Sec. 404. Cybersecurity literacy
281 words·~1 min read·
/bill/118/hr/4510/rh/section-404A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
It is the sense of Congress that the United States has a national security and economic interest in promoting cybersecurity literacy amongst the general public. The Under Secretary shall develop and conduct a cybersecurity literacy campaign (which shall be available in multiple languages and formats, if practicable) to increase the knowledge and awareness of individuals in the United States with respect to best practices to reduce cybersecurity risks. In carrying out subsection (b), the Under Secretary shall— educate individuals in the United States on how to prevent and mitigate cyberattacks and cybersecurity risks, including by— instructing such individuals on how to identify— phishing emails and messages; and secure websites; instructing such individuals about the benefits of changing default passwords on hardware and software technology; encouraging the use of cybersecurity tools, including— multi-factor authentication; complex passwords; anti-virus software; patching and updating software and applications; and virtual private networks; identifying the devices that could pose possible cybersecurity risks, including— personal computers; smartphones; tablets;
Wi-Fi routers; smart home appliances; webcams; internet-connected monitors; and any other device that can be connected to the internet, including mobile devices other than smartphones and tablets; encouraging such individuals to— regularly review mobile application permissions; decline privilege requests from mobile applications that are unnecessary; download applications only from trusted vendors or sources; and consider a product’s life cycle and the developer or manufacturer’s commitment to providing security updates during a connected device’s expected period of use; and identifying the potential cybersecurity risks of using publicly available Wi-Fi networks and the methods a user may utilize to limit such risks; and encourage individuals in the United States to use resources to help mitigate the cybersecurity risks identified in this subsection.