#aae? ,,congress  #a/ ,session  ,s4 #ggj
  ,,an ,,act  ,to require ! ,director ( 
! ,national ,in/itute ( ,/&>ds &        
,te*nology to dissem9ate res\rces to    
help r$uce small bus9ess cyb]security   
risks1 & = o!r purposes4  #a4 ,%ort     
title ,?is ,act may be cit$ z ! ,mak+   
,available ,in=mation ,n[ to ,/r5g!n    
,tru/ & ,resili5ce & ,enhance ,ent]prise
 ,te*nology ,cyb]security ,act ( #bjag  
or ! ,,ma9 ,,/reet ,cyb]security ,act ( 
#bjag4  #b4 ,f9d+s ,congress makes !    
foll[+ f9d+s3 7#a7 ,small bus9esses play
 a vital role 9 ! economy ( ! ,unit$    
,/ates1 acc\nt+ = #ed p]c5t ( all ,unit$
 ,/ates sales & #ee p]c5t ( jobs 9 !    
,unit$ ,/ates4  7#b7 ,attacks t>get+    
small & m$ium bus9esses acc\nt = a high 
p]c5tage ( cyb]attacks 9 ! ,unit$       
,/ates4  7#c7 ,! ,cyb]security          
,enhancem5t ,act ( #bjad 7#ae ,u4,s4,c4 
#gdba et seq47 calls on ! ,national     
,in/itute ( ,/&>ds & ,te*nology to      
facilitate & support a volunt>y         
public-private p>tn]%ip to r$uce        

cyb]security risks to critical          
infra/ructure4 ,su* a p>tn]%ip cont9ues 
to play a key role 9 improv+ ! cyb]     
resili5ce ( ! ,unit$ ,/ates & mak+      
cyb]space saf]4  7#d7 ,!re is a ne$ to  
develop simplifi$ res\rces t are        
consi/5t ) ! p>tn]%ip describ$ 9        
p>agraph 7#c7 t improves its use by     
small bus9esses4  #c4 ,improv+          
cyb]security ( small bus9esses  7a7     
,def9itions ,9 ?is section3 7#a7        
,director ,! t]m ,director means !      
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology4  7#b7 ,res\rces ,! 
t]m res\rces means guidel9es1 tools1 be/
 practices1 /&>ds1 me?odologies1 & o!r  
ways ( provid+ in=mation4  7#c7 ,small  
bus9ess conc]n ,! t]m small bus9ess     
conc]n has ! mean+ giv5 su* t]m 9       
section #c ( ! ,small ,bus9ess ,act 7#ae
 ,u4,s4,c4 #fcb74  7b7 ,small bus9ess   
cyb]security ,section #b7;e77#a77;,a7 ( 
! ,national ,in/itute ( ,/&>ds &        
,te*nology ,act 7#ae ,u4,s4,c4          
#bgb7;e77#a77;,a77 is am5d$--  7#a7 9   

clause 7vii71 by /rik+ & at ! end2  7#b7
 by r$esignat+ clause 7viii7 z clause   
7ix72 &  7#c7 by ins]t+ aft] clause     
7vii7 ! foll[+3  7viii7 consid] small   
bus9ess conc]ns 7z def9$ 9 section #c ( 
! ,small ,bus9ess ,act 7#ae ,u4,s4,c4   
#fcb772 &  4  7c7 ,dissem9ation (       
res\rces = small bus9esses  7#a7 ,9     
g5]al ,n lat] ?an "o ye> aft] ! date ( !
 enactm5t ( ?is ,act1 ! ,director1 9    
c>ry+ out section #b7;e77#a77;,a77viii7 
( ! ,national ,in/itute ( ,/&>ds &      
,te*nology ,act1 z add$ by subsection   
7b7 ( ?is ,act1 9 consultation ) ! heads
 ( su* o!r ,f$]al ag5cies z ! ,director 
consid]s appropriate1 %all dissem9ate   
cle> & concise res\rces = small bus9ess 
conc]ns to help r$uce _! cyb]security   
risks4  7#b7 ,requirem5ts ,! ,director  
%all ensure t ! res\rces dissem9at$     
pursuant to p>agraph 7#a7--  7,a7 are   
g5]ally applicable & usable by a wide   
range ( small bus9ess conc]ns2  7,b7 v>y
 ) ! nature & size ( ! implem5t+ small  
bus9ess conc]n1 & ! nature & s5sitivity 

( ! data collect$ or /or$ on ! in=mation
 sy/ems or devices ( ! implem5t+ small  
bus9ess conc]n2  7,c7 include elem5ts t 
promote aw>5ess ( simple1 basic         
controls1 a workplace cyb]security      
culture1 & ?ird p>ty /akehold]          
relation%ips1 to assi/ small bus9ess    
conc]ns 9 mitigat+ common cyb]security  
risks2  7,d7 are te*nology-neutral & c  
be implem5t$ us+ te*nologies t are      
comm]cial & (f-!-%elf2 &  7,e7 are bas$ 
on int]national /&>ds to ! ext5t        
possible1 & are consi/5t ) !            
,/ev5son-,wydl] ,te*nology ,innovation  
,act ( #aihj 7#ae ,u4,s4,c4 #cgja et    
seq474  7#c7 ,national cyb]security     
aw>5ess & education program ,! ,director
 %all ensure t ! res\rces dissem9at$ "u 
p>agraph 7#a7 are consi/5t ) ! ef=ts ( !
 ,director "u section #dja ( !          
,cyb]security ,enhancem5t ,act ( #bjad  
7#ae ,u4,s4,c4 #gdea74  7#d7 ,small     
bus9ess developm5t c5t] cyb] /rategy ,9 
c>ry+ out p>agraph 7#a71 ! ,director1 to
 ! ext5t practicable1 %all consid] any  

me?ods includ$ 9 ! ,small ,bus9ess      
,developm5t ,c5t] ,cyb] ,/rategy        
develop$ "u section #ahda7;a77#c77;,b7 (
 ! ,national ,def5se ,au?orization ,act 
= ,fiscal ,ye> #bjag 7,public ,law      
#aad-cbh74  7#e7 ,volunt>y res\rces ,!  
use ( ! res\rces dissem9at$ "u p>agraph 
7#a7 %all be consid]$ volunt>y4  7#f7   
,updates ,! ,director %all review &1 if 
necess>y1 update ! res\rces dissem9at$  
"u p>agraph 7#a7 9 accordance ) !       
requirem5ts "u p>agraph 7#b74  7#g7     
,public availability ,! ,director & su* 
heads ( o!r ,f$]al ag5cies z ! ,director
 consid]s appropriate %all ea* make     
prom95tly available to ! public on !    
,director's or head's ,int]net website1 
z ! case may be1 in=mation ab\t !       
res\rces & all updates to !m dissem9at$ 
"u p>agraph 7#a74 ,! ,director & ! heads
 %all ea* ensure t ! in=mation !y       
respectively make prom95tly available is
 consi/5t1 cle>1 & concise4  7d7        
,consi/5cy ( res\rces publi%$ by ,f$]al 
ag5cies ,if a ,f$]al ag5cy publi%es     

res\rces to help small bus9ess conc]ns  
r$uce _! cyb]security risks1 ! head (   
su* ,f$]al ag5cy1 to ! degree           
practicable1 %all make su* res\rces     
consi/5t ) ! res\rces dissem9at$ "u     
subsection 7c77#a74  7e7 ,o!r ,f$]al    
cyb]security requirem5ts ,no?+ 9 ?is    
section may be con/ru$ to sup]s$e1 alt]1
 or o!rwise affect any cyb]security     
requirem5ts applicable to ,f$]al        
ag5cies4  ,pass$ ! ,s5ate ,septemb] #bh1
 #bjag4,secret>y