,,ii  #aagth ,,congress  #b;d ,session  
,s4 #dgja  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,august #b1    
#bjbb,ms4 ,hassan introduced the        
following bill2 which was read twice and
 referred to the ,committee on ,small   
,business and ,entrepreneurship  ,a     
,,bill  ,to provide cybersecurity       
support for small business concerns     
through the small business development  
center program1 and for other purposes4 
#a4 ,short title ,this ,act may be cited
 as the ,small ,businesses              
,cybersecurity ,act4  #b4 ,small        
,business ,cybersecurity ,grants        
,section #ba of the ,small ,business    
,act 7#ae ,u4,s4,c4 #fdh7 is amended by 
adding at the end the following3  7o7   
,cybersecurity ,grants  7#a7            
,definitions ,in this section3 7,a7     
,rural area ,the term rural area has the
 meaning given the term in section      
#cdc7;a7 of the ,consolidated ,farm and 
,rural ,development ,act 7#g ,u4,s4,c4  
#aiia7;a774  7,b7 ,small ,state ,the    

term small ,state means any ,state that 
is minimally funded by the funding      
formula of the ,small ,business         
,development ,center ,program under     
subsection 7a77#d77;,c74  7,c7 ,state   
,the term ,state means each of the      
several ,states1 the ,district of       
,columbia1 and any territory or         
possession of the ,united ,states4  7#b7
 ,grants  7,a7 ,in general ,the         
,administrator shall establish a grant  
program under which the ,administrator  
may award grants on a noncompetitive    
basis to small business development     
centers to support the cybersecurity    
needs of the small business concerns    
served by the small business development
 centers4  7,b7 ,grant criteria ,in     
awarding grants under this subsection1  
the ,administrator may consider the     
following criteria3 7i7 ,the plan of the
 small business development center for  
the use of the grant funds1 including   
how funds would benefit small business  
concerns in rural areas4  7ii7 ,evidence

 submitted by the small business        
development center that the grant would 
increase the cybersecurity of the small 
business concerns that the small        
business development center serves1     
including evidence of past success in   
offering cybersecurity support to small 
business concerns4  7,c7 ,applications  
,to be eligible for a grant under this  
subsection1 a small business development
 center shall submit to the             
,administrator an application in such   
form1 at such time1 and containing such 
information as the ,administrator       
determines is appropriate4  7,d7 ,use of
 ,funds ,a small business development   
center may use amounts received under a 
grant under this subsection to support  
the cybersecurity of the small business 
concerns served by the small business   
development center1 including-- 7i7     
cybersecurity training for employees of 
the small business concerns2  7ii7      
reviews of the cybersecurity policies1  
plans1 and procedures used by the small 

business concerns1 including tabletop   
exercises to test the policies1 plans1  
and procedures2  7iii7 testing of the   
cybersecurity standing of the small     
business concerns1 including via        
penetration testing2 and  7iv7 hiring   
consultants to support the cybersecurity
 needs of the small business concerns4  
7,e7 ,grant ,amount  7i7 ,formula ,the  
,administrator shall establish a #c-tier
 formula for grant funding distribution 
based on the locations of small business
 development centers in one of the      
following categories3 7,i7 ,small       
,states4  7,,ii7 ,medium-sized ,states1 
as defined by the ,administrator4       
7,,iii7 ,large ,states1 as defined by   
the ,administrator4  7ii7 ,maximum      
,amount ,the maximum amount of a grant  
under this subsection shall be1 for a   
small business development center       
located in-- 7,i7 a small ,state1       
#bjj1jjj2  7,,ii7 a medium-sized ,state1
 #cjj1jjj2 or  7,,iii7 a large ,state1  
#djj1jjj4  7,f7 ,duration of ,grant ,the

 period of a grant under this subsection
 shall be #a fiscal year4  7,g7         
,announcement of ,grant ,program ,the   
,administrator shall make widely        
available to the public information on  
the grant program under this subsection4
  7#c7 ,authorization of appropriations 
,there are authorized to be appropriated
 to carry out this subsection           
#bj1jjj1jjj for fiscal year #bjbc and   
each fiscal year thereafter1 to remain  
available until expended4  4