,,ii  #aafth ,,congress  #b;d ,session  
,s4 #cbje  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,january #af1  
#bjbj,ms4 ,cortez ,masto 7for herself1  
,mr4 ,risch1 and ,ms4 ,rosen7 introduced
 the following bill2 which was read     
twice and referred to the ,committee on 
,small ,business and ,entrepreneurship  
,a ,,bill  ,to require the              
,administrator of the ,small ,business  
,administration to establish a program  
to assist small business concerns with  
purchasing cybersecurity products and   
services1 and for other purposes4  #a4  
,short title ,this ,act may be cited as 
the ,strengthening and ,enhancing       
,cybersecurity ,usage to ,reach ,every  
,small ,business ,act or the ,,secure   
,small ,business ,act4  #b4 ,definitions
 ,in this ,act3  7#a7 ,administrator    
,the term ,administrator means the      
,administrator of the ,small ,business  
,administration4  7#b7 ,covered industry
 sectors ,the term covered industry     
sectors means the following industry    

sectors3  7,a7 ,accommodation and food  
services4  7,b7 ,agriculture4  7,c7     
,construction4  7,d7 ,healthcare and    
social assistance4  7,e7 ,retail and    
wholesale trade4  7,f7 ,transportation  
and warehousing4  7,g7 ,entertainment   
and recreation4  7,h7 ,finance and      
insurance4  7,i7 ,manufacturing4  7,j7  
,information and telecommunications4    
7,k7 ,any other industry sector that the
 ,administrator determines to be        
relevant4  7#c7 ,covered vendor ,the    
term covered vendor means a vendor of   
cybersecurity products and services1    
including cybersecurity risk insurance4 
7#d7 ,cybersecurity ,the term           
cybersecurity means-- 7,a7 the art of   
protecting networks1 devices1 and data  
from unauthorized access or criminal    
use2 and  7,b7 the practice of ensuring 
the confidentiality1 integrity1 and     
availability of information4  7#e7      
,cybersecurity threat ,the term         
cybersecurity threat means the          
possibility of a malicious attempt to   

infiltrate1 damage1 disrupt1 or destroy 
computer networks or systems4  7#f7     
,small business concern ,the term small 
business concern has the meaning given  
the term in section #c7;a7 of the ,small
 ,business ,act 7#ae ,u4,s4,c4          
#fcb7;a774  #c4 ,cybersecurity          
cooperative marketplace program  7a7    
,establishment ,not later than #ahj days
 after the date of enactment of this    
,act1 the ,administrator1 in            
consultation with the ,director of the  
,national ,institute of ,standards and  
,technology1 shall establish a program  
to assist small business concerns with  
purchasing cybersecurity products and   
services4  7b7 ,duties ,in carrying out 
the program established under subsection
 7a71 the ,administrator shall-- 7#a7   
educate small business concerns about   
the types of cybersecurity products and 
services that are specific to each      
covered industry sector2 and  7#b7      
provide outreach to covered vendors and 
small business concerns to encourage use

 of the cooperative marketplace         
described in subsection 7c74  7c7       
,cooperative marketplace for purchasing 
cybersecurity products and services ,the
 ,administrator shall-- 7#a7 establish  
and maintain a website that--  7,a7 is  
free to use for small business concerns 
and covered vendors2 and  7,b7 provides 
a cooperative marketplace that          
facilitates the creation of mutual      
agreements under which small business   
concerns cooperatively purchase         
cybersecurity products and services from
 covered vendors2 and  7#b7 determine   
whether each covered vendor and each    
small business concern that participates
 in the marketplace described in        
paragraph 7#a7 is legitimate1 as        
determined by the ,administrator4  7d7  
,sunset ,this section ceases to be      
effective on ,september #cj1 #bjbd4  #d4
 ,,gao study on available ,federal      
cybersecurity initiatives  7a7 ,in      
general ,the ,comptroller ,general of   
the ,united ,states shall conduct a     

study that identifies any improvements  
that could be made to ,federal          
initiatives that--  7#a7 train small    
business concerns how to avoid          
cybersecurity threats2 and  7#b7 are in 
effect on the date on which the         
,comptroller ,general commences the     
study4  7b7 ,report ,not later than #a  
year after the date of enactment of this
 ,act1 the ,comptroller ,general of the 
,united ,states shall submit to the     
,committee on ,small ,business and      
,entrepreneurship of the ,senate and the
 ,committee on ,small ,business of the  
,house of ,representatives a report that
 contains the results of the study      
required under subsection 7a74