II 
114TH CONGRESS 
2D SESSION 
H. R. 5064 
IN THE SENATE OF THE UNITED STATES 
SEPTEMBER 22, 2016 
Received 
AN ACT 
To amend the Small Business Act to allow small business 
development centers to assist and advise small business 
concerns on relevant cyber security matters, and for 
other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
(1) by redesignating subsection (l) as subsection 
(m); and 
(2) by inserting after subsection (k) the fol-
lowing: 
‘‘(l) CYBERSECURITY OUTREACH.— 
‘‘(1) IN GENERAL.—The Secretary may lever-
age small business development centers to provide 
assistance to small business concerns by dissemi-
nating information on cyber threat indicators, defen-
sive measures, cybersecurity risks, incidents, anal-
yses, and warnings to help small business concerns 
in developing or enhancing cybersecurity infrastruc-
ture, cyber threat awareness, and cyber training pro-
grams for employees. 
‘‘(2) DEFINITIONS.—For purposes of this sub-
section, the terms ‘small business concern’ and 
‘small business development center’ have the mean-
ing given such terms, respectively, under section 3 of 
the Small Business Act.’’. 
SEC. 5. GAO STUDY ON SMALL BUSINESS CYBER SUPPORT 
SERVICES AND SMALL BUSINESS DEVELOP-
MENT CENTER CYBER STRATEGY. 
(a) REVIEW
OF CURRENT CYBER SECURITY RE-
SOURCES.— 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
(1) IN GENERAL.—The Comptroller General of 
the United States shall conduct a review of current 
cyber security resources at the Federal level aimed 
at assisting small business concerns with developing 
or enhancing cyber security infrastructure, cyber 
threat awareness, or cyber training programs for 
employees. 
(2) CONTENT.—The review required under 
paragraph (1) shall include the following: 
(A) An accounting and description of all 
Federal Government programs, projects, and 
activities that currently provide assistance to 
small business concerns in developing or en-
hancing cyber security infrastructure, cyber 
threat awareness, or cyber training programs 
for employees. 
(B) An assessment of how widely utilized 
the resources described under subparagraph (A) 
are by small business concerns and a review of 
whether or not such resources are duplicative of 
other programs and structured in a manner 
that makes them accessible to and supportive of 
small business concerns. 
(3) REPORT.—The Comptroller General shall 
issue a report to the Congress, the Administrator of 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
the Small Business Administration, the Secretary of 
Homeland Security, and any association recognized 
under section 21(a)(3)(A) of the Small Business Act 
containing all findings and determinations made in 
carrying out the review required under paragraph 
(1). 
(b) SMALL
BUSINESS
DEVELOPMENT
CENTER 
CYBER STRATEGY.— 
(1) IN GENERAL.—Not later than 90 days after 
the issuance of the report under subsection (a)(3), 
the Administrator of the Small Business Administra-
tion and the Secretary of Homeland Security shall 
work collaboratively to develop a Small Business De-
velopment Center Cyber Strategy. 
(2) CONSULTATION.—In developing the strat-
egy under this subsection, the Administrator of the 
Small Business Administration and the Secretary of 
Homeland Security shall consult with entities rep-
resenting the concerns of small business development 
centers, including any association recognized under 
section 21(a)(3)(A) of the Small Business Act. 
(3) CONTENT.—The strategy required under 
paragraph (1) shall include, at minimum, the fol-
lowing: 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
(A) Plans for leveraging small business de-
velopment centers (SBDCs) to access existing 
cyber programs of the Department of Home-
land Security and other appropriate Federal 
agencies to enhance services and streamline 
cyber assistance to small business concerns. 
(B) To the extent practicable, methods for 
the provision of counsel and assistance to im-
prove a small business concern’s cyber security 
infrastructure, cyber threat awareness, and 
cyber training programs for employees, includ-
ing— 
(I) working to ensure individuals are 
aware of best practices in the areas of 
cyber security, cyber threat awareness, and 
cyber training; 
(ii) working with individuals to de-
velop cost-effective plans for implementing 
best practices in these areas; 
(iii) entering into agreements, where 
practical, with Information Sharing and 
Analysis Centers or similar cyber informa-
tion sharing entities to gain an awareness 
of actionable threat information that may 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
be beneficial to small business concerns; 
and 
(iv) providing referrals to area special-
ists when necessary. 
(c) An analysis of— 
(I) how Federal Government pro-
grams, projects, and activities identified by 
the Comptroller General in the report 
issued under subsection (a)(1) can be le-
veraged by SBDCs to improve access to 
high-quality cyber support for small busi-
ness concerns; 
(ii) additional resources SBDCs may 
need to effectively carry out their role; and 
(iii) how SBDCs can leverage existing 
partnerships and develop new ones with 
Federal, State, and local government enti-
ties as well as private entities to improve 
the quality of cyber support services to 
small business concerns. 
(4) DELIVERY OF STRATEGY.—Not later than 
180 days after the issuance of the report under sub-
section (a)(3), the Small Business Development Cen-
ter Cyber Strategy shall be issued to the Committees 
on Homeland Security and Small Business of the 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS
HR 5064 RDS 
House of Representatives and the Committees on 
Homeland Security and Governmental Affairs and 
Small Business and Entrepreneurship of the Senate. 
(c) DEFINITION.—The term ‘‘small business develop-
ment center’’ has the meaning given such term in section 
3 of the Small Business Act (15 U.S.C. 632). 
SEC. 6. PROHIBITION ON ADDITIONAL FUNDS. 
No additional funds are authorized to be appro-
priated to carry out the requirements of this Act or the 
amendments made by this Act. Such requirements shall 
be carried out using amounts otherwise authorized. 
Passed the House of Representatives September 21, 
2016. 
Attest: 
KAREN L. HAAS, 
Clerk. 
VerDate Sep 11 2014 
22:41 Sep 22, 2016
Jkt 059200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H5064.RDS
H5064
asabaliauskas on DSK3SPTVN1PROD with BILLS