II 

116TH CONGRESS 

1ST SESSION S. 2034 

To authorize small business development centers to provide cybersecurity 

assistance to small business concerns, and for other purposes. 

IN THE SENATE OF THE UNITED STATES 

JUNE 27, 2019 

Mr. PETERS (for himself and Mr. RUBIO) introduced the following bill; which 

was read twice and referred to the Committee on Small Business and Entrepreneurship 

A BILL 

To authorize small business development centers to provide 

cybersecurity assistance to small business concerns, and 

for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Small Business Cyber5 security Assistance Act of 2019’’. 


kjohnson on DSK79L0C42 with BILLS
2 

•S 2034 IS

1 SEC. 2. SBA ACTIVITIES TO BOLSTER SMALL BUSINESS DE2 VELOPMENT CENTER CYBERSECURITY SUP3 PORT FUNCTIONS. 

4 (a) IN GENERAL.—Section 21 of the Small Business 

5 Act (15 U.S.C. 648) is amended— 

6 (1) in subsection (a)— 

7 (A) in paragraph (1), by inserting ‘‘man8 agement, training, and technical assistance re9 garding cybersecurity;’’ after ‘‘technology trans10 fer;’’; and 

11 (B) in paragraph (8)— 

12 (i) by redesignating subparagraph (B) 

13 as subparagraph (C); and 

14 (ii) by inserting after subparagraph 

15 (A) the following: 

16 ‘‘(B) CYBERSECURITY CLEARINGHOUSE.— 

17 ‘‘(i) IN GENERAL.—In furtherance of 

18 the Small Business Development Center 

19 Cyber Strategy developed under section 

20 1841(a) of the National Defense Author21 ization Act for Fiscal Year 2017 (Public 

22 Law 114–328; 130 Stat. 2662), not later 

23 than 90 days after the date of enactment 

24 of the Small Business Cybersecurity As25 sistance Act of 2019, the Administrator, in 

26 consultation with America’s SBDC (or any 


kjohnson on DSK79L0C42 with BILLS
3 

•S 2034 IS

1 subsequent association identified by the 

2 Administrator that represents small busi3 ness development centers), any federally 

4 affiliated small business-focused entity as 

5 determined appropriate by the Adminis6 trator, and, as appropriate, any other Fed7 eral agency, shall advise the Secretary of 

8 Homeland Security on the development 

9 and maintenance of a Cybersecurity Clear10 inghouse platform (in this subparagraph 

11 referred to as the ‘Clearinghouse’). 

12 ‘‘(ii) MANAGEMENT.—The Adminis13 trator and the Secretary of Homeland Se14 curity shall jointly manage the content 

15 maintained on the Clearinghouse. 

16 ‘‘(iii) RESOURCES.—The Clearing17 house shall contain public-facing cyberse18 curity resources, to the extent possible fo19 cused on small business concerns, in a sin20 gle location for easy reference by small 

21 business development centers, federally af22 filiated small-business focused entities, and 

23 small business concerns. 

24 ‘‘(iv) CONTENTS.—The Clearinghouse 

25 shall— 


kjohnson on DSK79L0C42 with BILLS
4 

•S 2034 IS

1 ‘‘(I) be publicly available online; 

2 and 

3 ‘‘(II) contain cybersecurity ref4 erence material for small business 

5 concerns— 

6 ‘‘(aa) developed by entities 

7 in the Federal Government; and 

8 ‘‘(bb) for any other purpose 

9 as determined jointly by the Ad10 ministrator and the Secretary of 

11 Homeland Security. 

12 ‘‘(v) TRAINING.—The Administrator, 

13 in consultation with America’s SBDC (or 

14 any subsequent association identified by 

15 the Administrator that represents small 

16 business development centers), any feder17 ally affiliated small business-focused entity 

18 as determined appropriate by the Adminis19 trator, the Department of Homeland Secu20 rity, and, as appropriate, any other Fed21 eral agency, shall provide periodic training 

22 sessions, online or in-person, to employees 

23 of small business development centers and 

24 other federally affiliated small business-foVerDate Sep 11 2014 04:13 Jul 03, 2019 Jkt 089200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S2034.IS S2034

kjohnson on DSK79L0C42 with BILLS
5 

•S 2034 IS

1 cused entities on the Clearinghouse, includ2 ing utilization of the Clearinghouse. 

3 ‘‘(vi) EXISTING PLATFORM OR

4 WEBSITE.—The Administrator may main5 tain the Clearinghouse on an online plat6 form or website in existence as of the date 

7 of enactment of the Small Business Cyber8 security Assistance Act of 2019. 

9 ‘‘(vii) REFERENCE.—The Administra10 tion shall include a hyperlink for the public 

11 to access the Clearinghouse on the website 

12 of the Administration.’’; and 

13 (2) in subsection (c)(3)— 

14 (A) in subparagraph (T), by striking 

15 ‘‘and’’ at the end; 

16 (B) in the first subparagraph (U), by 

17 striking the period at the end and inserting a 

18 semicolon; 

19 (C) by redesignating the second subpara20 graph (U) as subparagraph (V); 

21 (D) in subparagraph (V), as so redesig22 nated, by striking the period at the end and in23 serting ‘‘; and’’; and 

24 (E) by adding at the end the following: 


kjohnson on DSK79L0C42 with BILLS
6 

•S 2034 IS

1 ‘‘(W) providing information and assistance to 

2 small business concerns with respect to cybersecurity 

3 policies, management, or technical strategies.’’. 

4 SEC. 3. DEPARTMENT OF HOMELAND SECURITY ACTIVI5 TIES TO BOLSTER SMALL BUSINESS DEVEL6 OPMENT CENTER CYBERSECURITY SUPPORT 

7 FUNCTIONS. 

8 (a) DEFINITIONS.—In this section— 

9 (1) the term ‘‘Administrator’’ means the Ad10 ministrator of the Small Business Administration; 

11 (2) the term ‘‘Secretary’’ means the Secretary 

12 of Homeland Security; and 

13 (3) the terms ‘‘small business concern’’ and 

14 ‘‘small business development center’’ has the mean15 ings given those terms in section 3 of the Small 

16 Business Act (15 U.S.C. 632). 

17 (b) PROGRAM.— 

18 (1) IN GENERAL.—The Secretary, in consulta19 tion with the Administrator, America’s SBDC (or 

20 any subsequent association identified by the Admin21 istrator that represents small business development 

22 centers), any federally affiliated small business-fo23 cused entity as determined appropriate by the Ad24 ministrator, and, as appropriate, any other Federal 

25 agency, shall develop— 


kjohnson on DSK79L0C42 with BILLS
7 

•S 2034 IS

1 (A) educational cybersecurity materials for 

2 employees of small business development cen3 ters, and other federally affiliated small busi4 ness-focused entities as determined appropriate 

5 by the Administrator, to utilize during cyberse6 curity events and counseling sessions with small 

7 business concerns, which shall address, at a 

8 minimum— 

9 (i) cybersecurity policies and proce10 dures for small businesses; 

11 (ii) cybersecurity defensive strategies 

12 for small businesses; and 

13 (iii) cybersecurity response strategies 

14 for small businesses; and 

15 (B) training programs, such as webinars, 

16 on-line tools, or software, for employees of small 

17 business development centers, and other feder18 ally affiliated small business-focused entities as 

19 determined appropriate by the Administrator, 

20 to utilize during cybersecurity events and coun21 seling sessions with small business concerns. 

22 (2) TRAINING.—The Secretary shall provide 

23 periodic training sessions, online or in-person, to em24 ployees of small business development centers, and 

25 other federally affiliated small business-focused entiVerDate Sep 11 2014 04:13 Jul 03, 2019 Jkt 089200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S2034.IS S2034

kjohnson on DSK79L0C42 with BILLS
8 

•S 2034 IS

1 ties as determined appropriate by the Administrator, 

2 on the utilization of the materials and training pro3 grams described in subparagraphs (A) and (B) of 

4 paragraph (1). 

5 (3) POSTING OF MATERIAL.—Not later than 

6 180 days after the date on which the Administrator 

7 establishes the Cybersecurity Clearinghouse required 

8 under subparagraph (B) of section 21(a)(8) of the 

9 Small Business Act (15 U.S.C. 648(a)(8)), as added 

10 by section 2 of this Act— 

11 (A) the Secretary shall complete develop12 ment of the materials described in paragraph 

13 (1)(A) and submit them to the Administrator; 

14 and 

15 (B) the Administrator or the Secretary 

16 shall upload those materials to the Cybersecu17 rity Clearinghouse. 

Æ 


kjohnson on DSK79L0C42 with BILLS