,bus9ess ,adm9i/ration4 7f7 ,o!r ,f$]al cyb]security requirem5ts ,no?+ 9 ?is section %all be con/ru$ to sup]s$e1 alt]1 or o!rwise affect any cyb]security requirem5ts applicable to ,f$]al ag5cies4 7g7 ,em]g+ concepts ,to provide effective cyb] hygi5e 7#a7 ,/udy ,! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,national ,in/itute ( ,/&>ds & ,te*nology & ! ,f$]al ,trade ,commission1 %all conduct a /udy on cyb]security ?reats relat+ to mobile devices4 7#b7 ,matt]s /udi$ ,z "p ( ! /udy requir$ "u ?is subsection1 ! ,secret>y %all-- 7,a7 assess ?reats relat+ to mobile devices2 7,b7 assess ! effect su* ?reats may h on ! cyb]security ( ! in=mation sy/ems & networks ( ! ,f$]al ,gov]nm5t 7except = ! in=mation sy/ems & networks ( ! ,dep>tm5t ( ,def5se & ! ,intellig5ce ,community72 & 7,c7 develop recomm5dations = address+ su* ?reats4 7#c7 ,report to ,congress ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y %all-- 7,a7 complete ! /udy "u ?is subsection2 & 7,b7 submit a report to ,congress t conta9s ! f9d+s ( su* /udy & ! recomm5dations develop$4 7h7 ,def9ition ,9 ?is section1 ! t]m cyb] hygi5e means processes1 proc$ures1 & me*anisms t help protect in=mation sy/ems or devices aga9/ cyb]security ?reats1 includ+-- 7#a7 unau?oriz$ access2 7#b7 alt]ation ( in=mation or code runn+ or int5d$ to be runn+ on su* sy/ems or devices2 & 7#c7 unau?oriz$ d5ials ( s]vice to au?oriz$ us]s ( ^! sy/ems or devices4