,,ii  #aafth ,,congress  #b;d ,session  
,s4 #dibj  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,november #ah1 
#bjbj,ms4 ,rosen 7for herself and ,mr4  
,moran7 introduced the following bill2  
which was read twice and referred to the
 ,committee on ,homeland ,security and  
,governmental ,affairs  ,a ,,bill  ,to  
improve the cybsersecurity of small     
organizations with respect to           
teleworking1 and for other purposes4    
#a4 ,short title ,this ,act may be cited
 as the ,improving ,telework            
,cybersecurity for ,small ,organizations
 ,act4  #b4 ,small organization telework
 cybersecurity  7a7 ,definitions ,in    
this section3 7#a7 ,commission ,the term
 ,commission means the ,federal ,trade  
,commission4  7#b7 ,coronavirus public  
health emergency ,the term coronavirus  
public health emergency means the public
 health emergency declared by the       
,secretary of ,health and ,human        
,services pursuant to section #cai of   
the ,public ,health ,service ,act 7#db  

,u4,s4,c4 #bdg;d7 on ,january #ca1      
#bjbj1 as a result of confirmed cases of
 ,,covid-#ai4  7#c7 ,director ,the term 
,director means the ,director of the    
,cybersecurity and ,infrastructure      
,security ,agency4  7#d7 ,small business
 ,the term small business has the       
meaning given the term small business   
concern in section #c of the ,small     
,business ,act 7#ae ,u4,s4,c4 #fcb7 and 
any associated regulations promulgated  
by the ,administrator of the ,small     
,business ,administration4  7#e7 ,small 
governmental jurisdiction ,the term     
small governmental jurisdiction means   
governments of cities1 counties1 towns1 
townships1 villages1 school districts1  
or special districts1 with a population 
of less than #ej1jjj4  7#f7 ,small      
nonprofit ,the term small nonprofit     
means any not-for-profit enterprise that
 is independently owned and operated and
 is not dominant in its field4  7#g7    
,small organization ,the term small     
organization means organizations        

unlikely to employ a specialist in      
cybersecurity1 including-- 7,a7 a small 
business2  7,b7 a small nonprofit2 and  
7,c7 a small governmental jurisdiction4 
7b7 ,cybersecurity and ,infrastructure  
,security ,agency telework guidance for 
small organizations  7#a7 ,in general   
,not later than #de days after the date 
of enactment of this ,act1 the          
,director1 in consultation with the     
,commission1 shall publish a resource on
 the website of the ,cybersecurity and  
,infrastructure ,security ,agency       
describing best practices a small       
organization may take to improve        
cybersecurity with respect to           
teleworking4  7#b7 ,contents ,the       
resource required under paragraph 7#a7  
shall-- 7,a7 include basic steps that   
have the most impact in improving the   
security of teleworking for a small     
organization2  7,b7 recommend1 as       
practicable1 configurations and settings
 for commonly used software that can    
improve the cybersecurity of small      

organizations with increased            
teleworking2 and  7,c7 be consistent    
with-- 7i7 relevant standards and       
guidelines published by the ,director of
 the ,national ,institute of ,standards 
and ,technology2  7ii7 guidance from the
 ,director entitled ,telework ,guidance 
and ,resources1 issued on ,april #bd1   
#bjbj1 or any successor guidance2 and   
7iii7 ,alert 7,,aa#bj-jgc;,a7 regarding 
,enterprise ,,vpn ,security issued by   
the ,director on ,march #ac1 #bjbj1 or  
any successor guidance4  7c7 ,federal   
,trade ,commission ,program ,to ,assist 
,cybersecurity ,efforts ,not later than 
#cj days after the publishing of the    
resource required under subsection 7b71 
the ,commission1 in coordination with   
the ,director1 shall establish a        
program-- 7#a7 to educate consumers and 
small organizations on improving the    
cybersecurity of the technologies       
increasingly used for distance learning1
 telemedicine1 and telework as a result 
of the coronavirus public health        

emergency2 and  7#b7 that shall be      
consistent with the resource required   
under subsection 7b74