This bill establishes a public-private working group within the National Telecommunications and Information Administration to develop voluntary cybersecurity best practices for telecommunications carriers and their suppliers. The working group will bring together federal agencies including CISA, NIST, and NSA alongside industry representatives from national carriers, regional and rural providers, equipment manufacturers, and state and local operators to create comprehensive practices covering incident response, security updates, device management, and multi-factor authentication within 18 months. These best practices will be published publicly on NTIA's website, though sensitive implementation details may be kept confidential and shared only with eligible entities. Adoption of the practices is entirely voluntary with no regulatory requirements or penalties for companies that choose not to implement them, and the recommendations will be reviewed and updated at least every two years to address evolving cybersecurity threats. The bill includes a standard severability clause ensuring that if any provision is found unconstitutional, the remainder of the law remains in effect.