,,ii  ,cal5d> ,no4 #aea #aaf? ,,congress
  #a/ ,session  ,h4 ,r4 #bcca  ,,9 ,,!  
,,s5ate ,,( ,,! ,,unit$ ,,/ates  ,july  
#af1 #bjai,receiv$2 read twice & plac$  
on ! cal5d>  ,,an ,,act  ,to require an 
annual report on ! cyb]security ( !     
,small ,bus9ess ,adm9i/ration1 & = o!r  
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,,sba ,cyb] ,aw>5ess ,act4 
#b4 ,cyb]security aw>5ess report+       
,section #aj ( ! ,small ,bus9ess ,act   
7#ae ,u4,s4,c4 #fci7 is am5d$ by ins]t+ 
aft] subsection 7a7 ! foll[+3  7b7      
,cyb]security reports  7#a7 ,annual     
report ,n lat] ?an #ahj days aft] ! date
 ( enactm5t ( ?is subsection1 & e ye>   
!reaft]1 ! ,adm9i/rator %all submit a   
report to ! appropriate congressional   
committees t includes--  7,a7 an        
assessm5t ( ! in=mation te*nology 7z    
def9$ 9 section #aaaja ( title #dj1     
,unit$ ,/ates ,code7 & cyb]security     
infra/ructure ( ! ,adm9i/ration2  7,b7 a
 /rategy to increase ! cyb]security     
infra/ructure ( ! ,adm9i/ration2  7,c7 a

 detail$ acc\nt ( any in=mation         
te*nology equipm5t or int]connect$ sy/em
 or subsy/em ( equipm5t ( !             
,adm9i/ration t 0 manufactur$ by an     
entity t has its pr9cipal place (       
bus9ess locat$ 9 ! ,p's ,republic (     
,*9a2 &  7,d7 an acc\nt ( any           
cyb]security risk or incid5t t occurr$  
at ! ,adm9i/ration dur+ ! #b-ye> p]iod  
prec$+ ! date on :i* ! report is        
submitt$1 & any action tak5 by !        
,adm9i/rator to respond to or rem$iate  
any su* cyb]security risk or incid5t4   
7#b7 ,additional reports ,if !          
,adm9i/rator det]m9es t !re is a        
reasonable basis to conclude t a        
cyb]security risk or incid5t occurr$ at 
! ,adm9i/ration1 ! ,adm9i/rator %all--  
7,a7 n lat] ?an #g days aft] ! date on  
:i* ! ,adm9i/rator makes t det]m9ation1 
notify ! appropriate congressional      
committees ( ! cyb]security risk or     
incid5t2 &  7,b7 n lat] ?an #cj days    
aft] ! date on :i* ! ,adm9i/rator makes 
a det]m9ation "u subp>agraph 7,a7--  7i7

 provide notice to individuals & small  
bus9ess conc]ns affect$ by !            
cyb]security risk or incid5t2 &  7ii7   
submit to ! appropriate congressional   
committees a report1 bas$ on in=mation  
available to ! ,adm9i/rator z ( ! date  
:i* ! ,adm9i/rator submits ! report1 t  
includes--  7,i7 a summ>y ( in=mation   
ab\t ! cyb]security risk or incid5t1    
includ+ h[ ! cyb]security risk or       
incid5t occurr$2 &  7,,ii7 an e/imate ( 
! numb] ( individuals & small bus9ess   
conc]ns affect$ by ! cyb]security risk  
or incid5t1 includ+ an assessm5t ( !    
risk ( h>m to affect$ individuals &     
small bus9ess conc]ns4  7#c7 ,rule (    
con/ruction ,no?+ 9 ?is subsection %all 
be con/ru$ to affect ! report+          
requirem5ts ( ! ,adm9i/rator "u *apt]   
#ce ( title #dd1 ,unit$ ,/ates ,code1 9 
p>ticul> ! requirem5t to notify ! ,f$]al
 in=mation security incid5t c5t] "u     
section #ceed7;b77#g77;,c77ii7 ( su*    
title1 or any o!r provision ( law4  7#d7
 ,def9itions ,9 ?is subsection3 7,a7    

,appropriate congressional committees ,!
 t]m appropriate congressional          
committees means--  7i7 ! ,committee on 
,small ,bus9ess & ,entrepr5eur%ip ( !   
,s5ate2 &  7ii7 ! ,committee on ,small  
,bus9ess ( ! ,h\se ( ,repres5tatives4   
7,b7 ,cyb]security risk2 incid5t ,! t]ms
 cyb]security risk & incid5t h ! mean+s 
giv5 su* t]ms1 respectively1 "u section 
#bbji7;a7 ( ! ,homel& ,security ,act (  
#bjjb4  4  ,pass$ ! ,h\se (             
,repres5tatives ,july #ae1 #bjai4;,*]yl 
,l4 ,johnson1,cl]k  ,july #af1          
#bjai,receiv$2 read twice & plac$ on !  
cal5d>