1. Short title This Act may be cited as the Internet of Things (IoT) Cybersecurity Improvement Act of 2017 . 2. Definitions In this Act: (1) Director The term Director means the Director of the Office of Management and Budget. (2) Executive agency The term executive agency has the meaning given the term in section 133 of title 41, United States Code. (3) Firmware The term firmware means a computer program and the data stored in hardware, typically in read-only memory (ROM) or programmable read-only memory (PROM), such that the program and data cannot be dynamically written or modified during execution of the program. (4) Fixed or hard-coded credential The term fixed or hard-coded credential means a value, such as a password, token, cryptographic key, or other data element used as part of an authentication mechanism for granting remote access to an information system or its information, that is— (A) established by a product vendor or service provider; and (B) incapable of being modified or revoked by the user or manufacturer lawfully operating the information system, except via a firmware update. (5) Hardware The term hardware means the physical components of an information system. (6) Internet-connected device The term Internet-connected device means a physical object that— (A) is capable of connecting to and is in regular connection with the Internet