H.R. 3002 – Small Business Cyber Training Act of 2017

AI-Generated Summary

Updated April 15, 2026 at 4:29 PM UTC

The Small Business Cyber Training Act of 2017 would change the Small Business Act so that counselors at Small Business Development Centers (SBDCs) must be certified in cybersecurity planning. The law directs the SBA Administrator to set up (or approve) a certification program and to fund the training, helping small businesses get better cyber‑risk advice. It mainly affects SBDC staff and the small businesses they serve.

Key Provisions

Defines “cyber strategy” as resources and tactics for planning and defending against cyber risks and attacks.
Requires the SBA Administrator to create or approve a cyber counseling certification program for employees of lead SBDCs.
Mandates that each lead SBDC have at least five certified staff members, or at least 10 % of its workforce, whichever is smaller.
Allows the Administrator to reimburse lead SBDCs for certification costs, with a cap of $350,000 per fiscal year.
Directs the Administrator to consider existing cyber strategy methods from the National Defense Authorization Act when implementing the program.

Legislative Activity

Stay on top of the latest movement without scrolling through every action

1 earlier action

HouseIntro Referral Latest Action

Referred to the House Committee on Small Business.

Small Business Committee

June 22, 2017

View full timeline

HouseIntro Referral

Introduced in House

June 22, 2017

HouseIntro Referral

Referred to the House Committee on Small Business.

Small Business Committee

June 22, 2017

Bill Text

Latest available legislative text

Reading Mode

Raw Text PDF XML

Introduced in HouseIssued June 22, 2017

I

115th CONGRESS

1st Session

H. R. 3002

IN THE HOUSE OF REPRESENTATIVES

June 22, 2017

Mr. Chabot introduced the following bill; which was referred to the Committee on Small Business

A BILL

To amend the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.

1.

Short title

This Act may be cited as the Small Business Cyber Training Act of 2017.

2.

Duties of small business development center counselors

Section 21 of the Small Business Act (15 U.S.C. 648) is amended by adding at the end the following:

(o)

Cyber strategy training for small business development centers

(1)

Definitions

In this subsection—

(A)

the term cyber strategy means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and cyber attacks; and

(B)

the term lead small business development center means a small business development center that has received a grant from the Administration.

(2)

Certification program

The Administrator shall establish a cyber counseling certification program, or approve a similar existing program, to certify the employees of lead small business development centers to provide cyber planning assistance to small business concerns.

(3)

Number of certified employees

The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance under this subsection is not fewer than the lesser of—

(A)

5; or

(B)

10 percent of the total number of employees of the lead small business development center.

(4)

Consideration of Small Business Development Center Cyber Strategy

In carrying out this subsection, the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a) of the National Defense Authorization Act for Fiscal Year 2017 (Public Law 114–328; 130 Stat. 2662).

(5)

Reimbursement for certification

(A)

In general

Subject to the availability of appropriations and subparagraph (B), the Administrator shall reimburse a lead small business development center for costs relating to the certification of an employee of the lead small business development center under the program established under paragraph (2).

(B)

Limitation

The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year.

.