,,ii #aah? ,,congress #a/ ,session ,s4 #ahce ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,june #f1 #bjbc,mr4 ,pet]s 7= himself & ,mr4 ,cassidy7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to require ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security to develop a campaign program to raise aw>5ess reg>d+ ! importance ( cyb]security 9 ! ,unit$ ,/ates4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,national ,cyb]security ,aw>5ess ,act4 #b4 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,! pres5ce ( ubiquit\s int]net-connect$ devices 9 ! ev]yday lives ( citiz5s ( ! ,unit$ ,/ates has creat$ opportunities = con/ant connection & mod]nization4 7#b7 ,a connect$ society is subject to cyb]security ?reats t c compromise ev5 ! mo/ p]sonal & s5sitive ( in=mation4 7#c7 ,connect$ critical infra/ructure is subject to cyb]security ?reats t c compromise fundam5tal economic & heal? & safety functions4 7#d7 ,! ,gov]nm5t ( ! ,unit$ ,/ates plays an important role 9 safegu>d+ ! nation f malici\s cyb] activity4 7#e7 ,a citiz5ry t is kn[l$geable reg>d+ cyb]security is critical to build+ a robu/ cyb]security po/ure & r$uc+ ! ?reat ( cyb] attack]s /eal+ s5sitive in=mation & caus+ public h>m4 7#f7 ,:ile ,cyb]security ,aw>5ess ,mon? is critical to support+ national cyb]security aw>5ess1 x _c be a once-a-ye> activity & mu/ be a su/a9$1 con/ant ef=t4 #c4 ,cyb]security aw>5ess 7a7 ,9 g5]al ,subtitle ,a ( title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is am5d$ by add+ at ! end ! foll[+3 #bbbj;,f4 ,cyb]security ,aw>5ess ,campaigns 7a7 ,def9ition ,9 ?is section1 ! t]m ,campaign ,program means ! campaign program e/abli%$ "u subsection 7b74 7b7 ,aw>5ess ,campaign ,program 7#a7 ,9 g5]al ,n lat] ?an #ij days aft] ! date ( enactm5t ( ! ,national ,cyb]security ,aw>5ess ,act1 ! ,director %all e/abli% a program = plann+ & coord9at+ ,f$]al cyb]security aw>5ess campaigns4 7#b7 ,activities ,9 c>ry+ out ! ,campaign ,program1 ! ,director %all-- 7,a7 in=m non-,f$]al entities ( volunt>y cyb] hygi5e be/ practices1 includ+ in=mation on h[ to-- 7i7 prev5t cyb]attacks2 & 7ii7 mitigate cyb]security risks2 & 7,b7 consult ) private sector entities1 ,/ate1 local1 ,tribal1 & t]ritorial gov]nm5ts1 academia1 & civil society-- 7i7 to promote cyb] hygi5e be/ practices1 includ+ by focus+ on tactics t are co/ effective & result 9 significant cyb]security improvem5t1 su* z-- 7,i7 ma9ta9+ /rong passwords & ! use ( password manag]s2 7,,ii7 enabl+ multi-factor au!ntication1 includ+ phi%+-resi/ant multi-factor au!ntication2 7,,iii7 regul>ly in/all+ s(tw>e updates2 7,,iv7 us+ caution ) email atta*m5ts & website l9ks2 & 7,v7 o!r cyb] hygi5ic consid]ations1 z appropriate2 7ii7 to promote aw>5ess ( cyb]security risks & mitigation ) respect to malici\s applications on int]net-connect$ devices1 includ+ applications to control ^? devices or use devices = unau?oriz$ surveillance ( us]s2 7iii7 to help consum]s id5tify products t are design$ to support us] & product security1 su* z products design$ us+ ! ,secure-by-,design & ,secure-by-,default pr9ciples ( ! ,ag5cy2 7iv7 to coord9ate ) o!r ,f$]al ag5cies & dep>tm5ts1 z det]m9$ appropriate by ! ,director1 to-- 7,i7 promote relevant cyb]security-relat$ aw>5ess activities2 & 7,,ii7 ensure ! ,f$]al ,gov]nm5t is coord9at$ 9 communicat+ accurate & timely cyb]security in=mation2 & 7v7 to exp& nontraditional outrea* me*anisms to ensure t entities includ+ l[-income & rural communities1 small & m$ium siz$ bus9esses & in/itutions1 & ,/ate1 local1 ,tribal1 & t]ritorial p>tn]s receive cyb]security aw>5ess outrea* 9 an equitable mann]4 7#c7 ,report+ 7,a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ! ,national ,cyb]security ,aw>5ess ,act1 & annually !reaft]1 ! ,director %all1 9 consultation ) ! heads ( appropriate ,f$]al ag5cies1 submit to ! appropriate congressional committees a report reg>d+ ! ,campaign ,program4 7,b7 ,cont5ts ,ea* report submitt$ pursuant to subp>agraph 7,a7 %all include-- 7i7 a summ>y ( ! activities ( ! ,ag5cy t support promot+ cyb]security aw>5ess "u ! ,campaign ,program1 includ+ consultations made "u p>agraph 7#b77;,b72 7ii7 an assessm5t ( ! effectiv5ess ( te*niques & me?ods us$ to promote national cyb]security aw>5ess "u ! ,campaign ,program2 & 7iii7 recomm5dations on h[ to be/ promote cyb]security aw>5ess nationally4 7c7 ,cyb]security campaign res\rces 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ! ,national ,cyb]security ,aw>5ess ,act1 ! ,director %all develop & ma9ta9 a c5tral repository = ! res\rces1 tools1 & public communications ( ! ,ag5cy t promote cyb]security aw>5ess4 7#b7 ,requirem5ts ,! res\rces describ$ 9 p>agraph 7#a7 %all be-- 7,a7 made publicly available onl9e2 & 7,b7 regul>ly updat$ to ensure ! public has access to relevant & timely cyb]security aw>5ess in=mation4 4 7b7 ,responsibilities ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ,section #bbjb7;c7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #feb7;c77 is am5d$-- 7#a7 9 p>agraph 7#ac71 by /rik+ 2 & & ins]t+ a semicolon2 7#b7 by r$esignat+ p>agraph 7#ad7 z p>agraph 7#ae72 & 7#c7 by ins]t+ aft] p>agraph 7#ac7 ! foll[+3 7#ad7 lead & coord9ate ,f$]al ef=ts to promote national cyb]security aw>5ess2 & 4 7c7 ,cl]ical am5dm5t ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace7 is am5d$ by ins]t+ aft] ! item relat+ to section #bbbj;,e ! foll[+3 ,sec4 #bbbj;,f4 ,cyb]security aw>5ess campaigns 4