‘‘(ii) USE OF CAPABILITY AND PROC-
ESSES.—The central small business cyber-
security assistance unit shall use the capa-
bility and process certified pursuant to sec-
tion 105(c)(2)(A) of the Cybersecurity In-
formation Sharing Act of 2015 (6 U.S.C. 
1504(c)(2)(A)) to receive cyber threat indi-
cators or defensive measures from small 
business concerns. 
‘‘(iii) APPLICATION OF CISA.—A small 
business concern that receives or shares 
cyber threat indicators and defensive meas-
ures with the Federal Government through 
the central small business cybersecurity as-
sistance unit established under subpara-
graph (A)(i), or with any appropriate enti-
ty pursuant to section 103(c) of the Cyber-
security Information Sharing Act of 2015 
(6 U.S.C. 1503(c)), shall receive the pro-
tections and exemptions provided in such 
Act and this paragraph. 
‘‘(C) RELATION TO NCCIC.— 
‘‘(i) CENTRAL
SMALL
BUSINESS
CY-
BERSECURITY
ASSISTANCE
UNIT.—The 
central small business cybersecurity assist-
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
ance unit established under subparagraph 
(A)(i) shall be collocated with the national 
cybersecurity and communications integra-
tion center. 
‘‘(ii) ACCESS TO INFORMATION.—The 
national cybersecurity and communications 
integration center shall have access to all 
cyber threat indicators or defensive meas-
ures shared with the central small cyberse-
curity assistance unit established under 
subparagraph (A)(i) through the use of the 
capability and process described in sub-
paragraph (B)(ii). 
‘‘(D) CYBERSECURITY
ASSISTANCE
FOR 
SMALL BUSINESSES.—The central small busi-
ness cybersecurity assistance unit established 
under subparagraph (A)(i) shall— 
‘‘(i) work with each regional small 
business cybersecurity assistance unit es-
tablished under subparagraph (A)(ii) to 
provide cybersecurity assistance to small 
business concerns; 
‘‘(ii) leverage resources from the Ad-
ministration, the Department of Com-
merce, the Department of Homeland Secu-
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
rity, the Department of Justice, the De-
partment of the Treasury, the Department 
of State, and any other Federal depart-
ment or agency the Administrator deter-
mines appropriate, in order to help im-
prove the cybersecurity posture of small 
business concerns; 
‘‘(iii) coordinate with the Department 
of Homeland Security to identify and dis-
seminate information to small business 
concerns in a form that is accessible and 
actionable by small business concerns; 
‘‘(iv) coordinate with the National In-
stitute of Standards and Technology to 
identify and disseminate information to 
small business concerns on the most cost- 
effective methods for implementing ele-
ments of the cybersecurity framework of 
the National Institute of Standards and 
Technology applicable to improving the cy-
bersecurity posture of small business con-
cerns; 
‘‘(v) seek input from the Office of Ad-
vocacy of the Administration to ensure 
that any policies or procedures adopted by 
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
any department, agency, or instrumentality 
of the Federal Government do not unduly 
add regulatory burdens to small business 
concerns in a manner that will hamper the 
improvement of the cybersecurity posture 
of such small business concerns; and 
‘‘(vi) leverage resources and relation-
ships with representatives and entities in-
volved in the national cybersecurity and 
communications integration center to pub-
licize the capacity of the Federal Govern-
ment to assist small business concerns in 
improving cybersecurity practices. 
‘‘(E) ENHANCED CYBERSECURITY PROTEC-
TIONS FOR SMALL BUSINESSES.— 
‘‘(i) IN
GENERAL.—Notwithstanding 
any other provision of law, no cause of ac-
tion shall lie or be maintained in any court 
against any small business concern, and 
such action shall be promptly dismissed, if 
such action related to or arises out of— 
‘‘(I) 
any 
activity 
authorized 
under this paragraph or the Cyberse-
curity Information Sharing Act of 
2015 (6 U.S.C. 1501 et seq.); or 
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
‘‘(II) any action or inaction in re-
sponse to any cyber threat indicator, 
defensive measure, or other informa-
tion shared or received pursuant to 
this paragraph or the Cybersecurity 
Information Sharing Act of 2015 (6 
U.S.C. 1501 et seq.). 
‘‘(ii) APPLICATION.—The exception 
provided in section 105(d)(5)(D)(ii)(I) of 
the Cybersecurity Information Sharing Act 
of 2015 (6 U.S.C. 1504(d)(5)(D)(ii)(I)) 
shall not apply to any cyber threat indi-
cator or defensive measure shared or re-
ceived by small business concerns pursuant 
to this paragraph or the Cybersecurity In-
formation Sharing Act of 2015 (6 U.S.C. 
1501 et seq.). 
‘‘(F) DEFINITIONS.—In this paragraph: 
‘‘(i) CISA DEFINITIONS.—The terms 
‘cyber threat indicator’ and ‘defensive 
measure’ have the meanings given such 
terms in section 102 of the Cybersecurity 
Information Sharing Act of 2015 (6 
U.S.C. 1501). 
VerDate Sep 11 2014 
22:57 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS
‘‘(ii) NATIONAL CYBERSECURITY AND 
COMMUNICATIONS
INTEGRATION
CEN-
TER.—The term ‘national cybersecurity 
and communications integration center’ 
means the national cybersecurity and com-
munications integration center established 
under section 227 of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 148).’’. 
SEC. 4. PROHIBITION ON NEW APPROPRIATIONS. 
No additional funds are authorized to be appro-
priated to carry out this Act and the amendments made 
by this Act, and this Act and such amendments shall be 
carried out using amounts otherwise made available for 
such purposes. 
Æ 
VerDate Sep 11 2014 
03:33 Dec 19, 2017
Jkt 079200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6301
E:\BILLS\H4668.IH
H4668
sradovich on DSK3GMQ082PROD with BILLS