#aae? ,,congress  #b;d ,session  ,9 !   
,h\se ( ,repres5tatives1 ,u4 ,s41  ,july
 #be1 #bjah  ,,am5dm5ts3  ,t ! bill f ! 
,s5ate 7,s4 #ggj7 entitl$ ,an ,act to   
require ! ,director ( ! ,national       
,in/itute ( ,/&>ds & ,te*nology to      
dissem9ate res\rces to help r$uce small 
bus9ess cyb]security risks1 & = o!r     
purposes41 d pass ) ! foll[+ ,/rike out 
all aft] ! enact+ clause & ins]t3  #a4  
,%ort title ,?is ,act may be cit$ z !   
,,ni/ ,small ,bus9ess ,cyb]security     
,act4  #b4 ,improv+ cyb]security ( small
 bus9esses  7a7 ,def9itions ,9 ?is      
section3  7#a7 ,director ,! t]m         
,director means ! ,director ( !         
,national ,in/itute ( ,/&>ds &          
,te*nology4  7#b7 ,res\rces ,! t]m      
res\rces means guidel9es1 tools1 be/    
practices1 /&>ds1 me?odologies1 & o!r   
ways ( provid+ in=mation4  7#c7 ,small  
bus9ess conc]n ,! t]m small bus9ess     
conc]n has ! mean+ giv5 su* t]m 9       
section #c ( ! ,small ,bus9ess ,act 7#ae
 ,u4,s4,c4 #fcb74  7b7 ,small bus9ess   

cyb]security ,section #b7;e77#a77;,a7 ( 
! ,national ,in/itute ( ,/&>ds &        
,te*nology ,act 7#ae ,u4,s4,c4          
#bgb7;e77#a77;,a77 is am5d$--  7#a7 9   
clause 7vii71 by /rik+ & at ! end2  7#b7
 by r$esignat+ clause 7viii7 z clause   
7ix72 &  7#c7 by ins]t+ aft] clause     
7vii7 ! foll[+3  7viii7 consid] small   
bus9ess conc]ns 7z def9$ 9 section #c ( 
! ,small ,bus9ess ,act 7#ae ,u4,s4,c4   
#fcb772 &  4  7c7 ,dissem9ation (       
res\rces = small bus9esses  7#a7 ,9     
g5]al ,n lat] ?an "o ye> aft] ! date ( !
 enactm5t ( ?is ,act1 ! ,director1 9    
c>ry+ out section #b7;e77#a77;,a77viii7 
( ! ,national ,in/itute ( ,/&>ds &      
,te*nology ,act1 z add$ by subsection   
7b7 ( ?is ,act1 9 consultation ) ! heads
 ( o!r appropriate ,f$]al ag5cies1 %all 
dissem9ate cle> & concise res\rces to   
help small bus9ess conc]ns id5tify1     
assess1 manage1 & r$uce _! cyb]security 
risks4  7#b7 ,requirem5ts ,! ,director  
%all ensure t ! res\rces dissem9at$     
pursuant to p>agraph 7#a7--  7,a7 are   

g5]ally applicable & usable by a wide   
range ( small bus9ess conc]ns2  7,b7 v>y
 ) ! nature & size ( ! implem5t+ small  
bus9ess conc]n1 & ! nature & s5sitivity 
( ! data collect$ or /or$ on ! in=mation
 sy/ems or devices ( ! implem5t+ small  
bus9ess conc]n2  7,c7 include elem5ts1 t
 promote aw>5ess ( simple1 basic        
controls1 a workplace cyb]security      
culture1 & ?ird-p>ty /akehold]          
relation%ips1 to assi/ small bus9ess    
conc]ns 9 mitigat+ common cyb]security  
risks2  7,d7 include case /udies (      
practical application2  7,e7 are        
te*nology-neutral & c be implem5t$ us+  
te*nologies t are comm]cial & (f-!-%elf2
 &  7,f7 are bas$ on int]national /&>ds 
to ! ext5t possible1 & are consi/5t ) ! 
,/ev5son-,wydl] ,te*nology ,innovation  
,act ( #aihj 7#ae ,u4,s4,c4 #cgja et    
seq474  7#c7 ,national cyb]security     
aw>5ess & education program ,! ,director
 %all ensure t ! res\rces dissem9at$ "u 
p>agraph 7#a7 are consi/5t ) ! ef=ts ( !
 ,director "u section #dja ( !          

,cyb]security ,enhancem5t ,act ( #bjad  
7#ae ,u4,s4,c4 #gdea74  7#d7 ,small     
,bus9ess ,developm5t ,c5t] ,cyb]        
,/rategy ,9 c>ry+ out p>agraph 7#a71 !  
,director1 to ! ext5t practicable1 %all 
consid] any me?ods includ$ 9 ! ,small   
,bus9ess ,developm5t ,c5t] ,cyb]        
,/rategy develop$ "u section            
#ahda7;a77#c77;,b7 ( ! ,national ,def5se
 ,au?orization ,act = ,fiscal ,ye> #bjag
 7,public ,law #aad-cbh74  7#e7         
,volunt>y res\rces ,! use ( ! res\rces  
dissem9at$ "u p>agraph 7#a7 %all be     
consid]$ volunt>y4  7#f7 ,updates ,!    
,director %all review &1 if necess>y1   
update ! res\rces dissem9at$ "u p>agraph
 7#a7 9 accordance ) ! requirem5ts "u   
p>agraph 7#b74  7#g7 ,public            
availability ,! ,director & ! head ( ea*
 ,f$]al ag5cy t s elects %all make      
prom95tly available on ! respective     
ag5cy's public ,int]net website         
in=mation ab\t ! res\rces & updates to !
 res\rces dissem9at$ "u p>agraph 7#a74  
,! ,director & ! heads %all ea* ensure t

 ! in=mation !y respectively make       
prom95tly available is consi/5t1 cle>1 &
 concise4  7d7 ,o!r ,f$]al cyb]security 
requirem5ts ,no?+ 9 ?is section may be  
con/ru$ to sup]s$e1 alt]1 or o!rwise    
affect any cyb]security requirem5ts     
applicable to ,f$]al ag5cies4  7e7      
,fund+ ,?is ,act %all be c>ri$ out us+  
funds o!rwise au?oriz$ to be appropriat$
 or made available to ! ,national       
,in/itute ( ,/&>ds & ,te*nology4  ,am5d 
! title s z to read3 ,an ,act to require
 ! ,director ( ! ,national ,in/itute (  
,/&>ds & ,te*nology to dissem9ate       
guidance to help r$uce small bus9ess    
cyb]security risks1 & = o!r purposes44  
,cl]k4