,,ii  #aae? ,,congress  #a/ ,session    
,s4 #adge  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,june #bi1 #bjag,mr4   
,hat* 7= himself & ,mr4 ,m>key7         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to provide = ! id5tification &
 docum5tation ( be/ practices = cyb]    
hygi5e by ! ,national ,in/itute ( ,/&>ds
 & ,te*nology1 & = o!r purposes4  #a4   
,%ort title ,?is ,act may be cit$ z !   
,promot+ ,good ,cyb] ,hygi5e ,act (     
#bjag4  #b4 ,cyb] hygi5e be/ practices  
7a7 ,e/abli%m5t ,n lat] ?an #a ye> aft] 
! date ( enactm5t ( ?is ,act1 !         
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology %all e/abli% a li/ (
 be/ practices = effective & usable cyb]
 hygi5e--  7#a7 9 consultation ) !      
,f$]al ,trade ,commission & ! ,secret>y 
( ,homel& ,security2  7#b7 aft] notice &
 an opportunity = public comm5t2 &  7#c7
 = use by-- 7,a7 ! ,f$]al ,gov]nm5t2    
7,b7 ! private sector2 &  7,c7 any p]son

 utiliz+ an in=mation sy/em or device4  
7b7 ,be/ practices ,a be/ practice on ! 
li/ e/abli%$ "u subsection 7a7 %all--   
7#a7 be a simple1 basic control t has ! 
greate/ effect 9 def5d+ aga9/ a common  
cyb]security ?reat or risk2  7#b7       
utilize a te*nology t is comm]cial1     
(f-!-%elf1 & bas$ on int]national /&>ds2
 &  7#c7 to ! degree practicable1 be    
bas$ on & consi/5t ) ! ,cyb]security    
,framework conta9$ 9 ,executive ,ord]   
#acfcf1 entitl$ ,improv+ ,critical      
,infra/ructure ,cyb]security1 issu$ 9   
,febru>y #bjac1 or any successor        
framework4  7c7 ,volunt>y practices ,a  
be/ practice on ! li/ e/abli%$ "u       
subsection 7a7 %all be consid]$ volunt>y
 & is n int5d$ to be con/ru$ z m&atory4 
7d7 ,basel9e ,! ,director %all enc\rage 
! use ( ! be/ practices z ! basel9e     
provid$ by ! li/ e/abli%$ "u subsection 
7a7 is enc\rag$ to be n only us$ b      
improv$ ^u by any entity includ+--  7#a7
 ! ,f$]al ,gov]nm5t2  7#b7 ! private    
sector2 &  7#c7 any p]son utiliz+ an    

in=mation sy/em or device4  7e7 ,annual 
updates ,n less frequ5tly ?an once ea*  
ye>1 ! ,director %all review & update ! 
li/ e/abli%$ "u subsection 7a74  7f7    
,public availability  7#a7 ,9 g5]al ,!  
,director %all publi% ! li/ ( be/       
practices e/abli%$ "u subsection 7a7 9 a
 cle> & concise =mat4  7#b7             
,availability ,! ,f$]al ,trade          
,commission & ! ,small ,bus9ess         
,adm9i/ration %all make su* li/ ( be/   
practices prom95tly available on !      
public ,int]net website ( ea* respective
 ag5cy4  7g7 ,o!r f$]al cyb]security    
requirem5ts ,no?+ 9 ?is section %all be 
con/ru$ to sup]s$e1 alt]1 or o!rwise    
affect any cyb]security requirem5ts     
applicable to any ,f$]al ag5cy4  7h7    
,consid]ations ,9 c>ry+ out subsection  
7a71 ! head ( ea* ag5cy ( ! ,f$]al      
,gov]nm5t %all consid] ! b5efit1 z      
p]ta9+ to cyb] hygi5e1 ( an em]g+       
te*nology or process capable ( provid+  
any enhanc$ security protection1        
includ+--  7#a7 multi-factor            

au!ntication2  7#b7 data loss prev5tion2
  7#c7 micro-segm5tation2  7#d7 data    
encryption2  7#e7 cl\d s]vices2  7#f7   
anonymization2  7#g7 s(tw>e pat*+ &     
ma9t5ance2  7#h7 phi%+ education2 &     
7#i7 o!r /&>d cyb]security measures to  
a*ieve tru/$ security 9 ! infra/ructure4
  7i7 ,/udy on em]g+ concepts ,to       
promote effective cyb] hygi5e = !       
int]net ( ?+s  7#a7 ,int]net ( ,?+s     
def9$ ,! t]m ,int]net ( ,?+s means ! set
 ( physical objects emb$d$ ) s5sors or  
actuators & connect$ to a network4  7#b7
 ,/udy requir$ ,! ,secret>y ( ,homel&   
,security1 9 coord9ation ) ! ,director (
 ! ,national ,in/itute ( ,/&>ds &       
,te*nology & ! ,f$]al ,trade            
,commission1 %all conduct a /udy on     
cyb]security ?reats relat+ to ! ,int]net
 ( ,?+s4  7#c7 ,matt]s /udi$ ,z "p ( !  
/udy requir$ by p>agraph 7#b71 !        
,secret>y %all-- 7,a7 assess            
cyb]security ?reats relat+ to ! ,int]net
 ( ,?+s2  7,b7 assess ! effect su*      
?reats may h on ! cyb]security ( !      

in=mation sy/ems & networks ( ! ,f$]al  
,gov]nm5t 7except = ! in=mation sy/ems &
 networks ( ! ,dep>tm5t ( ,def5se & !   
intellig5ce community 7z def9$ 9        
,section #c ( ! ,national ,security ,act
 ( #aidg 7#ej ,u4,s4,c4 #cjjc7772 &     
7,c7 develop recomm5dations = address+  
su* ?reats4  7#d7 ,report to congress ,n
 lat] ?an #a ye> aft] ! date ( !        
enactm5t ( ?is ,act1 ! ,secret>y %all-- 
7,a7 complete ! /udy requir$ by p>agraph
 7#b72 &  7,b7 submit to ,congress a    
report t conta9s ! f9d+s ( ! ,secret>y )
 respect to su* /udy & ! recomm5dations 
develop$ by ! secret>y "u p>agraph      
7#c77;,c74