HeinOnline is a subscription-based resource containing thousands of academic and legal journals from inception; complete coverage of government documents such as U.S. Statutes at Large, U.S. Code, Federal Register, Code of Federal Regulations, U.S. Reports, and much more. Documents are image-based, fully searchable PDFs with the authority of print combined with the accessibility of a user-friendly and powerful database. For more information, request a quote or trial for your organization below.
![handle is hein.congrecreports/crptxaejp0001 and id is 1 raw text is: AUTHENTICATED
U.S. GOVERNMENT
INFORMATION .
Calendar No. 281
117TH CONGRESS REPORT
2d Session SENATE 117-102
SBA CYBER AWARENESS ACT
MAY 3, 2022.-Ordered to be printed
Mr. CARDIN, from the Committee on Small Business and
Entrepreneurship, submitted the following
R E P O R T
[To accompany H.R. 3462]
[Including cost estimate of the Congressional Budget Office]
The Committee on Small Business and Entrepreneurship, to
which was referred the bill (H.R. 3462) to require an annual report
on the cybersecurity of the Small Business Administration, and for
other purposes, reports favorably thereon, without amendment and
recommends that the bill do pass.
I. INTRODUCTION
A bill to require an annual report on the cybersecurity of the
SBA and issue additional reports as necessary was introduced by
Representatives Jason Crow and Young Lee on May 21, 2021. A
Senate companion, S. 1691, was introduced by Senators Marco
Rubio, Jim Risch, and Bill Cassidy on May 18, 2021.
This bill requires the Administrator to issue a report within 180
days of enactment, and annually thereafter, to the appropriate
Congressional committees (defined in the bill as the Committee on
Small Business and Entrepreneurship of the Senate and the Com-
mittee on Small Business of the House of Representatives) that in-
cludes: (1) an assessment of the information technology (as defined
in section 11101 of title 40, United States Code) and cybersecurity
infrastructure of the Administration; (2) a strategy to increase the
cybersecurity infrastructure of the Administration; (3) a detailed
account of any information technology equipment or interconnected
system or subsystem of equipment of the Administration that was
manufactured by an entity that has its principal place of business
located in the People's Republic of China; and (4) an account of any
cybersecurity risk or incident that occurred at the Administration
29-010](ViewImageLocal?handle=hein.congrecreports/crptxaejp0001&div=1&collection=&method=preview&ext=.png&size=3)