IB 
Union Calendar No. 502 
115TH CONGRESS 
2D SESSION 
H. R. 4668 
[Report No. 115–654] 
To amend the Small Business Act to provide for the establishment of an 
enhanced cybersecurity assistance and protections for small businesses, 
and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
DECEMBER 18, 2017 
Mr. CHABOT (for himself and Ms. VELA´ZQUEZ) introduced the following bill; 
which was referred to the Committee on Small Business 
APRIL 25, 2018 
Additional sponsors: Mr. KING of Iowa, Mrs. RADEWAGEN, Miss GONZA´LEZ- 
COLO´N of Puerto Rico, Mr. NORMAN, Mr. CURTIS, Ms. CLARKE of New 
York, Mr. LAWSON of Florida, Mr. EVANS, and Ms. ROSEN 
APRIL 25, 2018 
Reported with an amendment, committed to the Committee of the Whole 
House on the State of the Union, and ordered to be printed 
[Strike out all after the enacting clause and insert the part printed in italic] 
[For text of introduced bill, see copy of bill as introduced on December 18, 2017] 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
A BILL 
To amend the Small Business Act to provide for the estab-
lishment of an enhanced cybersecurity assistance and 
protections for small businesses, and for other purposes. 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6652
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Small Business Ad-
vanced Cybersecurity Enhancements Act of 2017’’. 
SEC. 2. FINDINGS. 
Congress finds the following: 
(1) Small businesses represent more than 97 per-
cent of total businesses in the United States and make 
up an essential part of the supply chain to some of 
the largest companies, many of which are in critical 
infrastructure sectors, from financial and transpor-
tation organizations to power, water, and healthcare 
suppliers. 
(2) Many small businesses do not have dedicated 
information technology (‘‘IT’’) departments and must 
outsource IT functions or assign these duties to an 
employee as a secondary function. 
(3) The Internet Crime Complaint Center within 
the United States Department of Justice recorded 
298,728 cybersecurity-related complaints in its 2016 
report. 
(4) There has been steady increases of cybersecu-
rity-related complaints year over year since the year 
2000, totaling 3,762,348. 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
(5) Seventy-one percent of cyber attacks occurred 
in businesses with fewer than 100 employees. 
(6) Only 14 percent of small- and medium-sized 
businesses believe they have the ability to effectively 
mitigate cyber risks and vulnerabilities. 
(7) Small businesses risk theft and manipulation 
of sensitive data if they lack adequate cybersecurity 
measures. 
(8) The Better Business Bureau found that half 
of small businesses could remain profitable for only 
one month if they lost essential data. 
(9) Cyber crime is growing rapidly and the an-
nual costs to the global economy are estimated to 
reach over $2,000,000,000,000 by 2019. 
(10) Cybersecurity is a global challenge where 
the security threat, attacks, and techniques contin-
ually evolve and no company, individual, or Federal 
agency is immune from these threats. 
(11) Strong collaboration between the public and 
private sector is essential in the fight against cyber 
crime. 
(12) There is a reluctance among small busi-
nesses to voluntarily share information with govern-
ment entities, and the Federal Government should 
work proactively to incentivize and encourage vol-
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
untary information sharing to improve the Nation’s 
cybersecurity posture. 
SEC. 3. ENHANCED CYBERSECURITY ASSISTANCE AND PRO-
TECTIONS FOR SMALL BUSINESSES. 
Section 21(a) of the Small Business Act (15 U.S.C. 
648(a)) is amended by adding at the end the following new 
paragraph: 
‘‘(9) SMALL BUSINESS CYBERSECURITY ASSIST-
ANCE AND PROTECTIONS.— 
‘‘(A) ESTABLISHMENT OF SMALL BUSINESS 
CYBERSECURITY
ASSISTANCE
UNITS.—The Ad-
ministrator of the Small Business Administra-
tion, in coordination with the Secretary of Com-
merce, and in consultation with the Secretary of 
Homeland Security and the Attorney General, 
shall establish— 
‘‘(i) in the Administration, a central 
small business cybersecurity assistance unit; 
and 
‘‘(ii) within each small business devel-
opment center, a regional small business cy-
bersecurity assistance unit. 
‘‘(B) DUTIES
OF
THE
CENTRAL
SMALL 
BUSINESS CYBERSECURITY ASSISTANCE UNIT.— 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
‘‘(i) IN GENERAL.—The central small 
business cybersecurity assistance unit estab-
lished under subparagraph (A)(i) shall serve 
as the primary interface for small business 
concerns to receive and share cyber threat 
indicators and defensive measures with the 
Federal Government. 
‘‘(ii) USE OF CAPABILITY AND PROC-
ESSES.—The central small business cyberse-
curity assistance unit shall use the capa-
bility and process certified pursuant to sec-
tion 105(c)(2)(A) of the Cybersecurity Infor-
mation Sharing Act of 2015 (6 U.S.C. 
1504(c)(2)(A)) to receive cyber threat indi-
cators or defensive measures from small 
business concerns. 
‘‘(iii) APPLICATION OF CISA.—A small 
business concern that receives or shares 
cyber threat indicators and defensive meas-
ures with the Federal Government through 
the central small business cybersecurity as-
sistance unit established under subpara-
graph (A)(i), or with any appropriate enti-
ty pursuant to section 103(c) of the Cyberse-
curity Information Sharing Act of 2015 (6 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS