,,ii #aahth ,,congress #ast ,session ,s4 #ahce ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,june #f1 #bjbc,mr4 ,peters 7for himself and ,mr4 ,cassidy7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to require the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security to develop a campaign program to raise awareness regarding the importance of cybersecurity in the ,united ,states4 #a4 ,short title ,this ,act may be cited as the ,national ,cybersecurity ,awareness ,act4 #b4 ,findings ,congress finds the following3 7#a7 ,the presence of ubiquitous internet-connected devices in the everyday lives of citizens of the ,united ,states has created opportunities for constant connection and modernization4 7#b7 ,a connected society is subject to cybersecurity threats that can compromise even the most personal and sensitive of information4 7#c7 ,connected critical infrastructure is subject to cybersecurity threats that can compromise fundamental economic and health and safety functions4 7#d7 ,the ,government of the ,united ,states plays an important role in safeguarding the nation from malicious cyber activity4 7#e7 ,a citizenry that is knowledgeable regarding cybersecurity is critical to building a robust cybersecurity posture and reducing the threat of cyber attackers stealing sensitive information and causing public harm4 7#f7 ,while ,cybersecurity ,awareness ,month is critical to supporting national cybersecurity awareness1 it cannot be a once-a-year activity and must be a sustained1 constant effort4 #c4 ,cybersecurity awareness 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following3 #bbbj;,f4 ,cybersecurity ,awareness ,campaigns 7a7 ,definition ,in this section1 the term ,campaign ,program means the campaign program established under subsection 7b74 7b7 ,awareness ,campaign ,program 7#a7 ,in general ,not later than #ij days after the date of enactment of the ,national ,cybersecurity ,awareness ,act1 the ,director shall establish a program for planning and coordinating ,federal cybersecurity awareness campaigns4 7#b7 ,activities ,in carrying out the ,campaign ,program1 the ,director shall-- 7,a7 inform non-,federal entities of voluntary cyber hygiene best practices1 including information on how to-- 7i7 prevent cyberattacks2 and 7ii7 mitigate cybersecurity risks2 and 7,b7 consult with private sector entities1 ,state1 local1 ,tribal1 and territorial governments1 academia1 and civil society-- 7i7 to promote cyber hygiene best practices1 including by focusing on tactics that are cost effective and result in significant cybersecurity improvement1 such as-- 7,i7 maintaining strong passwords and the use of password managers2 7,,ii7 enabling multi-factor authentication1 including phishing-resistant multi-factor authentication2 7,,iii7 regularly installing software updates2 7,,iv7 using caution with email attachments and website links2 and 7,v7 other cyber hygienic considerations1 as appropriate2 7ii7 to promote awareness of cybersecurity risks and mitigation with respect to malicious applications on internet-connected devices1 including applications to control those devices or use devices for unauthorized surveillance of users2 7iii7 to help consumers identify products that are designed to support user and product security1 such as products designed using the ,secure-by-,design and ,secure-by-,default principles of the ,agency2 7iv7 to coordinate with other ,federal agencies and departments1 as determined appropriate by the ,director1 to-- 7,i7 promote relevant cybersecurity-related awareness activities2 and 7,,ii7 ensure the ,federal ,government is coordinated in communicating accurate and timely cybersecurity information2 and 7v7 to expand nontraditional outreach mechanisms to ensure that entities including low-income and rural communities1 small and medium sized businesses and institutions1 and ,state1 local1 ,tribal1 and territorial partners receive cybersecurity awareness outreach in an equitable manner4 7#c7 ,reporting 7,a7 ,in general ,not later than #ahj days after the date of enactment of the ,national ,cybersecurity ,awareness ,act1 and annually thereafter1 the ,director shall1 in consultation with the heads of appropriate ,federal agencies1 submit to the appropriate congressional committees a report regarding the ,campaign ,program4 7,b7 ,contents ,each report submitted pursuant to subparagraph 7,a7 shall include-- 7i7 a summary of the activities of the ,agency that support promoting cybersecurity awareness under the ,campaign ,program1 including consultations made under paragraph 7#b77;,b72 7ii7 an assessment of the effectiveness of techniques and methods used to promote national cybersecurity awareness under the ,campaign ,program2 and 7iii7 recommendations on how to best promote cybersecurity awareness nationally4 7c7 ,cybersecurity campaign resources 7#a7 ,in general ,not later than #ahj days after the date of enactment of the ,national ,cybersecurity ,awareness ,act1 the ,director shall develop and maintain a central repository for the resources1 tools1 and public communications of the ,agency that promote cybersecurity awareness4 7#b7 ,requirements ,the resources described in paragraph 7#a7 shall be-- 7,a7 made publicly available online2 and 7,b7 regularly updated to ensure the public has access to relevant and timely cybersecurity awareness information4 4 7b7 ,responsibilities of the ,cybersecurity and ,infrastructure ,security ,agency ,section #bbjb7;c7 of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #feb7;c77 is amended-- 7#a7 in paragraph 7#ac71 by striking 2 and and inserting a semicolon2 7#b7 by redesignating paragraph 7#ad7 as paragraph 7#ae72 and 7#c7 by inserting after paragraph 7#ac7 the following3 7#ad7 lead and coordinate ,federal efforts to promote national cybersecurity awareness2 and 4 7c7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bace7 is amended by inserting after the item relating to section #bbbj;,e the following3 ,sec4 #bbbj;,f4 ,cybersecurity awareness campaigns 4