[Congressional Bills 117th Congress]
[From the U.S. Government Publishing Office]
[S. 1687 Reported in Senate (RS)]

<DOC>





                                                       Calendar No. 393
117th CONGRESS
  2d Session
                                S. 1687

    To amend section 21 of the Small Business Act to require cyber 
certification for small business development center counselors, and for 
                            other purposes.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                              May 18, 2021

   Mr. Rubio (for himself, Mrs. Shaheen, Ms. Hassan, Mr. Risch, Mr. 
Cassidy, Mr. Hawley, Mr. Tillis, Mr. Warnock, and Ms. Rosen) introduced 
the following bill; which was read twice and referred to the Committee 
                 on Small Business and Entrepreneurship

                              May 25, 2022

               Reported by Mr. Cardin, with an amendment
 [Strike out all after the enacting clause and insert the part printed 
                               in italic]

_______________________________________________________________________

                                 A BILL


 
    To amend section 21 of the Small Business Act to require cyber 
certification for small business development center counselors, and for 
                            other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

<DELETED>SECTION 1. SHORT TITLE.</DELETED>

<DELETED>    This Act may be cited as the ``Small Business Cyber 
Training Act of 2021''.</DELETED>

<DELETED>SEC. 2. DUTIES OF SMALL BUSINESS DEVELOPMENT CENTER 
              COUNSELORS.</DELETED>

<DELETED>    (a) Cyber Training.--Section 21 of the Small Business Act 
(15 U.S.C. 648) is amended by adding at the end the 
following:</DELETED>
<DELETED>    ``(o) Cyber Strategy Training for Small Business 
Development Centers.--</DELETED>
        <DELETED>    ``(1) Definitions.--In this subsection--</DELETED>
                <DELETED>    ``(A) the term `cyber strategy' means 
                resources and tactics to assist in planning for 
                cybersecurity and defending against cyber risks and 
                attacks; and</DELETED>
                <DELETED>    ``(B) the term `lead small business 
                development center' means a small business development 
                center that has received a grant from the 
                Administration.</DELETED>
        <DELETED>    ``(2) Certification program.--The Administrator 
        shall establish a cyber counseling certification program, or 
        designate a substantially similar existing program, to certify 
        the employees of lead small business development centers in 
        providing cyber planning assistance to small business 
        concerns.</DELETED>
        <DELETED>    ``(3) Number of certified employees.--The 
        Administrator shall ensure that the number of employees of each 
        lead small business development center who are certified in 
        providing cyber planning assistance is not less than the lesser 
        of--</DELETED>
                <DELETED>    ``(A) 5; or</DELETED>
                <DELETED>    ``(B) 10 percent of the total number of 
                employees of the lead small business development 
                center.</DELETED>
        <DELETED>    ``(4) Cyber strategy.--In carrying out paragraph 
        (2), the Administrator, to the extent practicable, shall 
        consider any cyber strategy methods included in the Small 
        Business Development Center Cyber Strategy developed under 
        section 1841(a)(3)(B) of the National Defense Authorization Act 
        for Fiscal Year 2017 (Public Law 114-328; 130 Stat. 
        2662).</DELETED>
        <DELETED>    ``(5) Reimbursement for certification.--</DELETED>
                <DELETED>    ``(A) In general.--Subject to the 
                availability of appropriations, the Administrator shall 
                reimburse a lead small business development center for 
                costs relating to the certification of an employee of 
                the lead small business center in providing cyber 
                planning assistance under the program established under 
                paragraph (2).</DELETED>
                <DELETED>    ``(B) Limitation.--The total amount 
                reimbursed by the Administrator under subparagraph (A) 
                may not exceed $350,000 in any fiscal 
                year.''.</DELETED>
<DELETED>    (b) Implementation.--Not later than 180 days after the 
date of enactment of this Act, the Administrator of the Small Business 
Administration shall implement paragraphs (2), (3), and (4) of section 
21(o) of the Small Business Act, as added by subsection (a).</DELETED>

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Small Business Cyber Training Act of 
2022''.

SEC. 2. DUTIES OF SMALL BUSINESS DEVELOPMENT CENTER COUNSELORS.

    (a) Cyber Training.--Section 21 of the Small Business Act (15 
U.S.C. 648) is amended by adding at the end the following:
    ``(o) Cyber Strategy Training for Small Business Development 
Centers.--
            ``(1) Definitions.--In this subsection--
                    ``(A) the term `cyber strategy' means resources and 
                tactics to assist in planning for cybersecurity and 
                defending against cyber risks and attacks; and
                    ``(B) the term `lead small business development 
                center' means a small business development center that 
                receives reimbursement from the Administrator under 
                paragraph (5).
            ``(2) Certification program.--The Administrator shall 
        establish a cyber counseling certification program, or 
        designate 1 or more substantially similar governmental or 
        private cybersecurity certification programs, to certify the 
        employees of lead small business development centers in 
        providing cyber planning assistance to small business concerns.
            ``(3) Number of certified employees.--The Administrator 
        shall ensure that the number of employees of each lead small 
        business development center who are certified in providing 
        cyber planning assistance is not less than the lesser of--
                    ``(A) 5; or
                    ``(B) 10 percent of the total number of employees 
                of the lead small business development center.
            ``(4) Cyber strategy.--In carrying out paragraph (2), the 
        Administrator, to the extent practicable, shall consider any 
        cyber strategy methods included in the Small Business 
        Development Center Cyber Strategy developed under section 
        1841(a)(3)(B) of the National Defense Authorization Act for 
        Fiscal Year 2017 (Public Law 114-328; 130 Stat. 2662).
            ``(5) Reimbursement for certification.--
                    ``(A) In general.--Subject to the availability of 
                appropriations, the Administrator shall reimburse each 
                lead small business development center for costs 
                relating to the certification of 1 or more employees of 
                the lead small business center in providing cyber 
                planning assistance under a program established or 
                designated under paragraph (2).
                    ``(B) Limitation.--The total amount reimbursed by 
                the Administrator under subparagraph (A) may not exceed 
                $350,000 in any fiscal year.
            ``(6) Funding under sbdc program.--Amounts made available 
        to fund grants under this section for fiscal year 2022, and 
        each fiscal year thereafter, shall be available for 
        reimbursements under this subsection.''.
    (b) Implementation.--Not later than 180 days after the date of 
enactment of this Act, the Administrator of the Small Business 
Administration shall implement paragraphs (2), (3), and (4) of section 
21(o) of the Small Business Act, as added by subsection (a).
                                                       Calendar No. 393

117th CONGRESS

  2d Session

                                S. 1687

_______________________________________________________________________

                                 A BILL

    To amend section 21 of the Small Business Act to require cyber 
certification for small business development center counselors, and for 
                            other purposes.

_______________________________________________________________________

                              May 25, 2022

                       Reported with an amendment