,,ib ,union ,calendar ,no4 #aha #aaith  
,,congress  #ast ,session  ,h4 ,r4 #ddia
 ,report ,no4 #aai-bbc ,,in ,,the       
,,house ,,of ,,representatives  ,july   
#ag1 #bjbe,mr4 ,cisneros 7for himself   
and ,mr4 ,jack7 introduced the following
 bill2 which was referred to the        
,committee on ,small ,business  ,august 
#ae1 #bjbe;,committed to the ,committee 
of the ,whole ,house on the ,state of   
the ,union and ordered to be printed  ,a
 ,,bill  ,to require the ,administrator 
of the ,small ,business ,administration 
to implement certain recommendations    
relating to information technology      
modernization1 and for other purposes4  
#a4 ,short title ,this ,act may be cited
 as the ,,sba ,,it ,modernization       
,reporting ,act4  #b4 ,implementation of
 recommendations relating to information
 technology modernization for the ,small
 ,business ,administration  7a7 ,in     
general ,the ,administrator of the      
,small ,business ,administration1 acting
 through the ,chief ,information        

,officer of the ,administration1 shall  
take such actions as may be necessary to
 implement the recommendations contained
 in the report of the ,comptroller      
,general of the ,united ,states titled  
,,it ,,modernization3 ,,sba ,urgently   
,needs to ,address ,risks on ,newly     
,deployed ,system 7,,gao-#be-ajfifc2    
published ,november #f1 #bjbd74  7b7    
,implementation plan ,not later than    
#ahj days after the date of the         
enactment of this ,act1 the             
,administrator shall submit to the      
,committee on ,small ,business of the   
,house of ,representatives and the      
,committee on ,small ,business and      
,entrepreneurship of the ,senate an     
implementation plan detailing the       
actions the ,small ,business            
,administration will undertake to       
establish and implement policies and    
procedures to govern information        
technology modernization projects of the
 ,administration4 ,such policies and    
procedures shall1 with respect to each  

project-- 7#a7 for each risk identified1
 explicitly state the source of such    
risk in the relevant risk documentation2
  7#b7 clearly define risk parameters2  
7#c7 establish and maintain risk        
management strategies2  7#d7 identify   
and document risks for all phases of the
 life cycle2  7#e7 evaluate1 categorize1
 and prioritize risks based on defined  
risk parameters and develop project risk
 management plans2  7#f7 connect        
measures to mitigate risk to risk       
mitigation plans2  7#g7 require that any
 information technology acquisition plan
 and any strategic plan contains        
information needed to manage cyber      
risks2  7#h7 require that a traceability
 analysis is performed and documented2  
7#i7 require that security-related      
subject matter experts are involved in  
selection process for contractors for a 
project2  7#aj7 develop master schedules
 using the guidelines contained in the  
publication of the ,comptroller ,general
 titled ,,gao ,schedule ,assessment     

,guide3 ,best ,practices for ,project   
,schedules 7,,gao-#af-hi;,g2 published  
,december #bb1 #bjae72 and  7#aa7       
develop cost estimates using the        
guidelines contained in the publication 
of the ,comptroller ,general titled     
,cost ,estimating and ,assessment       
,guide3 ,best ,practices for ,developing
 and ,managing ,program ,costs          
7,,gao-#bj-aie;,g2 published ,march #ab1
 #bjbj74  7c7 ,additional requirements  
,the implementation plan required by    
this section shall include the actions  
required to carry out the requirements  
listed in paragraphs 7#a7 through 7#aa7 
of subsection 7b71 an identification of 
the office of the ,administration       
responsible for implementation1 and the 
timelines for completion of each action4
  7d7 ,briefing required ,not later than
 #cj days after the submission of the   
implementation plan required under this 
section1 the ,administrator shall       
provide to the ,committee on ,small     
,business of the ,house of              

,representatives and the ,committee on  
,small ,business and ,entrepreneurship  
of the ,senate a briefing on the plan4  
,august #ae1 #bjbe;,committed to the    
,committee of the ,whole ,house on the  
,state of the ,union and ordered to be  
printed