Small Business Cyber Training Act of 2022

Bill: 117-s-1687
Sponsor: full_name: Sen. Rubio, Marco [R-FL]
Introduced: 2021-05-18
Policy area: Commerce
Subjects: Business education

Computer security and identity theft

Licensing and registrations

Small business
Latest action: action_date: 2022-12-27
text: Became Public Law No: 117-319.

Summaries:
action_date: 2021-05-18
action_desc: Introduced in Senate
text: <p><strong>Small Business Cyber Training Act of 2021</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

action_date: 2022-05-25
action_desc: Reported to Senate
text: <p><strong>Small Business Cyber Training Act of 2022</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

action_date: 2022-09-28
action_desc: Passed Senate
text: <p><strong>Small Business Cyber Training Act of 2022</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

action_date: 2022-12-06
action_desc: Passed House
text: <p><strong>Small Business Cyber Training Act of 2022</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

action_date: 2022-12-14
action_desc: Senate agreed to House amendment
text: <p><strong>Small Business Cyber Training Act of 2022</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

action_date: 2022-12-27
action_desc: Public Law
text: <p><strong>Small Business Cyber Training Act of 2022</strong></p> <p>This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.</p>

tv_txt: II 117th CONGRESS 1st Session S. 1687 IN THE SENATE OF THE UNITED STATES May 18, 2021 Mr. Rubio (for himself, Mrs. Shaheen , Ms. Hassan , Mr. Risch , and Mr. Cassidy ) introduced the following bill; which was read twice and referred to the Committee on Small Business and Entrepreneurship A BILL To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.

1. Short title This Act may be cited as the Small Business Cyber Training Act of 2021 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that has received a grant from the Administration. (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate a substantially similar existing program, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator shall reimburse a lead small business development center for costs relating to the certification of an employee of the lead small business center in providing cyber planning assistance under the program established under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

tv_txt: II Calendar No. 393 117th CONGRESS 2d Session S. 1687 IN THE SENATE OF THE UNITED STATES May 18, 2021 Mr. Rubio (for himself, Mrs. Shaheen , Ms. Hassan , Mr. Risch , Mr. Cassidy , Mr. Hawley , Mr. Tillis , Mr. Warnock , and Ms. Rosen ) introduced the following bill; which was read twice and referred to the Committee on Small Business and Entrepreneurship May 25, 2022 Reported by Mr. Cardin , with an amendment Strike out all after the enacting clause and insert the part printed in italic A BILL To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.

1. Short title This Act may be cited as the Small Business Cyber Training Act of 2021 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that has received a grant from the Administration. (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate a substantially similar existing program, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator shall reimburse a lead small business development center for costs relating to the certification of an employee of the lead small business center in providing cyber planning assistance under the program established under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

1. Short title This Act may be cited as the Small Business Cyber Training Act of 2022 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that receives reimbursement from the Administrator under paragraph (5). (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator shall reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. (6) Funding under SBDC program Amounts made available to fund grants under this section for fiscal year 2022, and each fiscal year thereafter, shall be available for reimbursements under this subsection. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

May 25, 2022 Reported with an amendment

tv_txt: 117th CONGRESS 2d Session S. 1687 IN THE SENATE OF THE UNITED STATES AN ACT To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.

1. Short title This Act may be cited as the Small Business Cyber Training Act of 2022 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that receives reimbursement from the Administrator under paragraph (5). (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator shall reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. (6) Funding under SBDC program Amounts made available to fund grants under this section for fiscal year 2022, and each fiscal year thereafter, shall be available for reimbursements under this subsection. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

Passed the Senate September 28, 2022. Secretary

tv_txt: 117th CONGRESS 2d Session In the House of Representatives, U. S., December 6, 2022 AMENDMENT:

That the bill from the Senate (S. 1687) entitled An Act to amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes. , do pass with the following Strike out all after the enacting clause and insert: 1. Short title This Act may be cited as the Small Business Cyber Training Act of 2022 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that receives reimbursement from the Administrator under paragraph (5). (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator may reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

Lorraine Miller Clerk.

tv_txt: One Hundred Seventeenth Congress of the United States of America 2d Sess. Begun and held at the City of Washington on Monday, the third day of January, two thousand and twenty two S. 1687 IN THE SENATE OF THE UNITED STATES AN ACT To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.

1. Short title This Act may be cited as the Small Business Cyber Training Act of 2022 . 2. Duties of small business development center counselors (a) Cyber training Section 21 of the Small Business Act ( 15 U.S.C. 648 ) is amended by adding at the end the following: (o) Cyber strategy training for small business development centers (1) Definitions In this subsection— (A) the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and (B) the term lead small business development center means a small business development center that receives reimbursement from the Administrator under paragraph (5). (2) Certification program The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. (3) Number of certified employees The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— (A) 5; or (B) 10 percent of the total number of employees of the lead small business development center. (4) Cyber strategy In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 130 Stat. 2662). (5) Reimbursement for certification (A) In general Subject to the availability of appropriations, the Administrator may reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2). (B) Limitation The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year. . (b) Implementation Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).

Speaker of the House of Representatives Vice President of the United States and President of the Senate