,,ii  #aaith ,,congress  #b;d ,session  
,s4 #ebia  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,august #f1    
#bjbf,mr4 ,schiff 7for himself and ,mr4 
,young7 introduced the following bill2  
which was read twice and referred to the
 ,committee on ,small ,business and     
,entrepreneurship  ,a ,,bill  ,to       
require the ,comptroller ,general to    
evaluate ,federal cybersecurity         
assistance to small business concerns1  
and for other purposes4  #a4 ,short     
title ,this ,act may be cited as the    
,small ,business ,cybersecurity         
,assistance ,evaluation ,act of #bjbf4  
#b4 ,,gao study on small business       
cybersecurity assistance  7a7 ,small    
business concern defined ,in this       
section1 the term small business concern
 has the meaning given the term in      
section #c of the ,small ,business ,act 
7#ae ,u4,s4,c4 #fcb74  7b7 ,study ,the  
,comptroller ,general of the ,united    
,states shall conduct a study of        
available ,federal cybersecurity        

initiatives1 programs1 resources1 tools1
 and services intended to assist owners 
of small business concerns with-- 7#a7  
identifying cyber risks1 cyber threats1 
and cybersecurity vulnerabilities       
relating to small business concerns2    
7#b7 assessing the preparedness of small
 business concerns for the risks1       
threats1 and vulnerabilities described  
in paragraph 7#a72  7#c7 planning for1  
mitigating1 and recovering from cyber   
attacks and incidents of social         
engineering1 scams1 and fraud1 including
 developing1 adopting1 and implementing 
cybersecurity measures1 training1       
protocols1 tools1 and infrastructure2   
and  7#d7 identifying sources of        
capital1 or obtaining capital1 to carry 
out the activities described in         
paragraphs 7#a71 7#b71 and 7#c74  7c7   
,required content ,the study required   
under subsection 7b7 shall include--    
7#a7 information on the most common     
cyberattacks affecting small business   
concerns2  7#b7 an identification and   

description of the ,federal             
cybersecurity initiatives1 programs1    
resources1 tools1 and services included 
in the study2  7#c7 an assessment of the
 awareness and use of those ,federal    
cybersecurity initiatives1 programs1    
resources1 tools1 and services by small 
business concerns and reasons for       
differences in levels of such awareness 
and use2  7#d7 an assessment of the     
coordination and integration among those
 ,federal cybersecurity initiatives1    
programs1 resources1 tools1 and         
services2  7#e7 an assessment of the    
effectiveness of those ,federal         
cybersecurity initiatives1 programs1    
resources1 tools1 and services in       
assisting small business concerns with  
the activities described in paragraphs  
7#a7 through 7#d7 of subsection 7b72    
7#f7 an identification of any           
foundational cybersecurity concepts     
absent from those ,federal cybersecurity
 initiatives1 programs1 resources1      
tools1 and services2 and  7#g7          

recommendations on how to improve the   
effectiveness1 awareness1 and           
coordination of those ,federal          
cybersecurity initiatives1 programs1    
resources1 tools1 and services for small
 business concerns4  7d7 ,report ,the   
,comptroller ,general of the ,united    
,states shall submit to the ,committee  
on ,small ,business and                 
,entrepreneurship of the ,senate and the
 ,committee on ,small ,business of the  
,house of ,representatives a report     
containing all findings and             
determinations made in carrying out the 
study required under subsection 7b74    
7e7 ,no additional funds ,no additional 
amounts are authorized to carry out this
 ,act4