I 
115TH CONGRESS 
1ST SESSION H. R. 4668 
To amend the Small Business Act to provide for the establishment of an 
enhanced cybersecurity assistance and protections for small businesses, 
and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
DECEMBER 18, 2017 
Mr. CHABOT (for himself and Ms. VELA´ZQUEZ) introduced the following bill; 
which was referred to the Committee on Small Business 
A BILL 
To amend the Small Business Act to provide for the estab-
lishment of an enhanced cybersecurity assistance and 
protections for small businesses, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Small Business Ad-
vanced Cybersecurity Enhancements Act of 2017’’. 
SEC. 2. FINDINGS. 
Congress finds the following: 
(1) Small businesses represent more than 97 
percent of total businesses in the United States and 
VerDate Sep 11 2014 
20:33 Dec 20, 2017
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
make up an essential part of the supply chain to 
some of the largest companies, many of which are in 
critical infrastructure sectors, from financial and 
transportation organizations to power, water, and 
healthcare suppliers. 
(2) Many small businesses do not have dedi-
cated information technology (‘‘IT’’) departments 
and must outsource IT functions or assign these du-
ties to an employee as a secondary function. 
(3) The Internet Crime Complaint Center with-
in the United States Department of Justice recorded 
298,728 cybersecurity-related complaints in its 2016 
report. 
(4) There has been steady increases of cyberse-
curity-related complaints year over year since the 
year 2000, totaling 3,762,348. 
(5) Seventy-one percent of cyber attacks oc-
curred in businesses with fewer than 100 employees. 
(6) Only 14 percent of small- and medium-sized 
businesses believe they have the ability to effectively 
mitigate cyber risks and vulnerabilities. 
(7) Small businesses risk theft and manipula-
tion of sensitive data if they lack adequate cyberse-
curity measures. 
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
(8) The Better Business Bureau found that 
half of small businesses could remain profitable for 
only one month if they lost essential data. 
(9) Cyber crime is growing rapidly and the an-
nual costs to the global economy are estimated to 
reach over $2,000,000,000,000 by 2019. 
(10) Cybersecurity is a global challenge where 
the security threat, attacks, and techniques contin-
ually evolve and no company, individual, or Federal 
agency is immune from these threats. 
(11) Strong collaboration between the public 
and private sector is essential in the fight against 
cyber crime. 
(12) There is a reluctance among small busi-
nesses to voluntarily share information with govern-
ment entities, and the Federal Government should 
work proactively to incentivize and encourage vol-
untary information sharing to improve the Nation’s 
cybersecurity posture. 
SEC. 3. ENHANCED CYBERSECURITY ASSISTANCE AND PRO-
TECTIONS FOR SMALL BUSINESSES. 
Section 21(a) of the Small Business Act (15 U.S.C. 
648(a)) is amended by adding at the end the following 
new paragraph: 
VerDate Sep 11 2014 
22:57 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
‘‘(9) SMALL BUSINESS CYBERSECURITY ASSIST-
ANCE AND PROTECTIONS.— 
‘‘(A) ESTABLISHMENT
OF
SMALL
BUSI-
NESS
CYBERSECURITY
ASSISTANCE
UNITS.— 
The Administrator of the Small Business Ad-
ministration, in coordination with the Secretary 
of Commerce, and in consultation with the Sec-
retary of Homeland Security and the Attorney 
General, shall establish— 
‘‘(i) in the Administration, a central 
small business cybersecurity assistance 
unit; and 
‘‘(ii) within each small business devel-
opment center, a regional small business 
cybersecurity assistance unit. 
‘‘(B) DUTIES
OF
THE
CENTRAL
SMALL 
BUSINESS CYBERSECURITY ASSISTANCE UNIT.— 
‘‘(i) IN GENERAL.—The central small 
business cybersecurity assistance unit es-
tablished under subparagraph (A)(i) shall 
serve as the primary interface for small 
business concerns to receive and share 
cyber threat indicators and defensive meas-
ures with the Federal Government. 
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS