,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #ggb  ,,9 ,,! ,,s5ate ,,( ,,!       
,,unit$ ,,/ates  ,m>* #ac1 #bjai ,mr4   
,rubio 7= himself & ,mr4 ,c>d97         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on ,small
 ,bus9ess & ,entrepr5eur%ip  ,a ,,bill  
,to require an annual report on !       
cyb]security ( ! ,small ,bus9ess        
,adm9i/ration1 & = o!r purposes4  #a4   
,%ort title  ,?is ,act may be cit$ z !  
,,sba ,cyb] ,aw>5ess ,act4  #b4         
,cyb]security aw>5ess report+ ,section  
#aj ( ! ,small ,bus9ess ,act 7#ae       
,u4,s4,c4 #fci7 is am5d$ by /rik+       
subsection 7b7 & ins]t+ ! foll[+3  7b7  
,cyb]security reports  7#a7 ,def9ition  
,9 ?is subsection1 ! t]m appropriate    
congressional committees means-- 7,a7 ! 
,committee on ,small ,bus9ess &         
,entrepr5eur%ip ( ! ,s5ate2 &  7,b7 !   
,committee on ,small ,bus9ess ( ! ,h\se 
( ,repres5tatives4  7#b7 ,annual report 
,n lat] ?an #ahj days aft] ! date (     
enactm5t ( ! ,,sba ,cyb] ,aw>5ess ,act1 

& e ye> !reaft]1 ! ,adm9i/ration %all   
submit a report to ! appropriate        
congressional committees t includes--   
7,a7 an assessm5t ( ! in=mation         
te*nology & cyb]security ( !            
,adm9i/ration2  7,b7 a /rategy to       
increase ! cyb]security ( !             
,adm9i/ration2  7,c7 a detail$ acc\nt ( 
any in=mation te*nology compon5t or     
sy/em ( ! ,adm9i/ration t 0 manufactur$ 
by a company locat$ 9 ! ,p's ,republic (
 ,*9a2 &  7,d7 an acc\nt ( any cyb]     
?reat1 brea*1 or cyb] attack t occurr$  
at ! ,adm9i/ration dur+ ! #b-ye> p]iod  
prec$+ ! date on :i* ! report is        
submitt$1 & any action tak5 by !        
,adm9i/ration to respond to or rem$iate 
! cyb] ?reat1 brea*1 or cyb] attack4    
7#c7 ,additional reports ,if !          
,adm9i/ration det]m9es t !re is a       
reasonable basis to conclude t a cyb]   
?reat1 brea*1 or cyb] attack occurr$ at 
! ,adm9i/ration1 ! ,adm9i/ration %all-- 
7,a7 n lat] ?an #g days aft] ! date on  
:i* ! ,adm9i/ration makes t det]m9ation1

 notify ! appropriate congressional     
committees ( ! cyb] ?reat1 brea*1 or    
cyb] attack2 &  7,b7 n lat] ?an #cj days
 aft] ! date on :i* ! ,adm9i/ration     
makes t det]m9ation1 submit to !        
appropriate congressional committees a  
report t includes--  7i7 a summ>y (     
in=mation ab\t ! cyb] ?reat1 brea*1 or  
cyb] attack1 includ+ h[ ! cyb] ?reat1   
brea*1 or cyb] attack occurr$1 bas$ on  
in=mation available to ! ,adm9i/ration z
 ( ! date :i* ! ,adm9i/ration submits ! 
report2  7ii7 an e/imate ( ! numb] (    
individuals & small entities affect$ by 
! cyb] ?reat1 brea*1 or cyb] attack1    
includ+ an assessm5t ( ! risk ( h>m to  
affect$ individuals & small entities    
bas$ on in=mation available to !        
,adm9i/ration z ( ! date on :i* !       
,adm9i/ration submits ! report2 &  7iii7
 an e/imate ( :5 ! ,adm9i/ration w      
provide notice to affect$ individuals & 
small entities4  7#d7 ,rule (           
con/ruction ,no?+ 9 ?is subsection %all 
be con/ru$ to affect ! report+          

requirem5ts ( ! ,adm9i/ration "u *apt]  
#ce ( title #dd ,unit$ ,/ates ,code1 9  
p>ticul> ! requirem5t to notify ! ,f$]al
 in=mation security incid5t c5t] "u     
section #ceed7;b77#g77;,c77ii7 ( su*    
title1 or any o!r provision ( law4  4