NIST Small Business Cybersecurity Act

Bill: 115-hr-2105
Sponsor: Rep. Webster, Daniel [R-FL-11]
Introduced: 2017-04-20 in the House
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft
Government information and archives
Infrastructure development
Small business

Summary:
action_date: 2017-04-20
text: 

NIST Small Business Cybersecurity Act of 2017

 
This bill amends the National Institute of Standards and Technology Act to require the National Institute of Standards and Technology (NIST) to consider small businesses when it facilitates and supports the development of voluntary, consensus-based, industry-led guidelines and procedures to cost-effectively reduce cyber risks to critical infrastructure. 
 
NIST must consult with other federal agencies to disseminate, and publish on its website, standard and method resources that small business may use voluntarily to help identify, assess, manage, and reduce their cybersecurity risks. The resources must be: (1) technology-neutral, (2) based on international standards to the extent possible, (3) able to vary with the nature and size of the implementing small business and the sensitivity of the data collected or stored on the information systems, (4) capable of promoting awareness of third-party stakeholder relationships to assist small businesses in mitigating common cybersecurity risks, and (5) consistent with the national cybersecurity awareness and education program under the Cybersecurity Enhancement Act of 2014. 
 
Other federal agencies may elect to publish the resources on their own websites. 

action_date: 2017-10-11
text: 

NIST Small Business Cybersecurity Act 

 
(Sec. 2) This bill amends the National Institute of Standards and Technology Act to require the National Institute of Standards and Technology (NIST) to consider small businesses when it facilitates and supports the development of voluntary, consensus-based, industry-led guidelines and procedures to cost-effectively reduce cyber risks to critical infrastructure. 
 
NIST must consult with other federal agencies to disseminate, and publish on its website, standard and method resources that small business may use voluntarily to help identify, assess, manage, and reduce their cybersecurity risks. The resources must: (1) include case studies of practical application, (2) be based on international standards to the extent possible, (3) be able to vary with the nature and size of the implementing small business and the sensitivity of the data collected or stored on the information systems, (4) be capable of promoting awareness of third-party stakeholder relationships to assist small businesses in mitigating common cybersecurity risks, and (5) be consistent with the national cybersecurity awareness and education program under the Cybersecurity Enhancement Act of 2014. 
 
Other federal agencies may elect to publish the resources on their own websites. 


Legislative actions:
action_date: 2017-10-16
text: Received in the Senate and Read twice and referred to the Committee on Commerce, Science, and Transportation.
action_date: 2017-10-11
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2017-10-11
text: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H7936-7937)
action_date: 2017-10-11
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.(text: CR H7936-7937)
action_date: 2017-10-11
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 2105.
action_date: 2017-10-11
text: Considered under suspension of the rules. (consideration: CR H7936-7939)
action_date: 2017-10-11
text: Mr. Webster (FL) moved to suspend the rules and pass the bill, as amended.
action_date: 2017-05-02
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2017-05-02
text: Committee Consideration and Mark-up Session Held.
action_date: 2017-04-20
text: Referred to the House Committee on Science, Space, and Technology.
action_date: 2017-04-20
text: Introduced in House
action_date: 2017-04-20
text: Introduced in House