,i #aae? ,,congress #a/ ,session ,h4 ,r4 #cjaj ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,june #bb1 #bjag,ms4 ,e%oo 7= h]self & ,mrs4 ,brooks ( ,indiana7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,sci5ce1 ,space1 & ,te*nology ,a ,,bill ,to provide = ! id5tification & docum5tation ( be/ practices = cyb] hygi5e by ! ,national ,in/itute ( ,/&>ds & ,te*nology1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,promot+ ,good ,cyb] ,hygi5e ,act ( #bjag4 #b4 ,cyb] hygi5e be/ practices 7a7 ,e/abli%m5t ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 ! ,national ,in/itute ( ,/&>ds & ,te*nology1 9 consultation ) ! ,f$]al ,trade ,commission & ! ,dep>tm5t ( ,homel& ,security1 aft] notice & an opportunity = public comm5t1 %all e/abli% a li/ ( be/ practices = effective & usable cyb] hygi5e = use by ! ,f$]al ,gov]nm5t1 ! private sector1 & any individual or organization utiliz+ an in=mation sy/em or device4 ,su* li/ %all-- 7#a7 be a li/ ( simple1 basic controls t h ! mo/ impact 9 def5d+ aga9/ common cyb]security ?reats & risks2 7#b7 utilize te*nologies t are comm]cial (f-!-%elf & bas$ on int]national /&>ds2 & 7#c7 to ! degree practicable1 be bas$ on & consi/5t ) ! ,cyb]security ,framework conta9$ 9 ,executive ,ord] #acfcf1 entitl$ ,improv+ ,critical ,infra/ructure ,cyb]security1 issu$ 9 ,febru>y #bjac1 or any successor framework4 7b7 ,volunt>y practices ,! be/ practices on ! li/ e/abli%$ "u ?is section %all be consid]$ volunt>y & are n int5d$ to be con/ru$ z a li/ ( m&atory actions4 7c7 ,basel9e ,! be/ practices on ! li/ e/abli%$ "u ?is section are int5d$ z a basel9e = ! ,f$]al ,gov]nm5t1 ! private sector1 & any individual or organization utiliz+ an in=mation sy/em or device4 ,su* entities are enc\rag$ to use & improve on ^? be/ practices4 7d7 ,updates ,! ,national ,in/itute ( ,/&>ds & ,te*nology %all review & update ! li/ ( be/ practices e/abli%$ "u ?is section on an annual basis4 7e7 ,public availability ,! li/ ( be/ practices e/abli%$ "u ?is section %all be publi%$ 9 a cle> & concise =mat & made available prom95tly on ! public websites ( ! ,f$]al ,trade ,commission & ! ,small ,bus9ess ,adm9i/ration4 7f7 ,o!r f$]al cyb]security requirem5ts ,no?+ 9 ?is section %all be con/ru$ to sup]s$e1 alt]1 or o!rwise affect any cyb]security requirem5ts applicable to ,f$]al ag5cies4 7g7 ,consid]ations ,9 c>ry+ out subsection 7a71 ! ag5cies %all consid] ! b5efits1 z !y p]ta9 to cyb] hygi5e1 ( em]g+ te*nologies & processes t provide enhanc$ security protections1 includ+ multi-factor au!ntication1 data loss prev5tion1 micro-segm5tation1 data encryption1 cl\d s]vices1 anonymization1 s(tw>e pat*+ & ma9t5ance1 phi%+ education1 & o!r /&>d cyb]security measures to a*ieve tru/$ security 9 ! infra/ructure4 7h7 ,/udy on em]g+ concepts ,to promote effective cyb] hygi5e = ! int]net ( ?+s 7#a7 ,int]net ( ?+s def9$ ,9 ?is subsection1 ! t]m ,int]net ( ,?+s means ! set ( physical objects emb$d$ ) s5sors or actuators & connect$ to a network4 7#b7 ,/udy requir$ ,! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology & ! ,f$]al ,trade ,commission1 %all conduct a /udy on cyb]security ?reats relat+ to ! ,int]net ( ,?+s4 7#c7 ,matt]s /udi$ ,z "p ( ! /udy requir$ by p>agraph 7#b71 ! ,secret>y %all-- 7,a7 assess cyb]security ?reats relat+ to ! ,int]net ( ,?+s2 7,b7 assess ! effect su* ?reats may h on ! cyb]security ( ! in=mation sy/ems & networks ( ! ,f$]al ,gov]nm5t 7except = ! in=mation sy/ems & networks ( ! ,dep>tm5t ( ,def5se & ! intellig5ce community 7z def9$ 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc7772 & 7,c7 develop recomm5dations = address+ su* ?reats4 7#d7 ,report to congress ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all-- 7,a7 complete ! /udy requir$ by p>agraph 7#b72 & 7,b7 submit to ,congress a report t conta9s ! f9d+s ( su* /udy & ! recomm5dations develop$4