,i  #aae? ,,congress  #b;d ,session  ,h4
 ,r4 #eeag  ,,9 ,,! ,,h\se ,,(          
,,repres5tatives  ,april #ac1 #bjah,mr4 
,panetta 7= himself & ,mr4 ,gallagh]7   
introduc$ ! foll[+ bill2 :i* 0 ref]r$ to
 ! ,committee on ,sci5ce1 ,space1 &     
,te*nology1 & 9 addition to ! ,committee
 on ,arm$ ,s]vices1 = a p]iod to be     
subsequ5tly det]m9$ by ! ,speak]1 9 ea* 
case = consid]ation ( su* provisions z  
fall )9 ! jurisdiction ( ! committee    
conc]n$  ,a ,,bill  ,to improve         
assi/ance provid$ by ! ,holl+s          
,manufactur+ ,ext5sion ,p>tn]%ip to     
small manufactur]s 9 ! def5se indu/rial 
supply *a9 on matt]s relat+ to          
cyb]security1 & = o!r purposes4  #a4    
,%ort title ,?is ,act may be cit$ z !   
,enhance ,cyb]security = ,small         
,manufactur]s ,act ( #bjah4  #b4 ,f9d+s 
,congress f9ds ! foll[+3  7#a7 ,accord+ 
to ! ,bureau ( ,labor ,/ati/ics1 !re are
 m ?an #cdg1jjj manufactur+ e/abli%m5ts 
9 ! ,unit$ ,/ates1 ( :i* #gb p]c5t h    
few] ?an #bj employees & #ii p]c5t h    

few] ?an #ejj employees4  7#b7          
,indep5d5t /udies f ! ,national ,def5se 
,indu/ry ,association1 ! ,def5se ,sci5ce
 ,bo>d1 ! ,alliance = ,manufactur+      
,=esight1 & ! ,mc,kinsey ,global        
,in/itute h highlight$--  7,a7 !        
c5trality ( small manufactur]s to ,unit$
 ,/ates manufactur+ supply *a9s =       
dome/ic economic gr[?2  7,b7 !          
vuln]ability ( su* manufactur]s to !    
def5se indu/rial base = national        
security2 &  7,c7 ! vuln]ability ( su*  
manufactur]s to cyb]security ?reats &   
brea*es4  7#c7 ,z ( ,decemb] #ca1 #bjag1
 ,dep>tm5t ( ,def5se suppli]s mu/ comply
 ) new1 t\gh] cyb]security requirem5ts  
to ensure adequate security to protect  
controll$ unclassifi$ in=mation relevant
 to def5se manufactur+ supply *a9s4 ,!  
requirem5ts call = def5se suppli]s to   
implem5t & create a plan ( action to    
respond to ! guidance develop$ by !     
,national ,in/itute ( ,/&>ds &          
,te*nology4  7#d7 ,! ,dep>tm5t (        
,comm]ce has f\nd significant           

cyb]security vuln]ability ( small       
manufactur]s4 ,a survey ( #i1jjj        
contract facilities docum5t$ t #f1fej   
small facilities lagg$ beh9d m$ium &    
l>ge firms across a broad range ( #bj   
cyb]security indicators4 ,= sev]al      
indicators1 few] ?an half ( small firms 
_h cyb]security measures 9 place4  7#e7 
,ov] ! pa/ #e ye>s ! national network ( 
c5t]s op]at+ z "p ( ! ,holl+s           
,manufactur+ ,ext5sion ,p>tn]%ip has    
work$ closely ) ! ,dep>tm5t ( ,def5se to
 bol/] ! resili5ce ( ! def5se indu/rial 
base supply *a94 ,s9ce #bjac1 su* c5t]s 
h complet$ m ?an #b1ejj projects )      
#a1fej companies t are suppli]s to !    
,dep>tm5t ( ,def5se4  7#f7 ,9 #bjag1 !  
,holl+s ,manufactur+ ,ext5sion ,p>tn]%ip
 int]act$ ) m ?an #a1jjj small          
manufactur]s on ! cyb]security          
requirem5ts ( ! ,dep>tm5t ( ,def5se4    
,?is "w by ! ,holl+s ,manufactur+       
,ext5sion ,p>tn]%ip has reveal$ a       
significant lack ( aw>5ess ( ! ,dep>tm5t
 ( ,def5se cyb]security requirem5ts & a 

defici5cy ( f9ancial & te*nical res\rces
 requir$ to manage cyb]security risks4  
,if cyb]security vuln]abilities rema9   
unaddress$1 def5se supply *a9s face a   
high] likelihood ( s]i\s & exploitable  
vuln]abilities1 z well z a sub/antial   
r$uction 9 ! numb] ( suppli]s compliant 
) ,dep>tm5t ( ,def5se requirem5ts1 &    
!reby ineligible to provide products &  
s]vices to ! ,dep>tm5t ( ,def5se4  7#g7 
,! ,holl+s ,manufactur+ ,ext5sion       
,p>tn]%ip is well position$ to aid      
suppli]s ( ! ,dep>tm5t ( ,def5se 9      
comply+ ) cyb]security requirem5ts ( !  
,dep>tm5t to ensure adequate security to
 protect controll$ unclassifi$ in=mation
 relevant to def5se manufactur+ supply  
*a9s4  #c4 ,assi/ance = small           
manufactur]s 9 ! def5se indu/rial supply
 *a9 on matt]s relat+ to cyb]security   
7a7 ,def9itions ,9 ?is section3 7#a7    
,c5t] ,! t]m ,c5t] has ! mean+ giv5 su* 
t]m 9 section #be7;a7 ( ! ,national     
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bghk7a774  7#b7         

,director ,! t]m ,director means !      
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology4  7#c7 ,res\rces ,! 
t]m res\rces means guidel9es1 tools1 be/
 practices1 /&>ds1 me?odologies1 & o!r  
ways ( provid+ in=mation4  7#d7 ,small  
bus9ess conc]n ,! t]m small bus9ess     
conc]n means a small bus9ess conc]n z t 
t]m is us$ 9 section #c ( ! ,small      
,bus9ess ,act 7#ae ,u4,s4,c4 #fcb74     
7#e7 ,small manufactur] ,! t]m small    
manufactur] means a small bus9ess conc]n
 t is a manufactur]4  7#f7 ,/ate ,! t]m 
,/ate means ea* ( ! sev]al ,/ates1      
,t]ritories1 & possessions ( ! ,unit$   
,/ates1 ! ,di/rict ( ,columbia1 & !     
,commonweal? ( ,pu]to ,rico4  7b7       
,dissem9ation ( cyb]security res\rces   
7#a7 ,9 g5]al ,! ,director ( ! ,national
 ,in/itute ( ,/&>ds & ,te*nology1 9     
p>tn]%ip ) ! ,secret>y ( ,def5se & act+ 
?r\gh ! ,holl+s ,manufactur+ ,ext5sion  
,p>tn]%ip1 %all take su* actions z may  
be necess>y to address a widespread lack
 ( aw>5ess ( cyb]security ?reats among  

small manufactur]s 9 ! def5se indu/rial 
supply *a94  7#b7 ,national rea* ,!     
,director %all ensure t ef=ts to        
increase aw>5ess "u p>agraph 7#a7 are   
c>ri$ out 9 ea* ,/ate1 by dissem9at+    
cle> & concise res\rces to help r$uce   
cyb]security risks fac$ by small        
manufactur]s describ$ 9 p>agraph 7#a74  
7#c7 ,sector focus ,! ,director %all    
c>ry out ?is subsection ) a focus on su*
 indu/ry sectors z ! ,director consid]s 
critical1 9 consultation ) ! ,secret>y (
 ,def5se4  7#d7 ,outrea* ev5ts ,"u      
p>agraph 7#a71 ! ,director %all conduct 
outrea*4 ,su* outrea* may include live  
ev5ts ) a physical pres5ce & outrea*    
conduct$ ?r\gh ,int]net websites4  7c7  
,volunt>y cyb]security self-,assessm5ts 
,! ,director %all provide1 ?r\gh !      
,holl+s ,manufactur+ ,ext5sion          
,p>tn]%ip1 assi/ance to help small      
manufactur]s conduct volunt>y           
self-assessm5ts 9 ord] to und]/& op]at+ 
environm5ts1 cyb]security requirem5ts1 &
 exi/+ vuln]abilities4  7d7 ,transf] (  

rese>* f9d+s & exp]tise  7#a7 ,9 g5]al  
,! ,director %all provide = ! transf] ( 
te*nology & te*niques develop$ at !     
,national ,in/itute ( ,/&>ds &          
,te*nology to ,c5t]s1 & ?r\gh su*       
,c5t]s1 to small manufactur]s ?r\gh\t ! 
,unit$ ,/ates to implem5t security      
measures t are adequate to protect cov]$
 def5se in=mation1 includ+ controll$    
unclassifi$ in=mation4  7#b7 ,use ( o!r 
,f$]al exp]tise & capabilities ,!       
,director %all use1 :5 appropriate1 !   
exp]tise & capabilities t exi/ 9 ,f$]al 
ag5cies o!r ?an ! ,in/itute1 & f$]ally  
sponsor$ laboratories4  7#c7 ,agreem5ts 
,9 c>ry+ out ?is subsection1 ! ,c5t]s   
may ent] into agreem5ts ) private       
indu/ry1 in/itutes ( high] education1 or
 a ,/ate1 ,unit$ ,/ates t]ritory1 local1
 or tribal gov]nm5t to ensure bread? &  
dep? ( cov]age to ! ,unit$ ,/ates def5se
 indu/rial base & to lev]age res\rces4  
7e7 ,def5se acquisition work=ce cyb]    
tra9+ program ,! ,secret>y ( ,def5se1 9 
consultation ) ! ,director1 %all e/abli%

 a cyb] c\nsel+ c]tification program1 or
 approve a simil> exi/+ program1 to     
c]tify small bus9ess pr(essionals & o!r 
relevant acquisition /aff )9 ! ,dep>tm5t
 ( ,def5se to provide cyb] plann+       
assi/ance to small manufactur]s 9 !     
def5se indu/rial supply *a94