nology applicable to improving the cyberse-
curity posture of small business concerns; 
‘‘(v) seek input from the Office of Ad-
vocacy of the Administration to ensure that 
any policies or procedures adopted by any 
department, agency, or instrumentality of 
the Federal Government do not unduly add 
regulatory burdens to small business con-
cerns in a manner that will hamper the im-
provement of the cybersecurity posture of 
such small business concerns; and 
‘‘(vi) leverage resources and relation-
ships with representatives and entities in-
volved in the national cybersecurity and 
communications integration center to pub-
licize the capacity of the Federal Govern-
ment to assist small business concerns in 
improving cybersecurity practices. 
‘‘(E) ENHANCED CYBERSECURITY PROTEC-
TIONS FOR SMALL BUSINESSES.— 
‘‘(i) IN
GENERAL.—Notwithstanding 
any other provision of law, no cause of ac-
tion shall lie or be maintained in any court 
against any small business concern, and 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
such action shall be promptly dismissed, if 
such action related to or arises out of— 
‘‘(I) 
any 
activity 
authorized 
under this paragraph or the Cybersecu-
rity Information Sharing Act of 2015 
(6 U.S.C. 1501 et seq.); or 
‘‘(II) any action or inaction in 
response to any cyber threat indicator, 
defensive measure, or other information 
shared or received pursuant to this 
paragraph or the Cybersecurity Infor-
mation Sharing Act of 2015 (6 U.S.C. 
1501 et seq.). 
‘‘(ii) 
APPLICATION.—The 
exception 
provided in section 105(d)(5)(D)(ii)(I) of 
the Cybersecurity Information Sharing Act 
of 2015 (6 U.S.C. 1504(d)(5)(D)(ii)(I)) 
shall not apply to any cyber threat indi-
cator or defensive measure shared or re-
ceived by small business concerns pursuant 
to this paragraph or the Cybersecurity In-
formation Sharing Act of 2015 (6 U.S.C. 
1501 et seq.). 
‘‘(iii) RULE OF CONSTRUCTION.—Noth-
ing in this subparagraph shall be construed 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
to affect the applicability or merits of any 
defense, motion, or argument in any cause 
of action in a court brought against an en-
tity that is not a small business concern. 
‘‘(F) DEFINITIONS.—In this paragraph: 
‘‘(i) CISA DEFINITIONS.—The terms 
‘cyber threat indicator’ and ‘defensive meas-
ure’ have the meanings given such terms in 
section 102 of the Cybersecurity Informa-
tion Sharing Act of 2015 (6 U.S.C. 1501). 
‘‘(ii) NATIONAL
CYBERSECURITY
AND 
COMMUNICATIONS INTEGRATION CENTER.— 
The term ‘national cybersecurity and com-
munications integration center’ means the 
national cybersecurity and communications 
integration center established under section 
227 of the Homeland Security Act of 2002 
(6 U.S.C. 148).’’. 
SEC. 4. PROHIBITION ON NEW APPROPRIATIONS. 
(a) IN GENERAL.—No additional funds are authorized 
to be appropriated to carry out this Act and the amend-
ments made by this Act. 
(b) EXISTING FUNDING.—This Act and the amend-
ments made by this Act shall be carried out using amounts 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
made available under section 21(a)(4)(C)(viii) of the Small 
Business Act (15 U.S.C. 648(a)(4)(viii)). 
(c) TECHNICAL AND CONFORMING AMENDMENT.—Sec-
tion 21(a)(4)(C)(viii) of the Small Business Act (15 
U.S.C.648(a)(4)(C)(viii)) is amended to read as follows: 
‘‘(viii) LIMITATION.— 
‘‘(I) 
CYBERSECURITY
ASSIST-
ANCE.—From the funds appropriated 
pursuant to clause (vii), the Adminis-
tration shall reserve not less than 
$1,000,000 in each fiscal year to de-
velop cybersecurity assistance units at 
small business development centers 
under paragraph (9). 
‘‘(II) PORTABLE ASSISTANCE.— 
‘‘(aa) 
IN
GENERAL.—Any 
funds appropriated pursuant to 
clause (vii) that are remaining 
after reserving amounts under 
subclause (I) may be used for 
portable assistance for startup 
and sustainability non-matching 
grant programs to be conducted 
by eligible small business develop-
ment centers in communities that 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
are economically challenged as a 
result of a business or government 
facility down sizing or closing, 
which has resulted in the loss of 
jobs or small business instability. 
‘‘(bb) GRANT
AMOUNT
AND 
USE.—A 
non-matching 
grant 
under this subclause shall not ex-
ceed $100,000, and shall be used 
for small business development 
center personnel expenses and re-
lated small business programs and 
services.’’. 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6203
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS
Union Calendar No. 502 
115TH CONGRESS 
2D SESSION 
H. R. 4668 
[Report No. 115–654] 
A BILL 
To amend the Small Business Act to provide for 
the establishment of an enhanced cybersecurity 
assistance and protections for small businesses, 
and for other purposes. 
APRIL 25, 2018 
Reported with an amendment, committed to the Com-
mittee of the Whole House on the State of the Union, 
and ordered to be printed 
VerDate Sep 11 2014 
20:59 Apr 25, 2018
Jkt 079200
PO 00000
Frm 00014
Fmt 6651
Sfmt 6651
E:\BILLS\H4668.RH
H4668
pbinns on DSK79D2C42PROD with BILLS