,,ii  #aahth ,,congress  #ast ,session  
,s4 #bbja  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,june #bb1     
#bjbc,ms4 ,klobuchar 7for herself and   
,mr4 ,thune7 introduced the following   
bill2 which was read twice and referred 
to the ,committee on ,commerce1         
,science1 and ,transportation  ,a ,,bill
  ,to increase knowledge and awareness  
of best practices to reduce             
cybersecurity risks in the ,united      
,states4  #a4 ,short title ,this ,act   
may be cited as the ,american           
,cybersecurity ,literacy ,act4  #b4     
,cybersecurity literacy campaign  7a7   
,in general ,the ,secretary of          
,commerce1 in consultation with the     
,director of the ,cybersecurity and     
,infrastructure ,security ,agency1 shall
 develop and conduct a cybersecurity    
literacy campaign described in          
subsection 7b71 which the ,secretary of 
,commerce shall make available in       
multiple languages and formats1 if      
practicable1 to increase the knowledge  

and awareness of citizens of the ,united
 ,states of best practices to reduce    
cybersecurity risks4  7b7 ,elements ,in 
carrying out subsection 7a71 the        
,secretary of ,commerce1 in consultation
 with the ,director of the              
,cybersecurity and ,infrastructure      
,security ,agency1 shall-- 7#a7 educate 
citizens of the ,united ,states with    
respect to how to prevent and mitigate a
 cyberattack or cybersecurity risk1     
including by-- 7,a7 instructing citizens
 of the ,united ,states with respect to 
how to identify-- 7i7 a phishing email  
or message2 and  7ii7 a secure website2 
7,b7 instructing citizens of the ,united
 ,states about the benefits of changing 
default passwords on any hardware or    
software technology2  7,c7 encouraging  
the use of cybersecurity tools1         
including-- 7i7 multi-factor            
authentication2  7ii7 a complex         
password2  7iii7 anti-virus software2   
7iv7 patching or updating software and  
applications2 and  7v7 a virtual private

 network2  7,d7 identifying a device    
that could pose possible cybersecurity  
risks1 including-- 7i7 a personal       
computer2  7ii7 a smartphone2  7iii7 a  
tablet2  7iv7 a ,wi-,fi router2  7v7 a  
smart home appliance2  7vi7 a webcam2   
7vii7 an internet-connected monitor2 or 
7viii7 any other device that can be     
connected to the internet1 including any
 mobile device other than a smartphone  
or tablet2  7,e7 encouraging citizens of
 the ,united ,states to-- 7i7 regularly 
review mobile application permissions2  
7ii7 decline any privilege request from 
a mobile application that is            
unnecessary2  7iii7 download an         
application only from a trusted vendor  
or source2 and  7iv7 consider the life  
cycle of a product and the commitment of
 a developer to providing security      
updates during the expected period of   
use of a connected device2 and  7,f7    
identifying any potential cybersecurity 
risk related to using a publicly        
available ,wi-,fi network and any method

 a user may use to limit such risks2 and
  7#b7 encourage citizens of the ,united
 ,states to use any resource to help    
mitigate the cybersecurity risks        
described in this subsection4