I 

118TH CONGRESS 

2D SESSION H. R. 10119 

To require the Administrator of the Small Business Administration to implement certain recommendations relating to information technology modernization, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

NOVEMBER 13, 2024 

Ms. VELA ́ZQUEZ introduced the following bill; which was referred to the 

Committee on Small Business 

A BILL 

To require the Administrator of the Small Business Administration to implement certain recommendations relating 

to information technology modernization, and for other 

purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘SBA IT Modernization 

5 Reform Act of 2024’’. 


ssavage on LAPJG3WLY3PROD with BILLS
2 

•HR 10119 IH

1 SEC. 2. IMPLEMENTATION OF RECOMMENDATIONS RELAT2 ING TO INFORMATION TECHNOLOGY MOD3 ERNIZATION FOR THE SMALL BUSINESS AD4 MINISTRATION. 

5 (a) IN GENERAL.—The Administrator of the Small 

6 Business Administration, acting through the Chief Infor7 mation Officer of the Administration, shall take such ac8 tions as may be necessary to implement the recommenda9 tions contained in the report of the Comptroller General 

10 of the United States titled ‘‘IT MODERNIZATION: SBA 

11 Urgently Needs to Address Risks on Newly Deployed Sys12 tem’’ (GAO–25–106963). 

13 (b) IMPLEMENTATION PLAN.—Not later than 180 

14 days after the date of the enactment of this Act, the Ad15 ministrator shall submit to the Committee on Small Busi16 ness of the House of Representatives and the Committee 

17 on Small Business and Entrepreneurship of the Senate an 

18 implementation plan detailing the actions the Small Busi19 ness Administration will undertake to establish and imple20 ment policies and procedures to govern information tech21 nology modernization projects of the Administration. Such 

22 policies and procedures shall, with respect to each 

23 project— 

24 (1) for each risk identified, explicitly state the 

25 source of such risk in the relevant risk documenta26 tion; 


ssavage on LAPJG3WLY3PROD with BILLS
3 

•HR 10119 IH

1 (2) clearly define risk parameters; 

2 (3) establish and maintain risk management 

3 strategies; 

4 (4) identify and document risks for all phases 

5 of the life cycle; 

6 (5) evaluate, categorize, and prioritize risks 

7 based on defined risk parameters and develop 

8 project risk management plans; 

9 (6) connect measures to mitigate risk to risk 

10 mitigation plans; 

11 (7) require that any information technology ac12 quisition plan and any strategic plan contains infor13 mation needed to manage cyber risks; 

14 (8) require that a traceability analysis is per15 formed and documented; 

16 (9) require that security-related subject matter 

17 experts are involved in selection process for contrac18 tors for a project; 

19 (10) develop master schedules using the guide20 lines contained in the publication of the Comptroller 

21 General titled ‘‘GAO Schedule Assessment Guide: 

22 Best Practices for Project Schedules’’ (GAO–16– 

23 89G; published December 22, 2015); and 

24 (11) develop cost estimates using the guidelines 

25 contained in the publication of the Comptroller GenVerDate Sep 11 2014 21:44 Nov 13, 2024 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H10119.IH H10119

ssavage on LAPJG3WLY3PROD with BILLS
4 

•HR 10119 IH

1 eral titled ‘‘Cost Estimating and Assessment Guide: 

2 Best Practices for Developing and Managing Pro3 gram Costs’’ (GAO–20–195G; published March 12, 

4 2020). 

5 (c) ADDITIONAL REQUIREMENTS.—The implementa6 tion plan required by this section shall include the actions 

7 required to carry out the requirements listed in para8 graphs (1) through (11) of subsection (b), an identifica9 tion of the office of the Administration responsible for im10 plementation, and the timelines for completion of each ac11 tion. 

12 (d) BRIEFING REQUIRED.—Not later than 30 days 

13 after the submission of the implementation plan required 

14 under this section, the Administrator shall provide to the 

15 Committee on Small Business of the House of Representa16 tives and the Committee on Small Business and Entrepre17 neurship of the Senate a briefing on the plan. 

Æ 


ssavage on LAPJG3WLY3PROD with BILLS