,i  #aae? ,,congress  #a/ ,session  ,h4 
,r4 #dffh  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,decemb] #ah1         
#bjag,mr4 ,*abot 7= himself & ,ms4      
,velzquez7 introduc$ ! foll[+ bill2 :i* 
0 ref]r$ to ! ,committee on ,small      
,bus9ess  ,a ,,bill  ,to am5d ! ,small  
,bus9ess ,act to provide = ! e/abli%m5t 
( an enhanc$ cyb]security assi/ance &   
protections = small bus9esses1 & = o!r  
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,small ,bus9ess ,advanc$   
,cyb]security ,enhancem5ts ,act ( #bjag4
  #b4 ,f9d+s ,congress f9ds ! foll[+3   
7#a7 ,small bus9esses repres5t m ?an #ig
 p]c5t ( total bus9esses 9 ! ,unit$     
,/ates & make up an ess5tial "p ( !     
supply *a9 to "s ( ! l>ge/ companies1 _m
 ( :i* are 9 critical infra/ructure     
sectors1 f f9ancial & transportation    
organizations to p[]1 wat]1 & heal?c>e  
suppli]s4  7#b7 ,_m small bus9esses d n 
h d$icat$ in=mation te*nology 7,,x7     
dep>tm5ts & mu/ outs\rce ,,x functions  
or assign ^! duties to an employee z a  

second>y function4  7#c7 ,! ,int]net    
,crime ,compla9t ,c5t] )9 ! ,unit$      
,/ates ,dep>tm5t ( ,ju/ice record$      
#bih1gbh cyb]security-relat$ compla9ts 9
 its #bjaf report4  7#d7 ,!re has be5   
/eady increases ( cyb]security-relat$   
compla9ts ye> ov] ye> s9ce ! ye> #bjjj1 
total+ #c1gfb1cdh4  7#e7 ,sev5ty-"o     
p]c5t ( cyb] attacks occurr$ 9 bus9esses
 ) few] ?an #ajj employees4  7#f7 ,only 
#ad p]c5t ( small- & m$ium-siz$         
bus9esses believe !y h ! ability to     
effectively mitigate cyb] risks &       
vuln]abilities4  7#g7 ,small bus9esses  
risk !ft & manipulation ( s5sitive data 
if !y lack adequate cyb]security        
measures4  7#h7 ,! ,bett] ,bus9ess      
,bureau f\nd t half ( small bus9esses   
c\ld rema9 pr(itable = only "o mon? if  
!y lo/ ess5tial data4  7#i7 ,cyb] crime 
is gr[+ rapidly & ! annual co/s to !    
global economy are e/imat$ to rea* ov]  
#b1jjj1jjj1jjj1jjj by #bjai4  7#aj7     
,cyb]security is a global *all5ge :]e ! 
security ?reat1 attacks1 & te*niques    

cont9ually evolve & no company1         
individual1 or ,f$]al ag5cy is immune f 
^! ?reats4  7#aa7 ,/rong collaboration  
betwe5 ! public & private sector is     
ess5tial 9 ! fight aga9/ cyb] crime4    
7#ab7 ,!re is a reluctance among small  
bus9esses to volunt>ily %>e in=mation ) 
gov]nm5t entities1 & ! ,f$]al ,gov]nm5t 
%\ld "w proactively to inc5tivize &     
enc\rage volunt>y in=mation %>+ to      
improve ! ,nation's cyb]security po/ure4
  #c4 ,enhanc$ cyb]security assi/ance & 
protections = small bus9esses ,section  
#ba7;a7 ( ! ,small ,bus9ess ,act 7#ae   
,u4,s4,c4 #fdh7;a77 is am5d$ by add+ at 
! end ! foll[+ new p>agraph3  7#i7      
,small bus9ess cyb]security assi/ance & 
protections  7,a7 ,e/abli%m5t ( small   
bus9ess cyb]security assi/ance units ,! 
,adm9i/rator ( ! ,small ,bus9ess        
,adm9i/ration1 9 coord9ation ) !        
,secret>y ( ,comm]ce1 & 9 consultation )
 ! ,secret>y ( ,homel& ,security & !    
,attorney ,g5]al1 %all e/abli%--  7i7 9 
! ,adm9i/ration1 a c5tral small bus9ess 

cyb]security assi/ance unit2 &  7ii7 )9 
ea* small bus9ess developm5t c5t]1 a    
regional small bus9ess cyb]security     
assi/ance unit4  7,b7 ,duties ( ! c5tral
 small bus9ess cyb]security assi/ance   
unit  7i7 ,9 g5]al ,! c5tral small      
bus9ess cyb]security assi/ance unit     
e/abli%$ "u subp>agraph 7,a77i7 %all    
s]ve z ! prim>y int]face = small bus9ess
 conc]ns to receive & %>e cyb] ?reat    
indicators & def5sive measures ) !      
,f$]al ,gov]nm5t4  7ii7 ,use (          
capability & processes ,! c5tral small  
bus9ess cyb]security assi/ance unit %all
 use ! capability & process c]tifi$     
pursuant to section #aje7;c77#b77;,a7 ( 
! ,cyb]security ,in=mation ,%>+ ,act (  
#bjae 7#f ,u4,s4,c4 #aejd7;c77#b77;,a77 
to receive cyb] ?reat indicators or     
def5sive measures f small bus9ess       
conc]ns4  7iii7 ,application ( ,,cisa ,a
 small bus9ess conc]n t receives or %>es
 cyb] ?reat indicators & def5sive       
measures ) ! ,f$]al ,gov]nm5t ?r\gh !   
c5tral small bus9ess cyb]security       

assi/ance unit e/abli%$ "u subp>agraph  
7,a77i71 or ) any appropriate entity    
pursuant to section #ajc7;c7 ( !        
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aejc7;c771 %all    
receive ! protections & exemptions      
provid$ 9 su* ,act & ?is p>agraph4  7,c7
 ,relation to ,,nccic  7i7 ,c5tral small
 bus9ess cyb]security assi/ance unit ,! 
c5tral small bus9ess cyb]security       
assi/ance unit e/abli%$ "u subp>agraph  
7,a77i7 %all be collocat$ ) ! national  
cyb]security & communications           
integration c5t]4  7ii7 ,access to      
in=mation ,! national cyb]security &    
communications integration c5t] %all h  
access to all cyb] ?reat indicators or  
def5sive measures %>$ ) ! c5tral small  
cyb]security assi/ance unit e/abli%$ "u 
subp>agraph 7,a77i7 ?r\gh ! use ( !     
capability & process describ$ 9         
subp>agraph 7,b77ii74  7,d7             
,cyb]security assi/ance = small         
bus9esses ,! c5tral small bus9ess       
cyb]security assi/ance unit e/abli%$ "u 

subp>agraph 7,a77i7 %all--  7i7 "w ) ea*
 regional small bus9ess cyb]security    
assi/ance unit e/abli%$ "u subp>agraph  
7,a77ii7 to provide cyb]security        
assi/ance to small bus9ess conc]ns2     
7ii7 lev]age res\rces f ! ,adm9i/ration1
 ! ,dep>tm5t ( ,comm]ce1 ! ,dep>tm5t (  
,homel& ,security1 ! ,dep>tm5t (        
,ju/ice1 ! ,dep>tm5t ( ! ,treasury1 !   
,dep>tm5t ( ,/ate1 & any o!r ,f$]al     
dep>tm5t or ag5cy ! ,adm9i/rator        
det]m9es appropriate1 9 ord] to help    
improve ! cyb]security po/ure ( small   
bus9ess conc]ns2  7iii7 coord9ate ) !   
,dep>tm5t ( ,homel& ,security to id5tify
 & dissem9ate in=mation to small bus9ess
 conc]ns 9 a =m t is accessible &       
actionable by small bus9ess conc]ns2    
7iv7 coord9ate ) ! ,national ,in/itute (
 ,/&>ds & ,te*nology to id5tify &       
dissem9ate in=mation to small bus9ess   
conc]ns on ! mo/ co/-effective me?ods = 
implem5t+ elem5ts ( ! cyb]security      
framework ( ! ,national ,in/itute (     
,/&>ds & ,te*nology applicable to       

improv+ ! cyb]security po/ure ( small   
bus9ess conc]ns2  7v7 seek input f !    
,(fice ( ,advocacy ( ! ,adm9i/ration to 
ensure t any policies or proc$ures      
adopt$ by any dep>tm5t1 ag5cy1 or       
in/rum5tality ( ! ,f$]al ,gov]nm5t d n  
unduly add regulatory burd5s to small   
bus9ess conc]ns 9 a mann] t w hamp] !   
improvem5t ( ! cyb]security po/ure ( su*
 small bus9ess conc]ns2 &  7vi7 lev]age 
res\rces & relation%ips ) repres5tatives
 & entities involv$ 9 ! national        
cyb]security & communications           
integration c5t] to publicize ! capacity
 ( ! ,f$]al ,gov]nm5t to assi/ small    
bus9ess conc]ns 9 improv+ cyb]security  
practices4  7,e7 ,enhanc$ cyb]security  
protections = small bus9esses  7i7 ,9   
g5]al ,not)/&+ any o!r provision ( law1 
no cause ( action %all lie or be ma9ta9$
 9 any c\rt aga9/ any small bus9ess     
conc]n1 & su* action %all be promptly   
dismiss$1 if su* action relat$ to or    
arises out (--  7,i7 any activity       
au?oriz$ "u ?is p>agraph or !           

,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq472 or  
7,,ii7 any action or inaction 9 response
 to any cyb] ?reat indicator1 def5sive  
measure1 or o!r in=mation %>$ or receiv$
 pursuant to ?is p>agraph or !          
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq474     
7ii7 ,application ,! exception provid$ 9
 section #aje7;d77#e77;,d77ii77,i7 ( !  
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4                     
#aejd7;d77#e77;,d77ii77,i77 %all n apply
 to any cyb] ?reat indicator or def5sive
 measure %>$ or receiv$ by small bus9ess
 conc]ns pursuant to ?is p>agraph or !  
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq474     
7,f7 ,def9itions ,9 ?is p>agraph3 7i7   
,,cisa def9itions ,! t]ms cyb] ?reat    
indicator & def5sive measure h ! mean+s 
giv5 su* t]ms 9 section #ajb ( !        
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja74  7ii7       
,national cyb]security & communications 

integration c5t] ,! t]m national        
cyb]security & communications           
integration c5t] means ! national       
cyb]security & communications           
integration c5t] e/abli%$ "u section    
#bbg ( ! ,homel& ,security ,act ( #bjjb 
7#f ,u4,s4,c4 #adh74  4  #d4            
,prohibition on new appropriations ,no  
additional funds are au?oriz$ to be     
appropriat$ to c>ry out ?is ,act & !    
am5dm5ts made by ?is ,act1 & ?is ,act & 
su* am5dm5ts %all be c>ri$ out us+      
am\nts o!rwise made available = su*     
purposes4