,,ii  #aai? ,,congress  #b;d ,session   
,s4 #ebia  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,augu/ #f1 #bjbf,mr4   
,s*iff 7= himself & ,mr4 ,"y7 introduc$ 
! foll[+ bill2 :i* 0 read twice & ref]r$
 to ! ,committee on ,small ,bus9ess &   
,entrepr5eur%ip  ,a ,,bill  ,to require 
! ,comptroll] ,g5]al to evaluate ,f$]al 
cyb]security assi/ance to small bus9ess 
conc]ns1 & = o!r purposes4  #a4 ,%ort   
title ,?is ,act may be cit$ z ! ,small  
,bus9ess ,cyb]security ,assi/ance       
,evaluation ,act ( #bjbf4  #b4 ,,gao    
/udy on small bus9ess cyb]security      
assi/ance  7a7 ,small bus9ess conc]n    
def9$ ,9 ?is section1 ! t]m small       
bus9ess conc]n has ! mean+ giv5 ! t]m 9 
section #c ( ! ,small ,bus9ess ,act 7#ae
 ,u4,s4,c4 #fcb74  7b7 ,/udy ,!         
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all conduct a /udy ( available ,f$]al  
cyb]security initiatives1 programs1     
res\rces1 tools1 & s]vices int5d$ to    
assi/ own]s ( small bus9ess conc]ns )-- 
7#a7 id5tify+ cyb] risks1 cyb] ?reats1 &

 cyb]security vuln]abilities relat+ to  
small bus9ess conc]ns2  7#b7 assess+ !  
prep>$ness ( small bus9ess conc]ns = !  
risks1 ?reats1 & vuln]abilities describ$
 9 p>agraph 7#a72  7#c7 plann+ =1       
mitigat+1 & recov]+ f cyb] attacks &    
incid5ts ( social eng9e]+1 scams1 &     
fraud1 includ+ develop+1 adopt+1 &      
implem5t+ cyb]security measures1 tra9+1 
protocols1 tools1 & infra/ructure2 &    
7#d7 id5tify+ s\rces ( capital1 or      
obta9+ capital1 to c>ry out ! activities
 describ$ 9 p>agraphs 7#a71 7#b71 &     
7#c74  7c7 ,requir$ cont5t ,! /udy      
requir$ "u subsection 7b7 %all include--
 7#a7 in=mation on ! mo/ common         
cyb]attacks affect+ small bus9ess       
conc]ns2  7#b7 an id5tification &       
description ( ! ,f$]al cyb]security     
initiatives1 programs1 res\rces1 tools1 
& s]vices includ$ 9 ! /udy2  7#c7 an    
assessm5t ( ! aw>5ess & use ( ^? ,f$]al 
cyb]security initiatives1 programs1     
res\rces1 tools1 & s]vices by small     
bus9ess conc]ns & reasons = diff]5ces 9 

levels ( su* aw>5ess & use2  7#d7 an    
assessm5t ( ! coord9ation & integration 
among ^? ,f$]al cyb]security            
initiatives1 programs1 res\rces1 tools1 
& s]vices2  7#e7 an assessm5t ( !       
effectiv5ess ( ^? ,f$]al cyb]security   
initiatives1 programs1 res\rces1 tools1 
& s]vices 9 assi/+ small bus9ess conc]ns
 ) ! activities describ$ 9 p>agraphs    
7#a7 ?r\gh 7#d7 ( subsection 7b72  7#f7 
an id5tification ( any f\ndational      
cyb]security concepts abs5t f ^? ,f$]al 
cyb]security initiatives1 programs1     
res\rces1 tools1 & s]vices2 &  7#g7     
recomm5dations on h[ to improve !       
effectiv5ess1 aw>5ess1 & coord9ation (  
^? ,f$]al cyb]security initiatives1     
programs1 res\rces1 tools1 & s]vices =  
small bus9ess conc]ns4  7d7 ,report ,!  
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all submit to ! ,committee on ,small   
,bus9ess & ,entrepr5eur%ip ( ! ,s5ate & 
! ,committee on ,small ,bus9ess ( !     
,h\se ( ,repres5tatives a report conta9+
 all f9d+s & det]m9ations made 9 c>ry+  

out ! /udy requir$ "u subsection 7b74   
7e7 ,no additional funds ,no additional 
am\nts are au?oriz$ to c>ry out ?is     
,act4