[Congressional Bills 117th Congress]
[From the U.S. Government Publishing Office]
[S. 1687 Enrolled Bill (ENR)]

        S.1687

                    One Hundred Seventeenth Congress

                                 of the

                        United States of America


                          AT THE SECOND SESSION

           Begun and held at the City of Washington on Monday,
          the third day of January, two thousand and twenty two


                                 An Act


 
     To amend section 21 of the Small Business Act to require cyber 
certification for small business development center counselors, and for 
                             other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
    This Act may be cited as the ``Small Business Cyber Training Act of 
2022''.
SEC. 2. DUTIES OF SMALL BUSINESS DEVELOPMENT CENTER COUNSELORS.
    (a) Cyber Training.--Section 21 of the Small Business Act (15 
U.S.C. 648) is amended by adding at the end the following:
    ``(o) Cyber Strategy Training for Small Business Development 
Centers.--
        ``(1) Definitions.--In this subsection--
            ``(A) the term `cyber strategy' means resources and tactics 
        to assist in planning for cybersecurity and defending against 
        cyber risks and attacks; and
            ``(B) the term `lead small business development center' 
        means a small business development center that receives 
        reimbursement from the Administrator under paragraph (5).
        ``(2) Certification program.--The Administrator shall establish 
    a cyber counseling certification program, or designate 1 or more 
    substantially similar governmental or private cybersecurity 
    certification programs, to certify the employees of lead small 
    business development centers in providing cyber planning assistance 
    to small business concerns.
        ``(3) Number of certified employees.--The Administrator shall 
    ensure that the number of employees of each lead small business 
    development center who are certified in providing cyber planning 
    assistance is not less than the lesser of--
            ``(A) 5; or
            ``(B) 10 percent of the total number of employees of the 
        lead small business development center.
        ``(4) Cyber strategy.--In carrying out paragraph (2), the 
    Administrator, to the extent practicable, shall consider any cyber 
    strategy methods included in the Small Business Development Center 
    Cyber Strategy developed under section 1841(a)(3)(B) of the 
    National Defense Authorization Act for Fiscal Year 2017 (Public Law 
    114-328; 130 Stat. 2662).
        ``(5) Reimbursement for certification.--
            ``(A) In general.--Subject to the availability of 
        appropriations, the Administrator may reimburse each lead small 
        business development center for costs relating to the 
        certification of 1 or more employees of the lead small business 
        center in providing cyber planning assistance under a program 
        established or designated under paragraph (2).
            ``(B) Limitation.--The total amount reimbursed by the 
        Administrator under subparagraph (A) may not exceed $350,000 in 
        any fiscal year.''.
    (b) Implementation.--Not later than 180 days after the date of 
enactment of this Act, the Administrator of the Small Business 
Administration shall implement paragraphs (2), (3), and (4) of section 
21(o) of the Small Business Act, as added by subsection (a).

                               Speaker of the House of Representatives.

                            Vice President of the United States and    
                                               President of the Senate.