; and (3) to the degree practicable, be based on and consistent with the Cybersecurity Framework contained in Executive Order 13636, entitled Improving Critical Infrastructure Cybersecurity, issued in February 2013, or any successor framework. (b) Voluntary practices The best practices on the list established under this section shall be considered voluntary and are not intended to be construed as a list of mandatory actions. (c) Baseline The best practices on the list established under this section are intended as a baseline for the Federal Government, the private sector, and any individual or organization utilizing an information system or device. Such entities are encouraged to use and improve on those best practices. (d) Updates The National Institute of Standards and Technology shall review and update the list of best practices established under this section on an annual basis. (e) Public availability The list of best practices established under this section shall be published in a clear and concise format and made available prominently on the public websites of the Federal Trade Commission and the Small Business Administration. (f) Other federal cybersecurity requirements Nothing in this section shall be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to Federal agencies. (g) Considerations In carrying out subsection (a), the agencies shall consider the benefits, as they pertain to cyber hygiene, of emerging technologies and processes that provide enhanced security protections, including multi-factor authentication, data loss prevention, micro-segmentation, data encryption, cloud services, anonymization, software patching and maintenance, phishing education, and other standard cybersecurity measures to achieve trusted security in the infrastructure. (h) Study on emerging concepts To promote effective cyber hygiene for the internet of things (1) Internet of things defined In this subsection, the term Internet of Things means the set of physical objects embedded