,in the ,senate of the ,united ,states1 
,september #bh1 #bjbb4  ,amendment3     
,that the bill from the ,house of       
,representatives 7,h4,r4 #cdfb7 entitled
 ,an ,act to require an annual report on
 the cybersecurity of the ,small        
,business ,administration1 and for other
 purposes41 do pass with the following  
,strike out all after the enacting      
clause and insert3 #a4 ,short title     
,this ,act may be cited as the ,,sba    
,cyber ,awareness ,act4  #b4            
,cybersecurity awareness reporting  7a7 
,in general ,section #aj of the ,small  
,business ,act 7#ae ,u4,s4,c4 #fci7 is  
amended by inserting after subsection   
7a7 the following3  7b7 ,cybersecurity  
reports  7#a7 ,annual report ,not later 
than #ahj days after the date of        
enactment of this subsection1 and every 
year thereafter1 the ,administrator     
shall submit a report to the appropriate
 congressional committees that          
includes-- 7,a7 a strategy to increase  
the cybersecurity of information        

technology infrastructure of the        
,administration2  7,b7 a supply chain   
risk management strategy and an         
implementation plan to address the risks
 of foreign manufactured information    
technology equipment utilized by the    
,administration1 including specific risk
 mitigation activities for components   
originating from entities with principal
 places of business located in the      
,people's ,republic of ,china2 and  7,c7
 an account of-- 7i7 any incident that  
occurred at the ,administration during  
the #b-year period preceding the date on
 which the first report is submitted1   
and1 for subsequent reports1 the #a-year
 period preceding the date of           
submission2 and  7ii7 any action taken  
by the ,administrator to respond to or  
remediate any such incident4  7#b7      
,,fisma reports ,each report required   
under paragraph 7#a7 may be submitted as
 part of the report required under      
section #ceed of title #dd1 ,united     
,states ,code4  7#c7 ,rule of           

construction ,nothing in this subsection
 shall be construed to affect the       
reporting requirements of the           
,administrator under chapter #ce of     
title #dd1 ,united ,states ,code1 in    
particular the requirement to notify the
 ,federal information security incident 
center under section                    
#ceed7;b77#g77;,c77ii7 of such title1   
any guidance issued by the ,office of   
,management and ,budget1 or any other   
provision of law or ,federal policy4    
7#d7 ,definitions ,in this subsection3  
7,a7 ,appropriate congressional         
committees ,the term appropriate        
congressional committees means-- 7i7 the
 ,committee on ,small ,business and     
,entrepreneurship of the ,senate2  7ii7 
the ,committee on ,homeland ,security   
and ,governmental ,affairs of the       
,senate2  7iii7 the ,committee on ,small
 ,business of the ,house of             
,representatives2 and  7iv7 the         
,committee on ,oversight and ,reform of 
the ,house of ,representatives4  7,b7   

,incident ,the term incident has the    
meaning given the term in section #ceeb 
of title #dd1 ,united ,states ,code4    
7,c7 ,information technology ,the term  
information technology has the meaning  
given the term in section #cejb of title
 #dd1 ,united ,states ,code4  4  7b7    
,report ,not later than #a year after   
the date of enactment of this ,act1 the 
,administrator of the ,small ,business  
,administration shall1 to the greatest  
extent practicable1 provide to the      
,committee on ,small ,business and      
,entrepreneurship of the ,senate1 the   
,committee on ,homeland ,security and   
,governmental ,affairs of the ,senate1  
the ,committee on ,small ,business of   
the ,house of ,representatives1 and the 
,committee on ,oversight and ,reform of 
the ,house of ,representatives a        
detailed account of information         
technology 7as defined in section #cejb 
of title #dd1 ,united ,states ,code7 of 
the ,small ,business ,administration    
that was manufactured by an entity that 

has its principal place of business     
located in the ,people's ,republic of   
,china4  ,secretary