Cybersecurity Working Group

(a) Sense of Congress It is the sense of Congress that— (1) the work conducted by the Internet Policy Task Force and the Digital Economy Leadership Team of the Department of Commerce to foster an enabling environment for Internet of Things technology to grow and thrive, allow the private sector to lead, and promote technology-neutral standards and consensus-based multi-stakeholder approaches to policymaking at local, Tribal, State, Federal, and international levels on issues ranging from the security to the competitiveness of the United States is valuable and should be continued; and (2) the work conducted by the Department of Commerce and the National Telecommunications and Information Administration to create resources for communities seeking to adopt smart cities or communities technology is valuable and should be continued. (b) Establishment (1) In general The Secretary, in consultation with the Council, shall convene a multistakeholder working group, to be known as the Cybersecurity Working Group, to develop tools for communities to use to evaluate the cybersecurity of smart city or community technologies. (2) Membership (A) In general In appointing members to the Working Group, the Secretary shall consider appointing— (i) representatives of consumer groups and civil liberties organizations; (ii) representatives of small units of local government, as determined by the Secretary; (iii) representatives of large units of local government, as determined by the Secretary; (iv) manufacturers of smart city or community devices, equipment, and software; (v) individuals with expertise in communications networks; (vi) Federal, State, and local law enforcement officials; (vii) individuals with other expertise necessary to carry out the duties of the Working Group; and (viii) such representatives of the Council as the Secretary determines to be appropriate. (B) Representation In appointing members to the Working Group, the Secretary shall ensure that the Working Group includes an equitable multidisciplinary cross section of smart city or community stakeholders. (3) Duties The Working Group shall— (A) leverage and build on previous activities carried out by the Department of Commerce relating to Internet of Things technology; (B) develop tools for communities to evaluate the cybersecurity of smart city or community technology being considered by the communities for adoption in those communities; (C) develop tools for communities to protect against cybersecurity threats relevant to the technology the community has chosen to adopt; (D) (i) assess— (I) whether Internet of Things cybersecurity standards should exist; and (II) whether the standards described in subclause (I) should be voluntary or mandatory; and (ii) identify which entity is appropriate to devise the standards described in clause (i)(I); and (E) submit to the Council a report that describes the findings of the Working Group.