1. Short title This Act may be cited as the Promoting Good Cyber Hygiene Act of 2017 . 2. Cyber hygiene best practices (a) Establishment Not later than 1 year after the date of enactment of this Act, the National Institute of Standards and Technology, in consultation with the Federal Trade Commission and the Department of Homeland Security, after notice and an opportunity for public comment, shall establish a list of best practices for effective and usable cyber hygiene for use by the Federal Government, the private sector, and any individual or organization utilizing an information system or device. Such list shall— (1) be a list of simple, basic controls that have the most impact in defending against common cybersecurity threats and risks; (2) utilize technologies that are commercial off-the-shelf and based on international standards