US Codex
Bill
Notes

H.R. 4055 — what changed

American Cybersecurity Literacy Act

From Introduced in House to Reported in House. 1 section amended between Introduced in House and Reported in House.

Sec. 3 Establishment of cybersecurity literacy campaign

(a)
changed In general— The Assistant Secretary for Communications and Information shall develop and conduct a cybersecurity literacy campaign (which shall be available in multiple languages and formats, if practicable) to increase the knowledge and awareness of the American people of best practices to reduce cybersecurity risks.
(b)
Campaign— To reduce cybersecurity risks, the Assistant Secretary shall—
(1)
changed identify the critical areas of an IT system that present cybersecurity risks and educate the American people on how to prevent and mitigate such attacks cyberattacks and cybersecurity risks, including by—
(A)
changed instructing the American people on how to identify—
(i)
changed phishing emails; emails and messages; and
(ii)
secure websites;
(B)
changed instructing the American people on about the need to change benefits of changing default passwords on hardware and software technology;
(C)
encouraging the use of cybersecurity tools, including—
(i)
multi-factor authentication;
(ii)
complex passwords;
(iii)
removed firewalls; and
(iii)
renumbered was (3)(3)(4)(5) anti-virus software;
(iv)
added patching and updating software and applications; and
(v)
added virtual private networks;
(D)
identifying the devices that could pose possible cybersecurity risks, including—
(i)
personal computers;
(ii)
smartphones;
(iii)
tablets;
(iv)
changed Wi-Fi routers; androuters;
(v)
smart home appliances;
(vi)
added webcams;
(vii)
added internet-connected monitors; and
(viii)
added any other device that can be connected to the internet, including mobile devices other than smartphones and tablets;
(E)
encouraging Americans to—
(i)
regularly review mobile application permissions;
(ii)
decline privilege requests from mobile applications that are unnecessary;
(iii)
download applications only from trusted vendors or sources; and
(iv)
changed connect internet of things consider a product’s life cycle and the developer or devices manufacturer’s commitment to providing security updates during a separate and dedicated network; connected device’s expected period of use; and
(F)
identifying the potential cybersecurity risks of using publicly available Wi-Fi networks and the methods a user may utilize to limit such risks; and
(2)
changed direct encourage the American people and businesses to Federal use resources to help mitigate the cybersecurity risks identified in this subsection.
(c)
added Assistant Secretary defined— In this section, the term Assistant Secretary means the Assistant Secretary of Commerce for Communications and Information.