,i #aafth ,,congress #b;d ,session ,h4 ,r4 #gbjd ,,in ,,the ,,house ,,of ,,representatives ,june #ae1 #bjbj,ms4 ,eshoo 7for herself and ,mr4 ,kinzinger7 introduced the following bill2 which was referred to the ,committee on ,energy and ,commerce ,a ,,bill ,to direct the ,assistant ,secretary of ,commerce for ,communications and ,information to submit to ,congress a report examining the cybersecurity of mobile service networks1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,understanding ,cybersecurity of ,mobile ,networks ,act4 #b4 ,report on cybersecurity of mobile service networks 7a7 ,in general ,not later than #a year after the date of the enactment of this ,act1 the ,assistant ,secretary1 in consultation with the ,department of ,homeland ,security1 shall submit to ,congress a report examining the cybersecurity of mobile service networks and the vulnerability of such networks and mobile devices to cyberattacks and surveillance conducted by adversaries4 7b7 ,matters ,to be included ,the report required by subsection 7a7 shall include the following3 7#a7 ,an assessment of the degree to which providers of mobile service have addressed1 are addressing1 or have not addressed cybersecurity vulnerabilities 7including vulnerabilities the exploitation of which could lead to surveillance conducted by adversaries7 identified by academic and independent researchers1 multistakeholder standards and technical organizations1 industry experts1 and ,federal agencies1 including in relevant reports of-- 7,a7 the ,national ,telecommunications and ,information ,administration2 7,b7 the ,national ,institute of ,standards and ,technology2 and 7,c7 the ,department of ,homeland ,security1 including-- 7i7 the ,cybersecurity and ,infrastructure ,security ,agency2 and 7ii7 the ,science and ,technology ,directorate4 7#b7 ,a discussion of-- 7,a7 the degree to which customers 7including consumers1 companies1 and government agencies7 consider cybersecurity as a factor when considering the purchase of mobile service2 and 7,b7 the commercial availability of tools1 frameworks1 best practices1 and other resources for enabling such customers to evaluate risk and price tradeoffs4 7#c7 ,a discussion of the degree to which providers of mobile service have implemented cybersecurity best practices and risk assessment frameworks4 7#d7 ,an estimate and discussion of the prevalence and efficacy of encryption and authentication algorithms and techniques used in each of the following3 7,a7 ,mobile service4 7,b7 ,mobile communications equipment or services4 7,c7 ,commonly used mobile phones and other mobile devices4 7,d7 ,commonly used mobile operating systems and communications software and applications4 7#e7 ,barriers for providers of mobile service to adopt more efficacious encryption and authentication algorithms and techniques and to prohibit the use of older encryption and authentication algorithms and techniques with established vulnerabilities in mobile service1 mobile communications equipment or services1 and mobile phones and other mobile devices4 7#f7 ,the prevalence1 usage1 and availability of technologies that authenticate legitimate mobile service and mobile communications equipment or services to which mobile phones and other mobile devices are connected4 7#g7 ,the prevalence1 costs1 commercial availability1 and usage by adversaries in the ,united ,states of cell site simulators 7often known as international mobile subscriber identity-catchers7 and other mobile service surveillance and interception technologies4 7c7 ,consultation ,in preparing the report required by subsection 7a71 the ,assistant ,secretary shall1 to the degree practicable1 consult with-- 7#a7 the ,commission2 7#b7 the ,national ,institute of ,standards and ,technology2 7#c7 the intelligence community2 7#d7 the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security2 7#e7 the ,science and ,technology ,directorate of the ,department of ,homeland ,security2 7#f7 academic and independent researchers with expertise in privacy1 encryption1 cybersecurity1 and network threats2 7#g7 participants in multistakeholder standards and technical organizations 7including the #crd ,generation ,partnership ,project and the ,internet ,engineering ,task ,force72 7#h7 international stakeholders1 in coordination with the ,department of ,state as appropriate2 7#i7 providers of mobile service2 7#aj7 manufacturers1 operators1 and providers of mobile communications equipment or services and mobile phones and other mobile devices2 7#aa7 developers of mobile operating systems and communications software and applications2 and 7#ab7 other experts that the ,assistant ,secretary considers appropriate4 7d7 ,scope of report ,the ,assistant ,secretary shall-- 7#a7 limit the report required by subsection 7a7 to mobile service networks2 7#b7 exclude consideration of #e;,g protocols and networks in the report required by subsection 7a72 7#c7 limit the assessment required by subsection 7b77#a7 to vulnerabilities that have been shown to be-- 7,a7 exploited in non-laboratory settings2 or 7,b7 feasibly and practicably exploitable in real-world conditions2 and 7#d7 consider in the report required by subsection 7a7 vulnerabilities that have been effectively mitigated by manufacturers of mobile phones and other mobile devices4 7e7 ,form of report ,the report required by subsection 7a7 shall be produced in unclassified form but may contain a classified annex4 7f7 ,authorization of appropriations ,there is authorized to be appropriated to carry out this section #ejj1jjj for fiscal year #bjbj4 ,such amount is authorized to remain available through fiscal year #bjba4 7g7 ,definitions ,in this section3 7#a7 ,adversary ,the term adversary includes-- 7,a7 any unauthorized hacker or other intruder into a mobile service network2 and 7,b7 any foreign government or foreign nongovernment person engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the ,united ,states or security and safety of ,united ,states persons4 7#b7 ,assistant secretary ,the term ,assistant ,secretary means the ,assistant ,secretary of ,commerce for ,communications and ,information4 7#c7 ,entity ,the term entity means a partnership1 association1 trust1 joint venture1 corporation1 group1 subgroup1 or other organization4 7#d7 ,intelligence community ,the term intelligence community has the meaning given that term in section #c of the ,national ,security ,act of #aidg 7#ej ,u4,s4,c4 #cjjc74 7#e7 ,mobile communications equipment or service ,the term mobile communications equipment or service means any equipment or service that is essential to the provision of mobile service4 7#f7 ,mobile service ,the term mobile service means1 to the extent provided to ,united ,states customers1 either or both of the following services3 7,a7 ,commercial mobile service 7as defined in section #ccb7;d7 of the ,communications ,act of #aicd 7#dg ,u4,s4,c4 #ccb7;d7774 7,b7 ,commercial mobile data service 7as defined in section #fjja of the ,middle ,class ,tax ,relief and ,job ,creation ,act of #bjab 7#dg ,u4,s4,c4 #adja774 7#g7 ,person ,the term person means an individual or entity4 7#h7 ,united states person ,the term ,united ,states person means-- 7,a7 an individual who is a ,united ,states citizen or an alien lawfully admitted for permanent residence to the ,united ,states2 7,b7 an entity organized under the laws of the ,united ,states or any jurisdiction within the ,united ,states1 including a foreign branch of such an entity2 or 7,c7 any person in the ,united ,states4