,,ii #aadth ,,congress #b;d ,session ,s4 #cjbd ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,june #f1 #bjaf ,mr4 ,vitter 7for himself and ,mr4 ,peters7 introduced the following bill2 which was read twice and referred to the ,committee on ,small ,business and ,entrepreneurship ,a ,,bill ,to improve cyber security for small businesses4 #a4 ,short title ,this ,act may be cited as the ,small ,business ,cyber ,security ,improvements ,act of #bjaf4 #b4 ,role of small business development centers in cyber security and preparedness ,section #ba of the ,small ,business ,act 7#ae ,u4,s4,c4 #fdh7 is amended-- 7#a7 in subsection 7a77#a71 by striking and providing access to business analysts who can refer small business concerns to available experts3 and inserting providing access to business analysts who can refer small business concerns to available experts2 and1 to the extent practicable1 providing assistance in furtherance of the ,small ,business ,development ,center ,cyber ,strategy developed under section #d7;c7 of the ,small ,business ,cyber ,security ,improvements ,act of #bjaf2 and 7#b7 in subsection 7c77#c7-- 7,a7 in subparagraph 7,s71 by striking and at the end2 7,b7 in subparagraph 7,t71 by striking the period and inserting 2 and2 and 7,c7 by adding at the end of the following3 7,u7 to the extent practicable1 providing access to external cyber security specialists to counsel1 assist1 and inform small business concerns in furtherance of the ,small ,business ,development ,center ,cyber ,strategy developed under section #d7;c7 of the ,small ,business ,cyber ,security ,improvements ,act of #bjaf4 4 #c4 ,additional cyber security assistance for small business development centers ,section #ba7;a7 of the ,small ,business ,act 7#ae ,u4,s4,c4 #fdh7;a77 is amended by adding at the end the following3 7#h7 ,cyber security assistance ,the ,department of ,homeland ,security1 and any other ,federal agency1 in coordination with the ,department of ,homeland ,security1 may provide assistance to small business development centers1 through the dissemination of cyber security risk information and other homeland security information1 to help small business concerns in developing or enhancing cyber security infrastructure1 cyber threat awareness1 and cyber training programs for employees4 4 #d4 ,,gao study on small business cyber support services and ,small ,business ,development ,center ,cyber ,strategy 7a7 ,definitions ,in this section-- 7#a7 the term ,administrator means the ,administrator of the ,small ,business ,administration2 7#b7 the term association means the association established under section #ba7;a77#c77;,a7 of the ,small ,business ,act 7#ae ,u4,s4,c4 #fdh7;a77#c77;,a77 representing a majority of small business development centers2 7#c7 the terms ,federal agency1 small business concern1 and small business development center have the meanings given such terms under section #c of the ,small ,business ,act 7#ae ,u4,s4,c4 #fcb72 and 7#d7 the term ,secretary means the ,secretary of ,homeland ,security4 7b7 ,review of current cyber security resources 7#a7 ,in general ,the ,comptroller ,general of the ,united ,states shall conduct a review of the cyber security resources of ,federal agencies aimed at assisting small business concerns with developing or enhancing cyber security infrastructure1 cyber threat awareness1 or cyber training programs for employees4 7#b7 ,content ,the review required under paragraph 7#a7 shall include the following3 7,a7 ,an accounting and description of all programs1 projects1 and activities of ,federal agencies that provide assistance to small business concerns in developing or enhancing cyber security infrastructure1 cyber threat awareness1 or cyber training programs for employees4 7,b7 ,an assessment of how widely utilized the resources described under subparagraph 7,a7 are by small business concerns4 7,c7 ,a review of whether or not the resources described in subparagraph 7,a7 are-- 7i7 duplicative of other programs2 or 7ii7 structured in a manner that makes the resources accessible to and supportive of small business concerns4 7#c7 ,report ,the ,comptroller ,general shall submit to ,congress1 the ,administrator1 the ,secretary1 and the association a report containing all findings and determinations made in carrying out the review required under paragraph 7#a74 7c7 ,small ,business ,development ,center ,cyber ,strategy 7#a7 ,in general ,not later than #ij days after the date on which the ,comptroller ,general submits the report under subsection 7b77#c71 the ,administrator and the ,secretary shall begin to work collaboratively to develop a ,small ,business ,development ,center ,cyber ,strategy4 7#b7 ,consultation ,in developing the strategy required under paragraph 7#a71 the ,administrator and the ,secretary shall consult with entities representing the concerns of small business development centers1 including the association4 7#c7 ,content ,the strategy required under paragraph 7#a7 shall include1 at minimum1 the following3 7,a7 ,plans for incorporating small business development centers into cyber programs to enhance services and streamline cyber assistance to small business concerns4 7,b7 ,to the extent practicable1 methods for providing counsel and assistance to improve the cyber security infrastructure1 cyber threat awareness1 and cyber training programs for employees of small business concerns1 including-- 7i7 working to ensure individuals are aware of best practices in the areas of cyber security1 cyber threat awareness1 and cyber training2 7ii7 working with individuals to develop cost-effective plans for implementing best practices in the areas described in clause 7i72 7iii7 entering into agreements1 where practical1 with ,information ,sharing and ,analysis ,centers or similar cyber information sharing entities to gain an awareness of actionable threat information that may be beneficial to small business concerns2 and 7iv7 providing referrals to area specialists when necessary4 7,c7 ,an analysis of-- 7i7 how programs1 projects1 and activities of ,federal agencies identified by the ,comptroller ,general in the report submitted under subsection 7b77#c7 can be leveraged by small business development centers to improve access to high quality cyber support for small business concerns2 7ii7 additional resources small business development centers may need to effectively carry out the role of the small business development centers2 and 7iii7 how small business development centers can leverage existing partnerships and develop new partnerships with entities of the ,federal ,government1 ,states1 and local governments and in the private sector to improve the quality of cyber support services to small business concerns4 7#d7 ,delivery of strategy ,not later than #ahj days after the date on which the ,comptroller ,general submits the report under subsection 7b77#c71 the ,administrator and the ,secretary shall submit the strategy required under paragraph 7#a7 to-- 7,a7 the ,committee on ,homeland ,security and ,governmental ,affairs and the ,committee on ,small ,business and ,entrepreneurship of the ,senate2 and 7,b7 the ,committee on ,homeland ,security and the ,committee on ,small ,business of the ,house of ,representatives4 7d7 ,prohibition on additional funds ,no additional funds are authorized to be appropriated to carry out this section4