American Cybersecurity Literacy Act of 2021

Bill: 117-s-2699
Sponsor: full_name: Sen. Klobuchar, Amy [D-MN]
Introduced: 2021-08-10
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft

Computers and information technology

Government information and archives

Internet and video services

Internet, web applications, social media
Latest action: action_date: 2021-12-17
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 221.

Summaries:
action_date: 2021-08-10
action_desc: Introduced in Senate
text: <p><b>American Cybersecurity Literacy Act</b></p> <p>This bill requires the National Telecommunications and Information Administration to develop and conduct a cybersecurity literacy campaign to increase knowledge and awareness of best practices to reduce cybersecurity risks.</p>

action_date: 2021-12-17
action_desc: Reported to Senate
text: <p><b>American Cybersecurity Literacy Act</b></p> <p>This bill requires the National Institute of Standards and Technology to develop and conduct a cybersecurity literacy campaign to increase knowledge and awareness of best practices to reduce cybersecurity risks.</p>

tv_txt: II 117th CONGRESS 1st Session S. 2699 IN THE SENATE OF THE UNITED STATES August 10, 2021 Ms. Klobuchar (for herself and Mr. Thune ) introduced the following bill; which was read twice and referred to the Committee on Commerce, Science, and Transportation A BILL To establish a cybersecurity literacy campaign, and for other purposes.

1. Short title This Act may be cited as the American Cybersecurity Literacy Act . 2. Sense of Congress It is the sense of the Congress that the United States has a national security and economic interest in promoting cybersecurity literacy amongst the general public. 3. Establishment of cybersecurity literacy campaign (a) In general The Assistant Secretary for Communications and Information (referred to in this section as the Assistant Secretary ) shall, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, develop and conduct a cybersecurity literacy campaign to increase the knowledge and awareness of people in the United States of best practices to reduce cybersecurity risks. (b) Campaign To reduce cybersecurity risks, the Assistant Secretary shall— (1) identify the critical areas of an IT system that present cybersecurity risks and educate people in the United States on how to prevent and mitigate such attacks by— (A) instructing such people on how to identify— (i) phishing emails; and (ii) secure websites; (B) instructing such people on the need to change default passwords on hardware and software technology; (C) encouraging the use of cybersecurity tools, including— (i) multi-factor authentication; (ii) complex passwords; (iii) firewalls; and (iv) anti-virus software; (D) identifying the devices that could pose possible cybersecurity risks, including— (i) personal computers; (ii) smartphones; (iii) tablets; (iv) Wi-Fi routers; and (v) smart home appliances; (E) encouraging such people to— (i) regularly review mobile application permissions; (ii) decline privilege requests from mobile applications that are unnecessary; (iii) download applications only from trusted vendors or sources; and (iv) connect internet of things or devices to a separate and dedicated network; and (F) identifying the potential cybersecurity risks of using publicly available Wi-Fi networks and the methods a user may utilize to limit such risks; and (2) direct people and businesses in the United States to Federal resources to help mitigate the cybersecurity risks identified in this subsection.

tv_txt: II Calendar No. 221 117th CONGRESS 1st Session S. 2699 IN THE SENATE OF THE UNITED STATES August 10, 2021 Ms. Klobuchar (for herself and Mr. Thune ) introduced the following bill; which was read twice and referred to the Committee on Commerce, Science, and Transportation December 17, 2021 Reported by Ms. Cantwell , with an amendment Strike out all after the enacting clause and insert the part printed in italic A BILL To establish a cybersecurity literacy campaign, and for other purposes.

1. Short title This Act may be cited as the American Cybersecurity Literacy Act . 2. Sense of Congress It is the sense of the Congress that the United States has a national security and economic interest in promoting cybersecurity literacy amongst the general public. 3. Establishment of cybersecurity literacy campaign (a) In general The Assistant Secretary for Communications and Information (referred to in this section as the Assistant Secretary ) shall, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, develop and conduct a cybersecurity literacy campaign to increase the knowledge and awareness of people in the United States of best practices to reduce cybersecurity risks. (b) Campaign To reduce cybersecurity risks, the Assistant Secretary shall— (1) identify the critical areas of an IT system that present cybersecurity risks and educate people in the United States on how to prevent and mitigate such attacks by— (A) instructing such people on how to identify— (i) phishing emails; and (ii) secure websites; (B) instructing such people on the need to change default passwords on hardware and software technology; (C) encouraging the use of cybersecurity tools, including— (i) multi-factor authentication; (ii) complex passwords; (iii) firewalls; and (iv) anti-virus software; (D) identifying the devices that could pose possible cybersecurity risks, including— (i) personal computers; (ii) smartphones; (iii) tablets; (iv) Wi-Fi routers; and (v) smart home appliances; (E) encouraging such people to— (i) regularly review mobile application permissions; (ii) decline privilege requests from mobile applications that are unnecessary; (iii) download applications only from trusted vendors or sources; and (iv) connect internet of things or devices to a separate and dedicated network; and (F) identifying the potential cybersecurity risks of using publicly available Wi-Fi networks and the methods a user may utilize to limit such risks; and (2) direct people and businesses in the United States to Federal resources to help mitigate the cybersecurity risks identified in this subsection. 1. Short title This Act may be cited as the American Cybersecurity Literacy Act of 2021 . 2. Sense of Congress It is the sense of the Congress that the United States has a national security and economic interest in promoting cybersecurity literacy amongst the general public. 3. Establishment of cybersecurity literacy campaign (a) In general The Director of the National Institute of Standards and Technology shall, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, develop and conduct a cybersecurity literacy campaign to increase the knowledge and awareness of people in the United States of best practices to reduce cybersecurity risks. (b) Elements In carrying out subsection (a), the Director of the Institute shall— (1) identify the critical areas of an information technology system that presents cybersecurity risks and educate people in the United States on how to prevent and mitigate such risks by— (A) instructing such people on how to identify— (i) phishing emails; and (ii) secure websites; (B) instructing such people on the need to change default passwords on hardware and software technology; (C) encouraging the use of cybersecurity tools, including— (i) multi-factor authentication; (ii) complex passwords; (iii) firewalls; and (iv) anti-virus software; (D) identifying the devices that could pose possible cybersecurity risks, including— (i) personal computers; (ii) smartphones; (iii) tablets; (iv) Wi-Fi routers; and (v) smart home appliances; (E) encouraging such people to— (i) regularly review mobile application permissions; (ii) decline privilege requests from mobile applications that are unnecessary; (iii) download applications only from trusted vendors or sources; and (iv) connect internet of things or devices to a separate and dedicated network; and (F) identifying the potential cybersecurity risks of using publicly available Wi-Fi networks and the methods a user may utilize to limit such risks; and (2) direct people and businesses in the United States to Federal resources to help mitigate the cybersecurity risks identified in this subsection.

December 17, 2021 Reported with an amendment