,i #aaeth ,,congress #ast ,session ,h4 ,r4 #cihe ,,in ,,the ,,house ,,of ,,representatives ,october #e1 #bjag,mr4 ,trott 7for himself and ,mrs4 ,brooks of ,indiana7 introduced the following bill2 which was referred to the ,committee on ,energy and ,commerce ,a ,,bill ,to establish a working group of public and private entities led by the ,food and ,drug ,administration to recommend voluntary frameworks and guidelines to increase the security and resilience of ,internet of ,medical ,things devices1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,internet of ,medical ,things ,resilience ,partnership ,act of #bjag4 #b4 ,study on the security and resilience of certain medical devices 7a7 ,study ,not later than #e months after the date of enactment of this ,act1 the ,commissioner of the ,food and ,drug ,administration1 in consultation with the ,national ,institute of ,standards and ,technology1 shall establish a working group of public and private entities to develop recommendations for voluntary frameworks and guidelines to increase the security and resilience of networked medical devices sold in the ,united ,states that store1 receive1 access1 or transmit information to an external recipient or system for which unauthorized access1 modification1 misuse1 or denial of use may result in patient harm4 7b7 ,working group 7#a7 ,in general ,in developing the recommendations under subsection 7a71 the ,commissioner shall seek input from a working group representing the ,federal ,government1 industry1 and academia4 7#b7 ,chairperson ,the ,commissioner of the ,food and ,drug ,administration1 or a designee of the ,commissioner1 shall serve as the chairperson of the working group established under paragraph 7#a74 7#c7 ,membership ,membership of the working group shall include a representative from each of the following3 7,a7 ,the ,center for ,devices and ,radiological ,health of the ,food and ,drug ,administration4 7,b7 ,the ,office of the ,national ,coordinator for ,health ,information ,technology of the ,department of ,health and ,human ,services4 7,c7 ,the ,office of ,technology ,research and ,investigation of the ,federal ,trade ,commission4 7,d7 ,the ,cybersecurity and ,communications ,reliability ,division of the ,federal ,communications ,commission4 7,e7 ,the ,national ,institute of ,standards and ,technology of the ,department of ,commerce4 7,f7 ,the ,national ,cyber ,security ,alliance4 7#d7 ,appointed ,members ,the chairperson shall appoint to the working group a minimum of #c qualified representatives from each of the following private sector categories3 7,a7 ,medical device manufacturers4 7,b7 ,health care providers4 7,c7 ,health insurance providers4 7,d7 ,cloud computing4 7,e7 ,wireless network providers4 7,f7 ,enterprise security solutions systems4 7,g7 ,health information technology4 7,h7 ,web-based mobile application developers4 7,i7 ,software developers4 7,j7 ,hardware developers4 7c7 ,report ,not later than #ah months after the date of enactment of this ,act1 the ,commissioner shall submit to ,congress a report on the recommendations developed under subsection 7a71 including-- 7#a7 an identification of existing cybersecurity standards1 guidelines1 frameworks1 and best practices that are applicable to mitigate vulnerabilities in the devices described in subsection 7a72 7#b7 an identification of existing and developing international and domestic cybersecurity standards1 guidelines1 frameworks1 and best practices that mitigate vulnerabilities in such devices2 7#c7 a specification of high-priority gaps for which new or revised standards are needed2 and 7#d7 potential action plans by which such gaps can be addressed4