Section 1 Short title
This Act may be cited as the “Veterans’ Cyber Risk Awareness Act”.
Veterans’ Cyber Risk Awareness Act
A BILL
To direct the Secretary of Veterans Affairs to conduct a communications and outreach campaign to educate veterans about cyber risks, and for other purposes.
Sec. 2 Campaign to educate veterans about cyber risks
Establishment— Not later than 90 days after the date of the enactment of this Act, the Secretary of Veterans Affairs, through the Office of Public and Intergovernmental Affairs (or successor office), shall conduct a communications and outreach campaign to educate veterans about cyber risks. In carrying out such campaign, the Secretary shall—
coordinate with other entities (including Federal entities and social media companies) that educate the public about cyber risks;
promote and disseminate best practices and educational materials regarding—
cyber risks to veterans;
information about how a veteran may report cyber risks to the appropriate law enforcement agency or entity other than the Department of Veterans Affairs; and
any other information the Secretary determines appropriate; and
establish and maintain a publicly accessible website of the Department—
regarding the campaign; and
that contains hyperlinks to websites of entities described in paragraph (2).
Progress report— Not later than 60 days after the date of the enactment of this Act, the Secretary shall submit to Congress a report on progress of the Secretary in preparing the campaign under this section.
Sec. 3 Study on cyber risks to veterans
Study required— The Secretary of Veterans Affairs shall seek to enter into an agreement with a federally funded research and development corporation to perform a study—
that assesses—
the vulnerability of veterans to cyber risks;
the availability and efficacy of resources (including Federal resources) to assist veterans in combatting cyber risks; and
the efficacy of the campaign under section 1; and
to determine recommendations to the Secretary on how to reduce cyber risks to veterans.
Report required— Not later than one year after the date of the enactment of this Act, the Secretary shall submit to Congress a report containing the results of the study under this section.
Sec. 4 Cyber risks defined
In this Act, the term “cyber risks” includes disinformation, identity theft, scams, and fraud, spread via the internet or social media.