; (2) the private sector; and (3) any person utilizing an information system or device. (e) Annual updates Not less frequently than once each year, the Director shall review and update the list established under subsection (a). (f) Public availability (1) In general The Director shall publish the list of best practices established under subsection (a) in a clear and concise format. (2) Availability The Federal Trade Commission and the Small Business Administration shall make such list of best practices prominently available on the public Internet website of each respective agency. (g) Other federal cybersecurity requirements Nothing in this section shall be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to any Federal agency. (h) Considerations In carrying out subsection (a), the head of each agency of the Federal Government shall consider the benefit, as pertaining to cyber hygiene, of an emerging technology or process capable of providing any enhanced security protection, including— (1) multi-factor authentication; (2) data loss prevention; (3) micro-segmentation; (4) data encryption; (5) cloud services; (6) anonymization; (7) software patching and maintenance; (8) phishing education; and (9) other standard cybersecurity measures to achieve trusted security in the infrastructure. (i) Study on emerging concepts To promote effective cyber hygiene for the internet of things (1) Internet of Things defined The term Internet of Things means the set of physical objects embedded with sensors or actuators and connected to a network. (2) Study required The Secretary of Homeland Security, in coordination with the Director of the National Institute of Standards and Technology and the Federal Trade Commission, shall conduct a study on cybersecurity threats relating to the Internet of Things. (3) Matters studied As part of the study required by paragraph (2), the Secretary shall— (A) assess cybersecurity threats relating to the Internet of Things