,i #aafth ,,congress #ast ,session ,h4 ,r4 #chaa ,,in ,,the ,,house ,,of ,,representatives ,july #ag1 #bjai,ms4 ,matsui 7for herself and ,mr4 ,mc,caul7 introduced the following bill2 which was referred to the ,committee on ,foreign ,affairs ,a ,,bill ,to direct the ,secretary of ,commerce to conduct a study and submit to ,congress a report on the processes of international standards-setting with respect to internet-connected devices1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,io,t ,standards ,leadership ,act of #bjai4 #b4 ,sense of ,congress ,it is the sense of ,congress that-- 7#a7 ,united ,states policy has allowed industry in the ,united ,states to innovate and lead the global technology sector2 7#b7 as governments have sought to use country-specific standards to hinder the innovation and influence of ,united ,states technology1 the ,united ,states should demonstrate leadership and be a vocal supporter of the open1 voluntary1 consensus-based international standards system2 7#c7 the ,united ,states should support multi-stakeholder standards-development processes and robust involvement in international standards-setting bodies and organizations with respect to internet-connected devices 7commonly known as the ,internet of ,things or ,io,t72 7#d7 the ,united ,states should support standards that enable interoperability among devices and systems and are country-agnostic and vendor-neutral2 7#e7 the ,united ,states should maintain and foster ,united ,states leadership in international standards-setting bodies and organizations with respect to internet-connected devices2 7#f7 the ,united ,states should work with governments and nongovernmental stakeholders to deter the establishment of government-driven1 country-specific standards1 which can be detrimental to interoperability and security2 7#g7 the convergence of traditional information technology devices1 networks1 and systems with internet-connected devices1 networks1 and systems1 including consumer and industrial internet-connected devices1 networks1 and systems1 may create cybersecurity and interoperability challenges1 including cyber exposure gap challenges1 with respect to which ,united ,states leadership in international standards-setting bodies and organizations can lead to stronger protection of networks to support the security of internet-connected devices2 and 7#h7 the ,united ,states should support standards-development processes for internet-connected device security that focus on prioritized1 flexible1 repeatable1 performance-based1 and cost-effective approaches to cyber hygiene and managing risk4 #c4 ,study and report 7a7 ,study ,the ,secretary of ,commerce shall conduct a study of the international standards-setting bodies and organizations that set standards with respect to internet-connected devices and of the appropriate means to ensure robust ,united ,states leadership in the processes of such bodies and organizations4 ,in conducting the study1 the ,secretary shall assess-- 7#a7 the involvement of the ,united ,states in such processes2 7#b7 efforts of countries to create country-specific standards with respect to internet-connected devices that are not aligned with international standards-setting processes and international standards2 7#c7 the progress1 if any1 that has been made in developing international standards with respect to internet-connected devices2 7#d7 how to support consistent ,united ,states private and public sector participation in such bodies and organizations2 and 7#e7 the extent to which international standards for internet-connected devices focus on prioritized1 flexible1 repeatable1 performance-based1 and cost-effective approaches to cyber hygiene and managing risk4 7b7 ,report ,not later than #ahj days after the date of the enactment of this ,act1 the ,secretary shall submit to the ,committee on ,energy and ,commerce of the ,house of ,representatives and the ,committee on ,commerce1 ,science1 and ,transportation of the ,senate a report that contains-- 7#a7 the results of the study required by subsection 7a72 7#b7 recommendations to promote the leadership of the ,united ,states and all relevant nongovernmental stakeholders in the processes of international standards-setting bodies and organizations for setting standards with respect to internet-connected devices2 and 7#c7 an assessment of whether and how the leadership of the ,secretary1 working with governmental and nongovernmental stakeholders1 can-- 7,a7 promote and strengthen international standards with respect to internet-connected devices2 and 7,b7 discourage the development of country-specific standards with respect to internet-connected devices that could hinder interoperability and security4 #d4 ,definitions ,in this ,act3 7#a7 ,cyber exposure gap ,the term cyber exposure gap means the cybersecurity and vulnerability management challenges organizations face in seeing and understanding cybersecurity risk across the full range of internet-connected platforms of such organizations1 including information technology1 internet-connected devices1 operational technology1 mobile1 and cloud computing platforms4 7#b7 ,internet-connected device ,the term internet-connected device means a physical object that-- 7,a7 is capable of connecting to the internet1 either directly or indirectly through a network1 to communicate information2 7,b7 has computer-processing capabilities for collecting1 sending1 receiving1 or analyzing data2 and 7,c7 is not a general-purpose computing device1 including a personal computing system or a smart mobile communications device4