<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Reported-in-Senate" dms-id="A1" public-private="public" slc-id="S1-HEN22418-M6L-ND-4DF"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>114 S1687 RS: Small Business Cyber Training Act of 2021</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2022-05-25</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code><calendar>Calendar No. 393</calendar><congress>117th CONGRESS</congress><session>2d Session</session><legis-num>S. 1687</legis-num><current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber><action><action-date date="20210518">May 18, 2021</action-date><action-desc><sponsor name-id="S350">Mr. Rubio</sponsor> (for himself, <cosponsor name-id="S324">Mrs. Shaheen</cosponsor>, <cosponsor name-id="S388">Ms. Hassan</cosponsor>, <cosponsor name-id="S323">Mr. Risch</cosponsor>, <cosponsor name-id="S373">Mr. Cassidy</cosponsor>, <cosponsor name-id="S399">Mr. Hawley</cosponsor>, <cosponsor name-id="S384">Mr. Tillis</cosponsor>, <cosponsor name-id="S415">Mr. Warnock</cosponsor>, and <cosponsor name-id="S402">Ms. Rosen</cosponsor>) introduced the following bill; which was read twice and referred to the <committee-name committee-id="SSSB00" added-display-style="italic" deleted-display-style="strikethrough">Committee on Small Business and Entrepreneurship</committee-name></action-desc></action><action stage="Reported-in-Senate"><action-date date="20220525">May 25, 2022</action-date><action-desc>Reported by <sponsor name-id="S308">Mr. Cardin</sponsor>, with an amendment</action-desc><action-instruction>Strike out all after the enacting clause and insert the part printed in italic</action-instruction></action><legis-type>A BILL</legis-type><official-title>To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes. </official-title></form><legis-body display-enacting-clause="yes-display-enacting-clause"><section section-type="section-one" id="S1" changed="deleted" reported-display-style="strikethrough" committee-id="SSSB00"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Small Business Cyber Training Act of 2021</short-title></quote>.</text></section><section id="ideda060aef6744f888cdbe0998a4580b2" changed="deleted" reported-display-style="strikethrough" committee-id="SSSB00"><enum>2.</enum><header>Duties of small business development center counselors</header><subsection id="ida60e34519e21482a9ea9d5e9c8b459e6"><enum>(a)</enum><header>Cyber training</header><text>Section 21 of the Small Business Act (<external-xref legal-doc="usc" parsable-cite="usc/15/648">15 U.S.C. 648</external-xref>) is amended by adding at the end the following:</text><quoted-block style="OLC" display-inline="no-display-inline" id="id05baee6214774c38bdb9c48ace039a30" changed="deleted" reported-display-style="strikethrough" committee-id="SSSB00"><subsection id="idd6b1f12c47674ddf9d80bc518ff84dec"><enum>(o)</enum><header>Cyber strategy training for small business development centers</header><paragraph id="idE45FC2C515BC45BFA20143823CA86968"><enum>(1)</enum><header>Definitions</header><text>In this subsection—</text><subparagraph id="id6913c77e64224e6581b17c75d84113ab"><enum>(A)</enum><text>the term <term>cyber strategy</term> means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and</text></subparagraph><subparagraph id="idd6a74a49d5ea49cabbfb7e77842e6ba3"><enum>(B)</enum><text>the term <term>lead small business development center</term> means a small business development center that has received a grant from the Administration.</text></subparagraph></paragraph><paragraph id="id0f7a6e3c2c2645db9409550f1e1c94c6"><enum>(2)</enum><header>Certification program</header><text>The Administrator shall establish a cyber counseling certification program, or designate a substantially similar existing program, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns.</text></paragraph><paragraph id="id60eb379e5b2d4808b49f960adc36adb8"><enum>(3)</enum><header>Number of certified employees</header><text>The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of—</text><subparagraph id="idccf9e04654044e4fab0574ab198a276e"><enum>(A)</enum><text>5; or</text></subparagraph><subparagraph id="idcdf7c6e341274ddeb4d171654ca02f85"><enum>(B)</enum><text>10 percent of the total number of employees of the lead small business development center.</text></subparagraph></paragraph><paragraph id="id7c7af151cc24495f8b311a7c6463481d"><enum>(4)</enum><header>Cyber strategy</header><text>In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 (<external-xref legal-doc="public-law" parsable-cite="pl/114/328">Public Law 114–328</external-xref>; 130 Stat. 2662).</text></paragraph><paragraph id="id691b67ce154e42579bd361d2dd09ff0d"><enum>(5)</enum><header>Reimbursement for certification</header><subparagraph id="ida7bf3efdae02480a964b74a9236e3f58"><enum>(A)</enum><header>In general</header><text>Subject to the availability of appropriations, the Administrator shall reimburse a lead small business development center for costs relating to the certification of an employee of the lead small business center in providing cyber planning assistance under the program established under paragraph (2).</text></subparagraph><subparagraph id="idba24262865054a5791a08a7e7d78b852"><enum>(B)</enum><header>Limitation</header><text>The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year.</text></subparagraph></paragraph></subsection><after-quoted-block>.</after-quoted-block></quoted-block></subsection><subsection id="idfab3bbc545c443559f15af139c2248bf"><enum>(b)</enum><header>Implementation</header><text>Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).</text></subsection></section></legis-body><legis-body display-enacting-clause="no-display-enacting-clause"><section section-type="section-one" id="id2b72d3ba-cae9-4ced-8b48-dfc132120f4a" changed="added" reported-display-style="italic" committee-id="SSSB00"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Small Business Cyber Training Act of 2022</short-title></quote>.</text></section><section id="idf76456d0-f1f4-4b94-aa34-8cf9181269ef" changed="added" reported-display-style="italic" committee-id="SSSB00"><enum>2.</enum><header>Duties of small business development center counselors</header><subsection id="idae77497a-4ed3-4275-83a7-6faf19ce455d"><enum>(a)</enum><header>Cyber training</header><text>Section 21 of the Small Business Act (<external-xref legal-doc="usc" parsable-cite="usc/15/648">15 U.S.C. 648</external-xref>) is amended by adding at the end the following:</text><quoted-block style="OLC" display-inline="no-display-inline" id="idd9a9c31a-a64b-458a-84a9-2bbead12ce5e" changed="added" reported-display-style="italic" committee-id="SSSB00"><subsection id="idfe845f32-fb05-4318-b182-327742b61c02"><enum>(o)</enum><header>Cyber strategy training for small business development centers</header><paragraph id="id6a790539-07f8-4ab3-89e0-6ceec834f962"><enum>(1)</enum><header>Definitions</header><text>In this subsection—</text><subparagraph id="ide0c69580-6613-493e-a628-09fcc784a6ae"><enum>(A)</enum><text>the term <term>cyber strategy</term> means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and</text></subparagraph><subparagraph id="id81b3c402-b42e-41f7-97ed-c8fb65250f69"><enum>(B)</enum><text>the term <term>lead small business development center</term> means a small business development center that receives reimbursement from the Administrator under paragraph (5).</text></subparagraph></paragraph><paragraph id="id860fc37f-cbb8-4e32-9215-ec502dd8ae2b"><enum>(2)</enum><header>Certification program</header><text>The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns.</text></paragraph><paragraph id="idfbb829f5-fff2-417b-add5-d108db655381"><enum>(3)</enum><header>Number of certified employees</header><text>The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of—</text><subparagraph id="idfd5401c4-a83d-4b66-a3b4-9c99262c6810"><enum>(A)</enum><text>5; or</text></subparagraph><subparagraph id="id2cd6c61a-b435-4e7b-8068-4021484fedcb"><enum>(B)</enum><text>10 percent of the total number of employees of the lead small business development center.</text></subparagraph></paragraph><paragraph id="id6a2a428e-f680-4011-98fc-2a5308706d2b"><enum>(4)</enum><header>Cyber strategy</header><text>In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 (<external-xref legal-doc="public-law" parsable-cite="pl/114/328">Public Law 114–328</external-xref>; 130 Stat. 2662).</text></paragraph><paragraph id="id643c376f-d5ce-4da1-a8ac-c4e5393b83fd"><enum>(5)</enum><header>Reimbursement for certification</header><subparagraph id="id15ea9e7c-e0a0-4eaf-9c20-39d9aaa260fd"><enum>(A)</enum><header>In general</header><text>Subject to the availability of appropriations, the Administrator shall reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2).</text></subparagraph><subparagraph id="ide781beb0-eefc-4a5b-8f28-b7caef031643"><enum>(B)</enum><header>Limitation</header><text>The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year.</text></subparagraph></paragraph><paragraph id="id84DB88BC3B2D43119F71FB44D4AD8ECE"><enum>(6)</enum><header>Funding under SBDC program</header><text>Amounts made available to fund grants under this section for fiscal year 2022, and each fiscal year thereafter, shall be available for reimbursements under this subsection.</text></paragraph></subsection><after-quoted-block>.</after-quoted-block></quoted-block></subsection><subsection id="id1cddd29b-0cd6-4f8d-8b54-e38f8b1a6f00"><enum>(b)</enum><header>Implementation</header><text>Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).</text></subsection></section></legis-body><endorsement><action-date date="20220525">May 25, 2022</action-date><action-desc>Reported with an amendment</action-desc></endorsement></bill> 

