,i #aafth ,,congress #b;d ,session ,h4 ,r4 #gbfe ,,in ,,the ,,house ,,of ,,representatives ,june #ah1 #bjbj,mr4 ,panetta 7for himself1 ,mr4 ,wilson of ,south ,carolina1 ,ms4 ,slotkin1 ,mr4 ,mitchell1 ,mr4 ,ruppersberger1 ,mr4 ,reschenthaler1 ,ms4 ,stevens1 ,mr4 ,carbajal1 and ,mr4 ,suozzi7 introduced the following bill2 which was referred to the ,committee on ,armed ,services ,a ,,bill ,to improve assistance provided by the ,hollings ,manufacturing ,extension ,partnership to small manufacturers in the defense industrial supply chain on matters relating to cybersecurity1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,small ,manufacturer ,cybersecurity ,enhancement ,act4 #b4 ,findings ,congress finds the following3 7#a7 ,the ,office of the ,director of ,national ,intelligence stated in its #bjai ,worldwide ,threat ,assessment that ,united ,states adversaries and strategic competitors will increasingly use cyber capabilities--including cyber espionage1 attack1 and influence--to seek political1 economic1 and military advantage over the ,united ,states and its allies4 7#b7 ,the ,department of ,defense recognizes that small manufacturers operating in the defense supply chain are particularly vulnerable to cyber attacks because they frequently lack the necessary human and financial resources to protect themselves4 7#c7 ,the ,department of ,defense is implementing its ,cybersecurity ,maturity ,model ,certification 7,,cmmc7 to protect ,controlled ,unclassified ,information and critical ,united ,states technology and information from cyber theft and hacking4 ,all defense contractors will need to comply with ,,cmmc4 7#d7 ,the ,undersecretary of ,defense for ,acquisition and ,sustainment has stated that smaller companies in the defense supply chain might not be able to afford the ,department of ,defense's increasingly demanding cybersecurity requirements1 but that the ,department is committed to ensuring that such companies get the resources they need to comply4 7#e7 ,according to the ,bureau of ,labor ,statistics1 there are more than #cdg1jjj manufacturing establishments in the ,united ,states1 of which #gb percent have fewer than #bj employees and #ii percent have fewer than #ejj employees4 7#f7 ,during the past #g years the ,hollings ,manufacturing ,extension ,partnership 7,,mep7 ,centers have worked closely with the ,department of ,defense to bolster the resilience of the defense industrial base supply chain by providing cybersecurity services to small manufacturers4 ,the ,,mep ,centers have worked with more than #bf1jjj small- and medium-sized manufacturers nationwide in fiscal year #bjai alone4 7#g7 ,hollings ,manufacturing ,extension ,partnership ,centers are located in all #ej ,states and provide a nationwide network that is-- 7,a7 raising the awareness of small manufacturers to cyber threats2 7,b7 helping small manufacturers comply with new ,department of ,defense cybersecurity requirements2 and 7,c7 helping small manufacturers understand that if they do not comply with new ,department of ,defense cybersecurity requirements1 then they risk losing their defense contracts4 7#h7 ,the ,hollings ,manufacturing ,extension ,partnership ,centers are well-positioned to aid small manufacturing companies in the defense supply chain in complying with cybersecurity requirements to protect controlled unclassified information relevant to defense manufacturing supply chains4 #c4 ,assistance for small manufacturers in the defense industrial supply chain on matters relating to cybersecurity 7a7 ,in general ,subject to the availability of appropriations1 the ,secretary of ,defense1 acting through the ,office of ,economic ,adjustment and in consultation with the ,director of the ,national ,institute of ,standards and ,technology1 may make grants to a ,center established under the ,hollings ,manufacturing ,extension ,partnership for the purpose of providing cybersecurity services to small manufacturers4 7b7 ,criteria ,the ,secretary shall establish and publish in the ,federal ,register criteria for selecting grant recipients under this section4 7c7 ,use of funds ,grant funds under this section-- 7#a7 shall be used by a ,center to provide small manufacturers with cybersecurity services related to-- 7,a7 compliance with the cybersecurity requirements of the ,department of ,defense ,supplement to the ,federal ,acquisition ,regulation1 including awareness1 assessment1 evaluation1 preparation1 and implementation of cybersecurity services2 and 7,b7 achieving compliance with the ,cybersecurity ,maturity ,model ,certification framework of the ,department of ,defense2 and 7#b7 may be used by a ,center to employ trained personnel to deliver cybersecurity services to small manufacturers4 7d7 ,reports ,the ,secretary shall submit to the congressional defense committees a biennial report on grants awarded under this section4 ,to the extent practicable1 each such report shall include the following with respect to the years covered by the report3 7#a7 ,the number of small manufacturing companies assisted4 7#b7 ,a description of the cybersecurity services provided4 7#c7 ,a description of the cybersecurity matters addressed4 7#d7 ,an analysis of the operational effectiveness and cost-effectiveness of the cybersecurity services provided4 7e7 ,termination ,the authority of the ,secretary of ,defense to make grants under this section shall terminate on the date that is five years after the date of the enactment of this ,act4 7f7 ,definitions ,in this section3 7#a7 ,center ,the term ,center has the meaning given that term in section #be7;a7 of the ,national ,institute of ,standards and ,technology ,act 7#ae ,u4,s4,c4 #bghk7a774 7#b7 ,congressional defense committees ,the term congressional defense committees has the meaning given that term in section #aja7;a77#af7 of title #aj1 ,united ,states ,code4 7#c7 ,small manufacturer ,the term small manufacturer has the meaning given that term in section #afdd7;g7 of the ,john ,s4 ,mc,cain ,national ,defense ,authorization ,act for ,fiscal ,year #bjai 7,public ,law #aae-bcb2 #aj ,u4,s4,c4 #bbbd note74