,i  #aaf? ,,congress  #a/ ,session  ,h4 
,r4 #chaa  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,july #ag1 #bjai,ms4  
,matsui 7= h]self & ,mr4 ,mc,caul7      
introduc$ ! foll[+ bill2 :i* 0 ref]r$ to
 ! ,committee on ,=eign ,affairs  ,a    
,,bill  ,to direct ! ,secret>y (        
,comm]ce to conduct a /udy & submit to  
,congress a report on ! processes (     
int]national /&>ds-sett+ ) respect to   
int]net-connect$ devices1 & = o!r       
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,io,t ,/&>ds ,lead]%ip ,act
 ( #bjai4  #b4 ,s5se ( ,congress ,x is !
 s5se ( ,congress t--  7#a7 ,unit$      
,/ates policy has all[$ indu/ry 9 !     
,unit$ ,/ates to innovate & lead !      
global te*nology sector2  7#b7 z        
gov]nm5ts h s\ght to use c\ntry-specific
 /&>ds to h9d] ! innovation & influ5ce (
 ,unit$ ,/ates te*nology1 ! ,unit$      
,/ates %\ld demon/rate lead]%ip & be a  
vocal support] ( ! op51 volunt>y1       
cons5sus-bas$ int]national /&>ds sy/em2 
7#c7 ! ,unit$ ,/ates %\ld support       

multi-/akehold] /&>ds-developm5t        
processes & robu/ involvem5t 9          
int]national /&>ds-sett+ bodies &       
organizations ) respect to              
int]net-connect$ devices 7commonly kn[n 
z ! ,int]net ( ,?+s or ,io,t72  7#d7 !  
,unit$ ,/ates %\ld support /&>ds t      
enable int]op]ability among devices &   
sy/ems & are c\ntry-agno/ic &           
v5dor-neutral2  7#e7 ! ,unit$ ,/ates    
%\ld ma9ta9 & fo/] ,unit$ ,/ates        
lead]%ip 9 int]national /&>ds-sett+     
bodies & organizations ) respect to     
int]net-connect$ devices2  7#f7 ! ,unit$
 ,/ates %\ld "w ) gov]nm5ts &           
nongov]nm5tal /akehold]s to det] !      
e/abli%m5t ( gov]nm5t-driv51            
c\ntry-specific /&>ds1 :i* c be         
detrim5tal to int]op]ability & security2
  7#g7 ! conv]g5ce ( traditional        
in=mation te*nology devices1 networks1 &
 sy/ems ) int]net-connect$ devices1     
networks1 & sy/ems1 includ+ consum] &   
indu/rial int]net-connect$ devices1     
networks1 & sy/ems1 may create          

cyb]security & int]op]ability *all5ges1 
includ+ cyb] exposure gap *all5ges1 )   
respect to :i* ,unit$ ,/ates lead]%ip 9 
int]national /&>ds-sett+ bodies &       
organizations c lead to /rong]          
protection ( networks to support !      
security ( int]net-connect$ devices2 &  
7#h7 ! ,unit$ ,/ates %\ld support       
/&>ds-developm5t processes =            
int]net-connect$ device security t focus
 on prioritiz$1 flexible1 repeatable1   
p]=mance-bas$1 & co/-effective approa*es
 to cyb] hygi5e & manag+ risk4  #c4     
,/udy & report  7a7 ,/udy ,! ,secret>y (
 ,comm]ce %all conduct a /udy ( !       
int]national /&>ds-sett+ bodies &       
organizations t set /&>ds ) respect to  
int]net-connect$ devices & ( !          
appropriate means to ensure robu/ ,unit$
 ,/ates lead]%ip 9 ! processes ( su*    
bodies & organizations4 ,9 conduct+ !   
/udy1 ! ,secret>y %all assess--  7#a7 ! 
involvem5t ( ! ,unit$ ,/ates 9 su*      
processes2  7#b7 ef=ts ( c\ntries to    
create c\ntry-specific /&>ds ) respect  

to int]net-connect$ devices t are n     
align$ ) int]national /&>ds-sett+       
processes & int]national /&>ds2  7#c7 ! 
progress1 if any1 t has be5 made 9      
develop+ int]national /&>ds ) respect to
 int]net-connect$ devices2  7#d7 h[ to  
support consi/5t ,unit$ ,/ates private &
 public sector p>ticipation 9 su* bodies
 & organizations2 &  7#e7 ! ext5t to :i*
 int]national /&>ds = int]net-connect$  
devices focus on prioritiz$1 flexible1  
repeatable1 p]=mance-bas$1 &            
co/-effective approa*es to cyb] hygi5e &
 manag+ risk4  7b7 ,report ,n lat] ?an  
#ahj days aft] ! date ( ! enactm5t ( ?is
 ,act1 ! ,secret>y %all submit to !     
,committee on ,en]gy & ,comm]ce ( !     
,h\se ( ,repres5tatives & ! ,committee  
on ,comm]ce1 ,sci5ce1 & ,transportation 
( ! ,s5ate a report t conta9s--  7#a7 ! 
results ( ! /udy requir$ by subsection  
7a72  7#b7 recomm5dations to promote !  
lead]%ip ( ! ,unit$ ,/ates & all        
relevant nongov]nm5tal /akehold]s 9 !   
processes ( int]national /&>ds-sett+    

bodies & organizations = sett+ /&>ds )  
respect to int]net-connect$ devices2 &  
7#c7 an assessm5t ( :e!r & h[ ! lead]%ip
 ( ! ,secret>y1 work+ ) gov]nm5tal &    
nongov]nm5tal /akehold]s1 c--  7,a7     
promote & /r5g!n int]national /&>ds )   
respect to int]net-connect$ devices2 &  
7,b7 disc\rage ! developm5t (           
c\ntry-specific /&>ds ) respect to      
int]net-connect$ devices t c\ld h9d]    
int]op]ability & security4  #d4         
,def9itions ,9 ?is ,act3 7#a7 ,cyb]     
exposure gap ,! t]m cyb] exposure gap   
means ! cyb]security & vuln]ability     
managem5t *all5ges organizations face 9 
see+ & und]/&+ cyb]security risk across 
! full range ( int]net-connect$ plat=ms 
( su* organizations1 includ+ in=mation  
te*nology1 int]net-connect$ devices1    
op]ational te*nology1 mobile1 & cl\d    
comput+ plat=ms4  7#b7 ,int]net-connect$
 device ,! t]m int]net-connect$ device  
means a physical object t-- 7,a7 is     
capable ( connect+ to ! int]net1 ei!r   
directly or indirectly ?r\gh a network1 

to communicate in=mation2  7,b7 has     
comput]-process+ capabilities =         
collect+1 s5d+1 receiv+1 or analyz+     
data2 &  7,c7 is n a g5]al-purpose      
comput+ device1 includ+ a p]sonal       
comput+ sy/em or a sm>t mobile          
communications device4