Understanding Cybersecurity of Mobile Networks Act

This bill would require the Assistant Secretary of Commerce for Communications and Information to produce a detailed report examining vulnerabilities in mobile service networks and devices. The report focuses on encryption and authentication, how real-world exploits are used, customer awareness when buying mobile services and devices, and the prevalence and use of mobile surveillance tools.

• Families, businesses, and government buyers get more information because the report must discuss how consumers, companies, and government agencies consider cybersecurity when purchasing mobile service and devices.
• Mobile service providers face an external assessment of whether they have addressed vulnerabilities and implemented cybersecurity best practices, with small and rural providers specifically included in consultations.
• Device manufacturers and software developers are examined on the prevalence and effectiveness of encryption and authentication across equipment, operating systems, and apps, and the report must discuss barriers to adopting stronger algorithms and phasing out older weak ones.
• Security planners and lawmakers get estimates on the prevalence, costs, commercial availability, and adversary use of cell site simulators and other interception technologies, and the report may include a classified annex for sensitive material.