,,ib ,union ,calendar ,no4 #eib #aaith  
,,congress  #b;d ,session  ,h4 ,r4 #hhhj
 ,report ,no4 #aai-fgi ,,in ,,the       
,,house ,,of ,,representatives  ,may    
#ai1 #bjbf,ms4 ,simon 7for herself and  
,mr4 ,bresnahan7 introduced the         
following bill2 which was referred to   
the ,committee on ,small ,business      
,june #c1 #bjbf;,committed to the       
,committee of the ,whole ,house on the  
,state of the ,union and ordered to be  
printed  ,a ,,bill  ,to require the     
,comptroller ,general to evaluate       
,federal cybersecurity assistance to    
small business concerns1 and for other  
purposes4  #a4 ,short title ,this ,act  
may be cited as the ,small ,business    
,cybersecurity ,assistance ,evaluation  
,act of #bjbf4  #b4 ,,gao study on small
 business cybersecurity assistance  7a7 
,study ,the ,comptroller ,general of the
 ,united ,states shall conduct a study  
of current ,federal cybersecurity       
initiatives1 programs1 resources1 tools1
 and services intended to assist owners 

of small business concerns 7as defined  
under section #c of the ,small ,business
 ,act 7#ae ,u4,s4,c4 #fcb77 with-- 7#a7 
identifying cyber risks1 cyber threats1 
and cybersecurity vulnerabilities       
relating to such concerns2  7#b7        
assessing the preparedness of such      
concerns for such risks1 threats1 and   
vulnerabilities2  7#c7 planning for1    
mitigating1 and recovering from         
cyberattacks and incidents of social    
engineering1 scams1 and fraud 7including
 developing1 adopting1 and implementing 
cybersecurity measures1 training1       
protocols1 tools1 and infrastructure72  
and  7#d7 identifying sources of        
capital1 or obtaining capital1 to carry 
out the activities specified in         
paragraphs 7#a71 7#b71 and 7#c74  7b7   
,required content ,the study required by
 subsection 7a7 shall include-- 7#a7    
information on the most common          
cyberattacks affecting small business   
concerns2  7#b7 an identification and   
description of the ,federal             

cybersecurity initiatives1 programs1    
resources1 tools1 and services included 
in the study described in subsection    
7a72  7#c7 an assessment of the         
awareness and use of such ,federal      
cybersecurity initiatives1 programs1    
resources1 tools1 and services by small 
business concerns and reasons for       
differences in levels of such awareness 
and use2  7#d7 an assessment of the     
coordination and integration among such 
,federal cybersecurity initiatives1     
programs1 resources1 tools1 and         
services2  7#e7 an assessment of the    
effectiveness of such ,federal          
cybersecurity initiatives1 programs1    
resources1 tools1 and services in       
assisting small business concerns with  
the activities listed in paragraphs 7#a7
 through 7#d7 of subsection 7a72  7#f7  
an identification of any foundational   
cybersecurity concepts absent from such 
,federal cybersecurity initiatives1     
programs1 resources1 tools1 and         
services2 and  7#g7 recommendations on  

how to improve the effectiveness1       
awareness1 and coordination of such     
,federal cybersecurity initiatives1     
programs1 resources1 tools1 and services
 for small business concerns4  7c7      
,report ,the ,comptroller ,general shall
 submit to the ,committee on ,small     
,business of the ,house of              
,representatives and the ,committee on  
,small ,business and ,entrepreneurship  
of the ,senate a report containing all  
findings and determinations made in     
carrying out the study required under   
subsection 7a74  #c4 ,compliance with   
,,cutgo ,no additional amounts are      
authorized to carry out this ,act4      
,june #c1 #bjbf;,committed to the       
,committee of the ,whole ,house on the  
,state of the ,union and ordered to be  
printed