,,ib  ,union ,cal5d> ,no4 #ejb  #aae?   
,,congress  #b;d ,session  ,h4 ,r4 #dffh
  ,report ,no4 #aae-fed  ,,9 ,,! ,,h\se 
,,( ,,repres5tatives  ,decemb] #ah1     
#bjag ,mr4 ,*abot 7= himself & ,ms4     
,velzquez7 introduc$ ! foll[+ bill2 :i* 
0 ref]r$ to ! ,committee on ,small      
,bus9ess  ,april #be1 #bjah;,additional 
sponsors3 ,mr4 ,k+ ( ,i[a1 ,mrs4        
,radewag51 ,miss ,gonzlez-,coln ( ,pu]to
 ,rico1 ,mr4 ,norman1 ,mr4 ,curtis1 ,ms4
 ,cl>ke ( ,new ,york1 ,mr4 ,lawson (    
,florida1 ,mr4 ,evans1 & ,ms4 ,ros5     
,april #be1 #bjah ,report$ ) an am5dm5t1
 committ$ to ! ,committee ( ! ,:ole     
,h\se on ! ,/ate ( ! ,union1 & ord]$ to 
be pr9t$ ,/rike out all aft] ! enact+   
clause & ins]t ! "p pr9t$ 9 italic ,=   
text ( introduc$ bill1 see copy ( bill z
 introduc$ on ,decemb] #ah1 #bjag  ,a   
,,bill  ,to am5d ! ,small ,bus9ess ,act 
to provide = ! e/abli%m5t ( an enhanc$  
cyb]security assi/ance & protections =  
small bus9esses1 & = o!r purposes4  #a4 
,%ort title ,?is ,act may be cit$ z !   

,small ,bus9ess ,advanc$ ,cyb]security  
,enhancem5ts ,act ( #bjag4  #b4 ,f9d+s  
,congress f9ds ! foll[+3  7#a7 ,small   
bus9esses repres5t m ?an #ig p]c5t (    
total bus9esses 9 ! ,unit$ ,/ates & make
 up an ess5tial "p ( ! supply *a9 to "s 
( ! l>ge/ companies1 _m ( :i* are 9     
critical infra/ructure sectors1 f       
f9ancial & transportation organizations 
to p[]1 wat]1 & heal?c>e suppli]s4  7#b7
 ,_m small bus9esses d n h d$icat$      
in=mation te*nology 7,,x7 dep>tm5ts &   
mu/ outs\rce ,,x functions or assign ^! 
duties to an employee z a second>y      
function4  7#c7 ,! ,int]net ,crime      
,compla9t ,c5t] )9 ! ,unit$ ,/ates      
,dep>tm5t ( ,ju/ice record$ #bih1gbh    
cyb]security-relat$ compla9ts 9 its     
#bjaf report4  7#d7 ,!re has be5 /eady  
increases ( cyb]security-relat$         
compla9ts ye> ov] ye> s9ce ! ye> #bjjj1 
total+ #c1gfb1cdh4  7#e7 ,sev5ty-"o     
p]c5t ( cyb] attacks occurr$ 9 bus9esses
 ) few] ?an #ajj employees4  7#f7 ,only 
#ad p]c5t ( small- & m$ium-siz$         

bus9esses believe !y h ! ability to     
effectively mitigate cyb] risks &       
vuln]abilities4  7#g7 ,small bus9esses  
risk !ft & manipulation ( s5sitive data 
if !y lack adequate cyb]security        
measures4  7#h7 ,! ,bett] ,bus9ess      
,bureau f\nd t half ( small bus9esses   
c\ld rema9 pr(itable = only "o mon? if  
!y lo/ ess5tial data4  7#i7 ,cyb] crime 
is gr[+ rapidly & ! annual co/s to !    
global economy are e/imat$ to rea* ov]  
#b1jjj1jjj1jjj1jjj by #bjai4  7#aj7     
,cyb]security is a global *all5ge :]e ! 
security ?reat1 attacks1 & te*niques    
cont9ually evolve & no company1         
individual1 or ,f$]al ag5cy is immune f 
^! ?reats4  7#aa7 ,/rong collaboration  
betwe5 ! public & private sector is     
ess5tial 9 ! fight aga9/ cyb] crime4    
7#ab7 ,!re is a reluctance among small  
bus9esses to volunt>ily %>e in=mation ) 
gov]nm5t entities1 & ! ,f$]al ,gov]nm5t 
%\ld "w proactively to inc5tivize &     
enc\rage volunt>y in=mation %>+ to      
improve ! ,nation's cyb]security po/ure4

  #c4 ,enhanc$ cyb]security assi/ance & 
protections = small bus9esses ,section  
#ba7;a7 ( ! ,small ,bus9ess ,act 7#ae   
,u4,s4,c4 #fdh7;a77 is am5d$ by add+ at 
! end ! foll[+ new p>agraph3  7#i7      
,small bus9ess cyb]security assi/ance & 
protections  7,a7 ,e/abli%m5t ( small   
bus9ess cyb]security assi/ance units ,! 
,adm9i/rator ( ! ,small ,bus9ess        
,adm9i/ration1 9 coord9ation ) !        
,secret>y ( ,comm]ce1 & 9 consultation )
 ! ,secret>y ( ,homel& ,security & !    
,attorney ,g5]al1 %all e/abli%--  7i7 9 
! ,adm9i/ration1 a c5tral small bus9ess 
cyb]security assi/ance unit2 &  7ii7 )9 
ea* small bus9ess developm5t c5t]1 a    
regional small bus9ess cyb]security     
assi/ance unit4  7,b7 ,duties ( ! c5tral
 small bus9ess cyb]security assi/ance   
unit  7i7 ,9 g5]al ,! c5tral small      
bus9ess cyb]security assi/ance unit     
e/abli%$ "u subp>agraph 7,a77i7 %all    
s]ve z ! prim>y int]face = small bus9ess
 conc]ns to receive & %>e cyb] ?reat    
indicators & def5sive measures ) !      

,f$]al ,gov]nm5t4  7ii7 ,use (          
capability & processes ,! c5tral small  
bus9ess cyb]security assi/ance unit %all
 use ! capability & process c]tifi$     
pursuant to section #aje7;c77#b77;,a7 ( 
! ,cyb]security ,in=mation ,%>+ ,act (  
#bjae 7#f ,u4,s4,c4 #aejd7;c77#b77;,a77 
to receive cyb] ?reat indicators or     
def5sive measures f small bus9ess       
conc]ns4  7iii7 ,application ( ,,cisa ,a
 small bus9ess conc]n t receives or %>es
 cyb] ?reat indicators & def5sive       
measures ) ! ,f$]al ,gov]nm5t ?r\gh !   
c5tral small bus9ess cyb]security       
assi/ance unit e/abli%$ "u subp>agraph  
7,a77i71 or ) any appropriate entity    
pursuant to section #ajc7;c7 ( !        
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aejc7;c771 %all    
receive ! protections & exemptions      
provid$ 9 su* ,act & ?is p>agraph4  7,c7
 ,relation to ,,nccic  7i7 ,c5tral small
 bus9ess cyb]security assi/ance unit ,! 
c5tral small bus9ess cyb]security       
assi/ance unit e/abli%$ "u subp>agraph  

7,a77i7 %all be collocat$ ) ! national  
cyb]security & communications           
integration c5t]4  7ii7 ,access to      
in=mation ,! national cyb]security &    
communications integration c5t] %all h  
access to all cyb] ?reat indicators or  
def5sive measures %>$ ) ! c5tral small  
cyb]security assi/ance unit e/abli%$ "u 
subp>agraph 7,a77i7 ?r\gh ! use ( !     
capability & process describ$ 9         
subp>agraph 7,b77ii74  7,d7             
,cyb]security assi/ance = small         
bus9esses ,! c5tral small bus9ess       
cyb]security assi/ance unit e/abli%$ "u 
subp>agraph 7,a77i7 %all--  7i7 "w ) ea*
 regional small bus9ess cyb]security    
assi/ance unit e/abli%$ "u subp>agraph  
7,a77ii7 to provide cyb]security        
assi/ance to small bus9ess conc]ns2     
7ii7 lev]age res\rces f ! ,adm9i/ration1
 ! ,dep>tm5t ( ,comm]ce1 ! ,dep>tm5t (  
,homel& ,security1 ! ,dep>tm5t (        
,ju/ice1 ! ,dep>tm5t ( ! ,treasury1 !   
,dep>tm5t ( ,/ate1 & any o!r ,f$]al     
dep>tm5t or ag5cy ! ,adm9i/rator        

det]m9es appropriate1 9 ord] to help    
improve ! cyb]security po/ure ( small   
bus9ess conc]ns2  7iii7 coord9ate ) !   
,dep>tm5t ( ,homel& ,security to id5tify
 & dissem9ate in=mation to small bus9ess
 conc]ns 9 a =m t is accessible &       
actionable by small bus9ess conc]ns2    
7iv7 coord9ate ) ! ,national ,in/itute (
 ,/&>ds & ,te*nology to id5tify &       
dissem9ate in=mation to small bus9ess   
conc]ns on ! mo/ co/-effective me?ods = 
implem5t+ elem5ts ( ! cyb]security      
framework ( ! ,national ,in/itute (     
,/&>ds & ,te*nology applicable to       
improv+ ! cyb]security po/ure ( small   
bus9ess conc]ns2  7v7 seek input f !    
,(fice ( ,advocacy ( ! ,adm9i/ration to 
ensure t any policies or proc$ures      
adopt$ by any dep>tm5t1 ag5cy1 or       
in/rum5tality ( ! ,f$]al ,gov]nm5t d n  
unduly add regulatory burd5s to small   
bus9ess conc]ns 9 a mann] t w hamp] !   
improvem5t ( ! cyb]security po/ure ( su*
 small bus9ess conc]ns2 &  7vi7 lev]age 
res\rces & relation%ips ) repres5tatives

 & entities involv$ 9 ! national        
cyb]security & communications           
integration c5t] to publicize ! capacity
 ( ! ,f$]al ,gov]nm5t to assi/ small    
bus9ess conc]ns 9 improv+ cyb]security  
practices4  7,e7 ,enhanc$ cyb]security  
protections = small bus9esses  7i7 ,9   
g5]al ,not)/&+ any o!r provision ( law1 
no cause ( action %all lie or be ma9ta9$
 9 any c\rt aga9/ any small bus9ess     
conc]n1 & su* action %all be promptly   
dismiss$1 if su* action relat$ to or    
arises out (--  7,i7 any activity       
au?oriz$ "u ?is p>agraph or !           
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq472 or  
7,,ii7 any action or inaction 9 response
 to any cyb] ?reat indicator1 def5sive  
measure1 or o!r in=mation %>$ or receiv$
 pursuant to ?is p>agraph or !          
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq474     
7ii7 ,application ,! exception provid$ 9
 section #aje7;d77#e77;,d77ii77,i7 ( !  
,cyb]security ,in=mation ,%>+ ,act (    

#bjae 7#f ,u4,s4,c4                     
#aejd7;d77#e77;,d77ii77,i77 %all n apply
 to any cyb] ?reat indicator or def5sive
 measure %>$ or receiv$ by small bus9ess
 conc]ns pursuant to ?is p>agraph or !  
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja et seq474     
7iii7 ,rule ( con/ruction ,no?+ 9 ?is   
subp>agraph %all be con/ru$ to affect ! 
applicability or m]its ( any def5se1    
motion1 or argum5t 9 any cause ( action 
9 a c\rt br\ght aga9/ an entity t is n a
 small bus9ess conc]n4  7,f7 ,def9itions
 ,9 ?is p>agraph3 7i7 ,,cisa def9itions 
,! t]ms cyb] ?reat indicator & def5sive 
measure h ! mean+s giv5 su* t]ms 9      
section #ajb ( ! ,cyb]security          
,in=mation ,%>+ ,act ( #bjae 7#f        
,u4,s4,c4 #aeja74  7ii7 ,national       
cyb]security & communications           
integration c5t] ,! t]m national        
cyb]security & communications           
integration c5t] means ! national       
cyb]security & communications           
integration c5t] e/abli%$ "u section    

#bbg ( ! ,homel& ,security ,act ( #bjjb 
7#f ,u4,s4,c4 #adh74  4  #d4            
,prohibition on new appropriations  7a7 
,9 g5]al ,no additional funds are       
au?oriz$ to be appropriat$ to c>ry out  
?is ,act & ! am5dm5ts made by ?is ,act4 
7b7 ,exi/+ fund+ ,?is ,act & ! am5dm5ts 
made by ?is ,act %all be c>ri$ out us+  
am\nts made available "u section        
#ba7;a77#d77;,c77viii7 ( ! ,small       
,bus9ess ,act 7#ae ,u4,s4,c4            
#fdh7;a77#d77viii774  7c7 ,te*nical &   
con=m+ am5dm5t ,section                 
#ba7;a77#d77;,c77viii7 ( ! ,small       
,bus9ess ,act 7#ae                      
,u4,s4,c4#fdh7;a77#d77;,c77viii77 is    
am5d$ to read z foll[s3  7viii7         
,limitation  7,i7 ,cyb]security         
assi/ance ,f ! funds appropriat$        
pursuant to clause 7vii71 !             
,adm9i/ration %all res]ve n less ?an    
#a1jjj1jjj 9 ea* fiscal ye> to develop  
cyb]security assi/ance units at small   
bus9ess developm5t c5t]s "u p>agraph    
7#i74  7,,ii7 ,portable assi/ance  7aa7 

,9 g5]al ,any funds appropriat$ pursuant
 to clause 7vii7 t are rema9+ aft]      
res]v+ am\nts "u subclause 7,i7 may be  
us$ = portable assi/ance = />tup &      
su/a9ability non-mat*+ grant programs to
 be conduct$ by eligible small bus9ess  
developm5t c5t]s 9 communities t are    
economically *all5g$ z a result ( a     
bus9ess or gov]nm5t facility d[n siz+ or
 clos+1 :i* has result$ 9 ! loss ( jobs 
or small bus9ess in/ability4  7bb7      
,grant am\nt & use ,a non-mat*+ grant "u
 ?is subclause %all n exce$ #ajj1jjj1 & 
%all be us$ = small bus9ess developm5t  
c5t] p]sonnel exp5ses & relat$ small    
bus9ess programs & s]vices4  4  ,april  
#be1 #bjah ,report$ ) an am5dm5t1       
committ$ to ! ,committee ( ! ,:ole ,h\se
 on ! ,/ate ( ! ,union1 & ord]$ to be   
pr9t$