I 

118TH CONGRESS 

1ST SESSION H. R. 1360 

To establish a cybersecurity literacy campaign, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

MARCH 3, 2023 

Mr. OBERNOLTE (for himself and Ms. ESHOO) introduced the following bill; 

which was referred to the Committee on Energy and Commerce 

A BILL 

To establish a cybersecurity literacy campaign, and for other 

purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘American Cybersecu5 rity Literacy Act’’. 

6 SEC. 2. SENSE OF CONGRESS. 

7 It is the sense of the Congress that the United States 

8 has a national security and economic interest in promoting 

9 cybersecurity literacy amongst the general public. 


kjohnson on DSK79L0C42PROD with BILLS
2 

•HR 1360 IH

1 SEC. 3. ESTABLISHMENT OF CYBERSECURITY LITERACY 

2 CAMPAIGN. 

3 (a) IN GENERAL.—The Assistant Secretary shall de4 velop and conduct a cybersecurity literacy campaign 

5 (which shall be available in multiple languages and for6 mats, if practicable) to increase the knowledge and aware7 ness of the American people of best practices to reduce 

8 cybersecurity risks. 

9 (b) CAMPAIGN REQUIREMENTS.—In carrying out 

10 subsection (a), the Assistant Secretary shall— 

11 (1) educate the American people on how to pre12 vent and mitigate cyberattacks and cybersecurity 

13 risks, including by— 

14 (A) instructing the American people on 

15 how to identify— 

16 (i) phishing emails and messages; and 

17 (ii) secure websites; 

18 (B) instructing the American people about 

19 the benefits of changing default passwords on 

20 hardware and software technology; 

21 (C) encouraging the use of cybersecurity 

22 tools, including— 

23 (i) multi-factor authentication; 

24 (ii) complex passwords; 

25 (iii) anti-virus software; 


kjohnson on DSK79L0C42PROD with BILLS
3 

•HR 1360 IH

1 (iv) patching and updating software 

2 and applications; and 

3 (v) virtual private networks; 

4 (D) identifying the devices that could pose 

5 possible cybersecurity risks, including— 

6 (i) personal computers; 

7 (ii) smartphones; 

8 (iii) tablets; 

9 (iv) Wi-Fi routers; 

10 (v) smart home appliances; 

11 (vi) webcams; 

12 (vii) internet-connected monitors; and 

13 (viii) any other device that can be con14 nected to the internet, including mobile de15 vices other than smartphones and tablets; 

16 (E) encouraging Americans to— 

17 (i) regularly review mobile application 

18 permissions; 

19 (ii) decline privilege requests from mo20 bile applications that are unnecessary; 

21 (iii) download applications only from 

22 trusted vendors or sources; and 

23 (iv) consider a product’s life cycle and 

24 the developer or manufacturer’s commit25 ment to providing security updates during 


kjohnson on DSK79L0C42PROD with BILLS
4 

•HR 1360 IH

1 a connected device’s expected period of use; 

2 and 

3 (F) identifying the potential cybersecurity 

4 risks of using publicly available Wi-Fi networks 

5 and the methods a user may utilize to limit 

6 such risks; and 

7 (2) encourage the American people to use re8 sources to help mitigate the cybersecurity risks iden9 tified in this subsection. 

10 (c) ASSISTANT SECRETARY DEFINED.—In this sec11 tion, the term ‘‘Assistant Secretary’’ means the Assistant 

12 Secretary of Commerce for Communications and Informa13 tion. 

Æ 


kjohnson on DSK79L0C42PROD with BILLS