,,ii  #aah? ,,congress  #a/ ,session    
,s4 #bgdj  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,septemb] #g1 #bjbc,mr4
 ,ris* 7= himself1 ,mrs4 ,%ahe51 ,mr4   
,crapo1 & ,ms4 ,cortez ,ma/o7 introduc$ 
! foll[+ bill2 :i* 0 read twice & ref]r$
 to ! ,committee on ,small ,bus9ess &   
,entrepr5eur%ip  ,a ,,bill  ,to help    
small bus9esses prep>e = & combat       
cyb]security ?reats1 & = o!r purposes4  
#a4 ,%ort title ,?is ,act may be cit$ z 
! ,small ,bus9ess ,cyb] ,resili5cy ,act4
  #b4 ,small bus9ess cyb]security  7a7  
,9 g5]al ,! ,small ,bus9ess ,act 7#ae   
,u4,s4,c4 #fca et seq47 is am5d$-- 7#a7 
by r$esignat+ section #di 7#ae ,u4,s4,c4
 #fca note7 z section #eb2 &  7#b7 by   
ins]t+ aft] section #dh 7#ae ,u4,s4,c4  
#fegu7 ! foll[+3  #di4 ,small bus9ess   
cyb]security  7a7 ,def9itions ,9 ?is    
section3 7#a7 ,cyb]security risk2 cyb]  
?reat indicator2 def5sive measure2      
incid5t ,! t]ms cyb]security risk1 cyb] 
?reat indicator1 def5se measure1 &      
incid5t h ! mean+s giv5 ^? t]ms 9       

section #bbjj ( ! ,homel& ,security ,act
 ( #bjjb 7#f ,u4,s4,c4 #fej74  7#b7     
,res\rce p>tn] ,! t]m res\rce p>tn]     
means-- 7,a7 a small bus9ess developm5t 
c5t]2  7,b7 a wom5's bus9ess c5t]       
describ$ 9 section #bi2 &  7,c7 a *apt] 
( ! ,s]vice ,corps ( ,retir$ ,executives
 describ$ 9 section #h7;a77#a77;,a74    
7b7 ,int]ag5cy agreem5t ,! ,adm9i/ration
 %all ent] into an int]ag5cy agreem5t ) 
! ,cyb]security & ,infra/ructure        
,security ,ag5cy to collaborate &       
increase in=mation %>+ ) ! ,adm9i/ration
 to improve cyb]security res\rces &     
def5ses = small bus9ess conc]ns1 includ+
 cyb]security products tailor$ to ! ne$s
 ( small bus9ess conc]ns4  7c7          
,assi/ance ?r\gh res\rce p>tn]s  7#a7 ,9
 g5]al ,! ,dep>tm5t ( ,homel& ,security1
 & any o!r ,f$]al ag5cy 9 coord9ation ) 
! ,dep>tm5t ( ,homel& ,security1 %all   
lev]age res\rce p>tn]s to provide       
assi/ance to small bus9ess conc]ns )    
cyb]security tools1 su* z ! ,cyb]       
,security ,evaluation ,tool & ! ,cyb]   

,resili5ce ,review1 & by dissem9at+     
in=mation relat+ to cyb]security risks &
 o!r homel& security matt]s to help     
small bus9ess conc]ns 9 develop+ or     
enhanc+ cyb]security infra/ructure1     
aw>5ess ( cyb] ?reat indicators1        
cyb]security incid5t response plann+1 & 
cyb] tra9+ programs = employees4  7#b7  
,annual publication ,n lat] ?an #a ye>  
aft] ! date ( enactm5t ( ! ,small       
,bus9ess ,cyb] ,resili5cy ,act &        
annually !reaft]1 ! ,adm9i/rator %all   
publi% on ! website ( ! ,adm9i/ration ! 
numb] ( small bus9ess conc]ns t res\rce 
p>tn]s assi/$ 9 provid+ assi/ance       
describ$ 9 p>agraph 7#a7 dur+ ! ye>     
cov]$ by ! publication4  7d7 ,c5tral    
small bus9ess cyb]security assi/ance    
unit  7#a7 ,e/abli%m5t ,! ,adm9i/rator1 
9 coord9ation ) ! ,secret>y ( ,comm]ce1 
& 9 consultation ) ! ,secret>y ( ,homel&
 ,security & ! ,attorney ,g5]al1 %all   
e/abli% a c5tral small bus9ess          
cyb]security assi/ance unit )9 !        
,adm9i/ration1 :i* %all s]ve z a c5tral 

cle>+h\se = cyb]security res\rces =     
small bus9ess conc]ns across ! ,f$]al   
,gov]nm5t1 su* z ^? develop$ by !       
,dep>tm5t ( ,homel& ,security4  7#b7    
,duties ,! c5tral small bus9ess         
cyb]security assi/ance unit e/abli%$ "u 
p>agraph 7#a7 %all-- 7,a7 coord9ate     
int]nal cyb]security ef=ts )9 !         
,adm9i/ration to r$uce duplication (    
ef=t & res\rces2  7,b7 e/abli% & ma9ta9 
a publicly available website t is a     
cle>+h\se ( cyb]security in=mation =    
small bus9ess conc]ns1 includ+ in=mation
 on-- 7i7 h[ to f9d guidance mat]ial on 
be/ cyb] hygi5e practices2  7ii7 :]e to 
report cyb]security brea*es or incid5ts2
  7iii7 h[ to respond to cyb]security   
brea*es or incid5ts2  7iv7 !            
cyb]security ef=ts ( ! ,adm9i/ration2   
7v7 h[ to contact ! c]tifi$ employees   
describ$ 9 section #ba7o72 &  7vi7 /&>d 
incid5t response proc$ures = lead+ cyb] 
crimes2  7,c7 "w ) ! c]tifi$ employees  
describ$ 9 section #ba7o7 to provide    
cyb]security assi/ance to small bus9ess 

conc]ns2  7,d7 coord9ate ) ! ,dep>tm5t (
 ,homel& ,security & any o!r ,f$]al     
ag5cy z ! ,adm9i/rator det]m9es         
appropriate to id5tify & dissem9ate     
cyb]security in=mation & res\rces to    
small bus9ess conc]ns 9 a =m t is       
accessible & actionable by small bus9ess
 conc]ns2  7,e7 r$irect small bus9ess   
cyb]security inquiries1 su* z report+ ( 
cyb] ?reat indicators & def5sive        
measures1 to ! appropriate ,f$]al       
ag5cies2  7,f7 coord9ate ) ! ,national  
,in/itute ( ,/&>ds & ,te*nology to      
id5tify & dissem9ate in=mation to small 
bus9ess conc]ns on ! mo/ co/-effective  
me?ods = implem5t+ elem5ts ( !          
cyb]security framework ( ! ,national    
,in/itute ( ,/&>ds & ,te*nology         
applicable to improv+ ! cyb]security    
po/ure ( small bus9ess conc]ns2  7,g7   
coord9ate ) ! ,dep>tm5t ( ,def5se to    
id5tify & dissem9ate in=mation to small 
bus9ess conc]ns on satisfy+ ! applicable
 requirem5ts ( ! ,cyb]security ,maturity
 ,model ,c]tification ( ! ,dep>tm5t (   

,def5se or any o!r successor            
cyb]security requirem5ts z e/abli%$ by !
 ,dep>tm5t ( ,def5se2 &  7,h7 seek input
 f ! ,(fice ( ,advocacy ( !             
,adm9i/ration to id5tify any policies or
 proc$ures adopt$ by any dep>tm5t1      
ag5cy1 or in/rum5tality ( ! ,f$]al      
,gov]nm5t t w hamp] ! improvem5t ( !    
cyb]security po/ure ( ^? small bus9ess  
conc]ns4  7#c7 ,enhanc$ cyb]security    
protections = small bus9esses  7,a7 ,9  
g5]al ,not)/&+ any o!r provision ( law1 
no cause ( action %all lie or be ma9ta9$
 9 any c\rt aga9/ any small bus9ess     
conc]n1 & su* action %all be promptly   
dismiss$1 if su* action is relat$ to or 
arises out (-- 7i7 any activity au?oriz$
 "u ?is p>agraph or ! ,cyb]security     
,in=mation ,%>+ ,act ( #bjae 7#f        
,u4,s4,c4 #aeja et seq472 or  7ii7 any  
action or inaction 9 response to any    
cyb] ?reat indicator1 def5sive measure1 
or o!r in=mation %>$ or receiv$ pursuant
 to ?is p>agraph or ! ,cyb]security     
,in=mation ,%>+ ,act ( #bjae 7#f        

,u4,s4,c4 #aeja et seq474  7,b7 ,rule ( 
con/ruction ,no?+ 9 ?is p>agraph %all be
 con/ru$ to affect ! applicability or   
m]its ( any def5se1 motion1 or argum5t 9
 any cause ( action 9 a c\rt br\ght     
aga9/ an entity t is n a small bus9ess  
conc]n4  7e7 ,report  7#a7 ,9 g5]al ,n  
lat] ?an #a ye> aft] ! date ( enactm5t (
 ! ,small ,bus9ess ,cyb] ,resili5cy     
,act1 & e ye> !reaft]1 ! ,adm9i/rator & 
! head ( ea* ,f$]al ag5cy t collects or 
%>es in=mation "u ?is section %all      
submit to ! ,committee on ,small        
,bus9ess & ,entrepr5eur%ip ( ! ,s5ate & 
! ,committee on ,small ,bus9ess ( !     
,h\se ( ,repres5tatives a jo9t report on
 actions tak5 by ! ,adm9i/ration &      
relevant ,f$]al ag5cies to protect      
p]sonally id5tifiable in=mation1 bus9ess
 id5tifiable in=mation1 s5sitive        
f9ancial in=mation1 & cyb]security      
in=mation receiv$ by ^? ,f$]al ag5cies z
 a result ( ! requirem5ts "u ?is        
section4  7#b7 ,=m ,ea* report requir$  
"u p>agraph 7#a7 %all be unclassifi$1 b 

may include a classifi$ annex4  4  7b7  
,prohibition on new appropriations  7#a7
 ,9 g5]al ,no additional funds are      
au?oriz$ to be appropriat$ to c>ry out  
?is section & ! am5dm5ts made by ?is    
section4  7#b7 ,exi/+ fund+ ,?is section
 & ! am5dm5ts made by ?is section %all  
be c>ri$ out us+ am\nts made available  
to ! ,small ,bus9ess ,adm9i/ration "u ! 
head+ ,entrepr5eurial ,developm5t       
,programs4  7c7 ,implem5tation ,n lat]  
?an #ahj days aft] ! date ( enactm5t (  
?is ,act1 ! ,adm9i/rator ( ! ,small     
,bus9ess ,adm9i/ration %all implem5t ?is
 section & ! am5dm5ts made by ?is       
section4  #c4 ,/udy & report on         
cyb]security risks ( small bus9esses    
7a7 ,def9itions ,9 ?is section3 7#a7    
,adm9i/ration ,! t]m ,adm9i/ration means
 ! ,small ,bus9ess ,adm9i/ration4  7#b7 
,appropriate committees ( ,congress ,!  
t]m appropriate committees ( ,congress  
means-- 7,a7 ! ,committee on ,small     
,bus9ess & ,entrepr5eur%ip ( ! ,s5ate2  
7,b7 ! ,committee on ,homel& ,security &

 ,gov]nm5tal ,affairs ( ! ,s5ate2  7,c7 
! ,committee on ,small ,bus9ess ( !     
,h\se ( ,repres5tatives2 &  7,d7 !      
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives4  7#c7          
,cyb]security risk ,! t]m cyb]security  
risk has ! mean+ giv5 ! t]m 9 section   
#bbjj ( ! ,homel& ,security ,act ( #bjjb
 7#f ,u4,s4,c4 #fej74  7#d7 ,in=mation  
sy/em ,! t]m in=mation sy/em has ! mean+
 giv5 ! t]m 9 section #cejb ( title #dd1
 ,unit$ ,/ates ,code4  7#e7 ,rural area 
,! t]m rural area means any c\nty or o!r
 political subdivision ( a ,/ate1 !     
,di/rict ( ,columbia1 or a t]ritory or  
possession ( ! ,unit$ ,/ates t is       
designat$ z a rural area by ! ,bureau ( 
! ,c5sus4  7#f7 ,small bus9ess conc]n ,!
 t]m small bus9ess conc]n has ! mean+   
giv5 ! t]m 9 section #c ( ! ,small      
,bus9ess ,act 7#ae ,u4,s4,c4 #fcb74  7b7
 ,/udy & ,report ,n lat] ?an #a ye> aft]
 ! date ( enactm5t ( ?is ,act1 ! ,*ief  
,c\nsel = ,advocacy ( ! ,adm9i/ration & 
! ,comptroll] ,g5]al ( ! ,unit$ ,/ates  

%all-- 7#a7 conduct a jo9t /udy assess+ 
! impact ( small bus9ess conc]ns turn+  
to onl9e m>ketplaces z a result (       
%utd[ns impos$ by ! ,,covid-#ai p&emic1 
specifically 9 reg>ds to ! cyb]security 
( ^? small bus9ess conc]ns2 &  7#b7     
submit to ! appropriate committees (    
,congress & make publicly available a   
report on-- 7,a7 h[ id5tifi$            
cyb]security risks specifically impact  
small bus9ess conc]ns t e/abli%$ an     
onl9e pres5ce dur+ ! p]iod beg9n+ on    
,febru>y #a1 #bjbj1 & end+ on ,decemb]  
#ca1 #bjba2  7,b7 ! *all5ges t ! small  
bus9ess conc]ns describ$ 9 subp>agraph  
7,a7 face 9-- 7i7 secur+ updat$         
in=mation sy/ems2  7ii7 implem5t+       
cyb]security protocols2 &  7iii7        
respond+ to data brea*es or cyb]        
attacks2  7,c7 ! ,f$]al res\rces t !    
small bus9ess conc]ns describ$ 9        
subp>agraph 7,a7 us$ 9 e/abli%+ ! onl9e 
pres5ce describ$ 9 t p>agraph2  7,d7 z (
 ! date ( ! report1 ! cyb]security /atus
 ( ! small bus9ess conc]ns describ$ 9   

subp>agraph 7,a7 bas$ on a repres5tative
 sample ( ^? small bus9ess conc]ns2     
7,e7 h[ ! ,dep>tm5t ( ,homel& ,security 
& ! ,adm9i/ration c improve _! exi/+    
p>tn]%ip to bett] tra9 small bus9ess    
conc]ns reg>d+ cyb]security ?reats2 &   
7,f7 z ( ! date ( ! report-- 7i7 !      
frequ5cy ( ea* type ( cyb] attack suff]$
 by small bus9ess conc]ns describ$ 9    
subp>agraph 7,a72 &  7ii7 an e/imat$    
av]age co/ to ^? small bus9ess conc]ns (
 ea* type ( cyb] attack4