Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Small Business Ad-
vanced Cybersecurity Enhancements Act of 2021’’. 
SEC. 2. ENHANCED CYBERSECURITY ASSISTANCE AND PRO-
TECTIONS FOR SMALL BUSINESSES. 
Section 21(a) of the Small Business Act (15 U.S.C. 
648(a)) is amended by adding at the end the following 
new paragraph: 
‘‘(9) SMALL BUSINESS CYBERSECURITY ASSIST-
ANCE AND PROTECTIONS.— 
‘‘(A) ESTABLISHMENT
OF
SMALL
BUSI-
NESS
CYBERSECURITY
ASSISTANCE
UNITS.— 
The Administrator of the Small Business Ad-
ministration, in coordination with the Secretary 
of Commerce, and in consultation with the Sec-
retary of Homeland Security and the Attorney 
General, shall establish— 
‘‘(i) in the Administration, a central 
small business cybersecurity assistance 
unit; and 
‘‘(ii) within each small business devel-
opment center, a regional small business 
cybersecurity assistance unit. 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
‘‘(B) DUTIES
OF
THE
CENTRAL
SMALL 
BUSINESS CYBERSECURITY ASSISTANCE UNIT.— 
‘‘(i) IN GENERAL.—The central small 
business cybersecurity assistance unit es-
tablished under subparagraph (A)(i) shall 
serve as the primary interface for small 
business concerns to receive and share 
cyber threat indicators and defensive meas-
ures with the Federal Government. 
‘‘(ii) USE OF CAPABILITY AND PROC-
ESSES.—The central small business cyber-
security assistance unit shall use the capa-
bility and process certified pursuant to sec-
tion 105(c)(2)(A) of the Cybersecurity In-
formation Sharing Act of 2015 (6 U.S.C. 
1504(c)(2)(A)) to receive cyber threat indi-
cators or defensive measures from small 
business concerns. 
‘‘(iii) APPLICATION OF CISA.—A small 
business concern that receives or shares 
cyber threat indicators and defensive meas-
ures with the Federal Government through 
the central small business cybersecurity as-
sistance unit established under subpara-
graph (A)(i), or with any appropriate enti-
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
ty pursuant to section 103(c) of the Cyber-
security Information Sharing Act of 2015 
(6 U.S.C. 1503(c)), shall receive the pro-
tections and exemptions provided in such 
Act and this paragraph. 
‘‘(C) RELATION TO NCCIC.— 
‘‘(i) CENTRAL
SMALL
BUSINESS
CY-
BERSECURITY
ASSISTANCE
UNIT.—The 
central small business cybersecurity assist-
ance unit established under subparagraph 
(A)(i) shall be collocated with the national 
cybersecurity and communications integra-
tion center. 
‘‘(ii) ACCESS TO INFORMATION.—The 
national cybersecurity and communications 
integration center shall have access to all 
cyber threat indicators or defensive meas-
ures shared with the central small cyberse-
curity assistance unit established under 
subparagraph (A)(i) through the use of the 
capability and process described in sub-
paragraph (B)(ii). 
‘‘(D) CYBERSECURITY
ASSISTANCE
FOR 
SMALL BUSINESSES.—The central small busi-
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
ness cybersecurity assistance unit established 
under subparagraph (A)(i) shall— 
‘‘(i) work with each regional small 
business cybersecurity assistance unit es-
tablished under subparagraph (A)(ii) to 
provide cybersecurity assistance to small 
business concerns; 
‘‘(ii) leverage resources from the Ad-
ministration, the Department of Com-
merce, the Department of Homeland Secu-
rity, the Department of Justice, the De-
partment of the Treasury, the Department 
of State, and any other Federal depart-
ment or agency the Administrator deter-
mines appropriate, in order to help im-
prove the cybersecurity posture of small 
business concerns; 
‘‘(iii) coordinate with the Department 
of Homeland Security to identify and dis-
seminate information to small business 
concerns in a form that is accessible and 
actionable by small business concerns; 
‘‘(iv) coordinate with the National In-
stitute of Standards and Technology to 
identify and disseminate information to 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
small business concerns on the most cost- 
effective methods for implementing ele-
ments of the cybersecurity framework of 
the National Institute of Standards and 
Technology applicable to improving the cy-
bersecurity posture of small business con-
cerns; 
‘‘(v) seek input from the Office of Ad-
vocacy of the Administration to ensure 
that any policies or procedures adopted by 
any department, agency, or instrumentality 
of the Federal Government do not unduly 
add regulatory burdens to small business 
concerns in a manner that will hamper the 
improvement of the cybersecurity posture 
of such small business concerns; and 
‘‘(vi) leverage resources and relation-
ships with representatives and entities in-
volved in the national cybersecurity and 
communications integration center to pub-
licize the capacity of the Federal Govern-
ment to assist small business concerns in 
improving cybersecurity practices. 
‘‘(E) ENHANCED CYBERSECURITY PROTEC-
TIONS FOR SMALL BUSINESSES.— 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
‘‘(i) IN
GENERAL.—Notwithstanding 
any other provision of law, no cause of ac-
tion shall lie or be maintained in any court 
against any small business concern, and 
such action shall be promptly dismissed, if 
such action is related to or arises out of— 
‘‘(I) 
any 
activity 
authorized 
under this paragraph or the Cyberse-
curity Information Sharing Act of 
2015 (6 U.S.C. 1501 et seq.); or 
‘‘(II) any action or inaction in re-
sponse to any cyber threat indicator, 
defensive measure, or other informa-
tion shared or received pursuant to 
this paragraph or the Cybersecurity 
Information Sharing Act of 2015 (6 
U.S.C. 1501 et seq.). 
‘‘(ii) APPLICATION.—The exception 
provided in section 105(d)(5)(D)(ii)(I) of 
the Cybersecurity Information Sharing Act 
of 2015 (6 U.S.C. 1504(d)(5)(D)(ii)(I)) 
shall not apply to any cyber threat indi-
cator or defensive measure shared or re-
ceived by small business concerns pursuant 
to this paragraph or the Cybersecurity In-
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
formation Sharing Act of 2015 (6 U.S.C. 
1501 et seq.). 
‘‘(iii) RULE
OF
CONSTRUCTION.— 
Nothing in this subparagraph shall be con-
strued to affect the applicability or merits 
of any defense, motion, or argument in any 
cause of action in a court brought against 
an entity that is not a small business con-
cern. 
‘‘(F) DEFINITIONS.—In this paragraph: 
‘‘(i) CISA DEFINITIONS.—The terms 
‘cyber threat indicator’ and ‘defensive 
measure’ have the meanings given such 
terms, respectively, in section 102 of the 
Cybersecurity Information Sharing Act of 
2015 (6 U.S.C. 1501). 
‘‘(ii) NATIONAL CYBERSECURITY AND 
COMMUNICATIONS
INTEGRATION
CEN-
TER.—The term ‘national cybersecurity 
and communications integration center’ 
means the national cybersecurity and com-
munications integration center established 
under section 227 of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 148).’’. 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
SEC. 3. PROHIBITION ON NEW APPROPRIATIONS. 
(a) IN GENERAL.—No additional funds are author-
ized to be appropriated to carry out this Act and the 
amendments made by this Act. 
(b) EXISTING FUNDING.—This Act and the amend-
ments made by this Act shall be carried out using amounts 
made available under section 21(a)(4)(C)(viii) of the Small 
Business Act (15 U.S.C. 648(a)(4)(viii)). 
(c) TECHNICAL AND CONFORMING AMENDMENT.— 
Section 21(a)(4)(C)(viii) of the Small Business Act (15 
U.S.C.648(a)(4)(C)(viii)) is amended to read as follows: 
‘‘(viii) LIMITATION.— 
‘‘(I) 
CYBERSECURITY
ASSIST-
ANCE.—From the funds appropriated 
pursuant to clause (vii), the Adminis-
tration shall reserve not less than 
$1,000,000 in each fiscal year to de-
velop cybersecurity assistance units at 
small business development centers 
under paragraph (9). 
‘‘(II) PORTABLE ASSISTANCE.— 
‘‘(aa) IN
GENERAL.—Any 
funds appropriated pursuant to 
clause (vii) that are remaining 
after reserving amounts under 
subclause (I) may be used for 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
portable assistance for startup 
and sustainability non-matching 
grant programs to be conducted 
by eligible small business develop-
ment centers in communities that 
are economically challenged as a 
result of a business or govern-
ment facility down sizing or clos-
ing, which has resulted in the 
loss of jobs or small business in-
stability. 
‘‘(bb) GRANT AMOUNT AND 
USE.—A 
non-matching 
grant 
under this subclause shall not ex-
ceed $100,000, and shall be used 
for small business development 
center personnel expenses and re-
lated small business programs 
and services.’’. 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS
Union Calendar No. 102 
117TH CONGRESS 
1ST SESSION 
H. R. 4513 
[Report No. 117–142] 
A BILL 
To amend the Small Business Act to provide for 
the establishment of an enhanced cybersecurity 
assistance and protections for small businesses, 
and for other purposes. 
OCTOBER 12, 2021 
Committed to the Committee of the Whole House on the 
State of the Union and ordered to be printed 
VerDate Sep 11 2014 
00:51 Oct 13, 2021
Jkt 029200
PO 00000
Frm 00012
Fmt 6651
Sfmt 6651
E:\BILLS\H4513.RH
H4513
pbinns on DSKJLVW7X2PROD with BILLS