H.R. 3462House117th Congress (2021-2023)Enacted

SBA Cyber Awareness Act

Sponsored by Jason CrowRep. Jason Crow (D-CO)
Introduced May 21, 2021

AI-Generated Summary

Updated February 8, 2026 at 3:27 AM UTC

The SBA Cyber Awareness Act requires the Small Business Administration to produce an annual cybersecurity report for Congress. The report must outline a strategy to improve SBA’s IT security, a supply‑chain risk‑management plan focused on foreign‑made equipment—especially from China—and detail any cyber incidents and the agency’s response. Within a year, the SBA must also give a detailed inventory of IT hardware sourced from Chinese companies. The law targets the SBA’s IT infrastructure and its oversight committees.

Key Provisions

  • The SBA Administrator must submit an annual cybersecurity report to the Senate Small Business and Entrepreneurship Committee, Senate Homeland Security and Governmental Affairs Committee, House Small Business Committee, and House Oversight and Reform Committee within 180 days of enactment and each year thereafter.
  • The report must include a cybersecurity strategy, a supply‑chain risk‑management strategy and implementation plan for foreign‑manufactured IT equipment (with specific mitigation steps for components from China), and an account of cyber incidents from the prior year (or two‑year period for the first report) and actions taken to address them.
  • The annual report may be incorporated into the existing FISMA reporting requirements under 44 U.S.C. §3554.
  • Within one year of the Act’s passage, the SBA must provide a detailed account of any IT equipment it uses that was manufactured by entities whose principal place of business is in the People’s Republic of China.

Legislative Activity

Stay on top of the latest movement without scrolling through every action

31 earlier actions
Became Law Latest Action

Became Public Law No: 117-259.

December 21, 2022

View full timeline
HouseIntro Referral

Introduced in House

May 21, 2021

HouseIntro Referral

Referred to the House Committee on Small Business.

May 21, 2021

HouseCommittee

Committee Consideration and Mark-up Session Held.

July 29, 2021

HouseCommittee

Ordered to be Reported by Voice Vote.

July 29, 2021

HouseCommittee

Reported by the Committee on Small Business. H. Rept. 117-138.

October 12, 2021

HouseCalendars

Placed on the Union Calendar, Calendar No. 98.

October 12, 2021

HouseFloor

Ms. Velazquez moved to suspend the rules and pass the bill.

November 2, 2021 • 12:57 PM

HouseFloor

Considered under suspension of the rules. (consideration: CR H6088-6090)

November 2, 2021 • 12:57 PM

HouseFloor

DEBATE - The House proceeded with forty minutes of debate on H.R. 3462.

November 2, 2021 • 12:57 PM

HouseFloor

At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.

November 2, 2021 • 1:07 PM

HouseFloor

Considered as unfinished business. (consideration: CR H6100-6101)

November 2, 2021 • 4:28 PM

HouseFloor

Passed/agreed to in House: On motion to suspend the rules and pass the bill Agreed to by the Yeas and Nays: (2/3 required): 423 - 0 (Roll no. 350).(text: CR H6088-6089)

November 2, 2021 • 4:45 PM

HouseFloor

On motion to suspend the rules and pass the bill Agreed to by the Yeas and Nays: (2/3 required): 423 - 0 (Roll no. 350). (text: CR H6088-6089)

November 2, 2021 • 4:45 PM

HouseFloor

Motion to reconsider laid on the table Agreed to without objection.

November 2, 2021 • 4:45 PM

SenateIntro Referral

Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.

November 3, 2021

SenateCommittee

Committee on Small Business and Entrepreneurship. Ordered to be reported without amendment favorably.

February 15, 2022

SenateCommittee

Committee on Small Business and Entrepreneurship. Reported by Senator Cardin without amendment. Without written report.

February 17, 2022

SenateCalendars

Placed on Senate Legislative Calendar under General Orders. Calendar No. 281.

February 17, 2022

SenateCommittee

By Senator Cardin from Committee on Small Business and Entrepreneurship filed written report. Report No. 117-102.

May 3, 2022

SenateFloor

Measure laid before Senate by unanimous consent. (consideration: CR S5168)

September 28, 2022

SenateFloor

Passed Senate with an amendment by Unanimous Consent. (text of amendment in the nature of a substitute: CR S5168)

September 28, 2022

SenateFloor

Message on Senate action sent to the House.

September 29, 2022

HouseResolving Differences

Ms. Velazquez moved that the House suspend the rules and agree to the Senate amendment. (consideration: CR H8736-8738)

December 5, 2022 • 2:34 PM

HouseFloor

DEBATE - The House proceeded with forty minutes of debate on the Senate amendment to H.R. 3462.

December 5, 2022 • 2:34 PM

HouseResolving Differences

At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the chair announced that further proceedings on the motion would be postponed.

December 5, 2022 • 2:43 PM

HouseFloor

Considered as unfinished business. (consideration: CR H8775-8776; H8782)

December 6, 2022 • 3:35 PM

HouseNot Used

Resolving differences -- House actions: On motion that the House suspend the rules and agree to the Senate amendment Agreed to by the Yeas and Nays: (2/3 required): 417 - 0 (Roll no. 506).

December 6, 2022

HouseResolving Differences

On motion that the House suspend the rules and agree to the Senate amendment Agreed to by the Yeas and Nays: (2/3 required): 417 - 0 (Roll no. 506). (text: 12/05/2022 CR H8736-8737)

December 6, 2022 • 3:43 PM

HouseResolving Differences

Motion to reconsider laid on the table Agreed to without objection.

December 6, 2022 • 3:43 PM

President

Presented to President.

December 16, 2022

Became Law

Signed by President.

December 21, 2022

Became Law

Became Public Law No: 117-259.

December 21, 2022

Floor Debate

19 members

What members said about H.R. 3462 on the floor

7 Republicans12 Democrats
Tom McClintock
Rep. Tom McClintockR-CA-4 · Dec 6, 2022

Mr. Speaker, I yield myself such time as I may consume. Mr. Speaker, DHS Secretary Ali Mayorkas has repeatedly asserted, including in sworn testimony to multiple committees of this House, that the…

Zoe Lofgren
Rep. Zoe LofgrenD-CA-19 · Dec 6, 2022

Mr. Speaker, pursuant to House Resolution 1508, I call up the bill (H.R. 7946) to provide benefits for noncitizen members of the Armed Forces, and for other purposes, and ask for its immediate…

Sheila Jackson Lee
Rep. Sheila Jackson LeeD-TX-18 · Dec 6, 2022

Mr. Speaker, I thank the sponsor and proponents of this legislation. It is so startling, stunning, shocking, absurd to even be standing here discussing the deportation of men and women who have worn…

Mark Takano
Rep. Mark TakanoD-CA-41 · Dec 6, 2022

Mr. Speaker, I thank Chairwoman Lofgren for her leadership and Chairman Nadler for his staunch support to move my bill, the Veteran Service Recognition Act, through committee and to bring it to the…

Nydia M. Velázquez
Rep. Nydia M. VelázquezD-NY-7 · Dec 5, 2022

Mr. Speaker, I move to suspend the rules and concur in the Senate amendment to the bill (H.R. 3462) to require an annual report on the cybersecurity of the Small Business Administration, and for…

Show 8 more
Vicente Gonzalez
Rep. Vicente GonzalezD-TX-15 · Dec 6, 2022

Mr. Speaker, I have an amendment at the desk made in order by the rule. Mr. Speaker, I rise today in support of my amendment to H.R. 7946, the Veteran Service Recognition Act, which requires the…

Jerrold Nadler
Rep. Jerrold NadlerD-NY-10 · Dec 6, 2022

Mr. Speaker, I rise in strong support of H.R. 7946, the Veteran Service Recognition Act. This modest but important legislation would ensure that noncitizen Active-Duty military, veterans, and their…

Nydia M. Velázquez
Rep. Nydia M. VelázquezD-NY-7 · Nov 2, 2021

Mr. Speaker, I move to suspend the rules and pass the bill (H.R. 3462) to require an annual report on the cybersecurity of the Small Business Administration, and for other purposes. Mr. Speaker, I…

Jim Jordan
Rep. Jim JordanR-OH-4 · Dec 6, 2022

Mr. Speaker, just a few minutes ago the chairman of the Judiciary Committee said--the Democrat chair said--this bill is not about the border. That is the problem. That is what we should be…

Darrell Issa
Rep. Darrell IssaR-CA-50 · Dec 6, 2022

Mr. Speaker, I don't just rise in opposition to this bill, and I don't want to appear angry, but as a veteran who served both as an enlisted man and as an officer from 1970 until nearly 1990, I know…

Blaine Luetkemeyer
Rep. Blaine LuetkemeyerR-MO-3 · Dec 5, 2022

Mr. Speaker, I yield myself such time as I may consume and rise in support of H.R. 3462, the SBA Cyber Awareness Act, as amended by the Senate. Cyberattacks are too common in today's world. They cost…

Blaine Luetkemeyer
Rep. Blaine LuetkemeyerR-MO-3 · Nov 2, 2021

Mr. Speaker, I yield myself such time as I may consume. Mr. Speaker, I rise in support of H.R. 3462, the SBA Cyber Awareness Act. Mr. Speaker, the importance of being cyber ready cannot be…

Pramila Jayapal
Rep. Pramila JayapalD-WA-7 · Dec 6, 2022

Mr. Speaker, I rise in strong support of the Veteran Service Recognition Act to stop the deportation of immigrant veterans. I thank my colleague, Representative Mark Takano, for bringing this…

Show 11 more
Jason Crow
Rep. Jason CrowD-CO-6 · Dec 5, 2022

Mr. Speaker, I rise today in support of H.R. 3462, the bipartisan SBA Cyber Awareness Act. The Small Business Administration supports small businesses in every corner of the country. With the support…

Jason Crow
Rep. Jason CrowD-CO-6 · Nov 2, 2021

Mr. Speaker, I rise today in support of H.R. 3462, the bipartisan SBA Cyber Awareness Act. As we all know, small businesses are the backbone of our economy, and they are certainly the backbone of my…

Young Kim
Rep. Young KimR-CA-39 · Nov 2, 2021

Mr. Speaker, I would like to thank Ranking Member Luetkemeyer and Chairwoman Velazquez for their leadership in bringing these bipartisan pieces of legislation to the House floor for votes today. I…

Mike Bost
Rep. Mike BostR-IL-12 · Dec 6, 2022

Mr. Speaker, I thank my friend from California for yielding the time for me to speak today. I rise in opposition to this legislation. This bill is unnecessary and creates additional carve-outs to an…

Tom Emmer
Rep. Tom EmmerR-MN-6 · Nov 2, 2021

Madam Speaker, I was regrettably unable to vote on November 2, 2021. Had I been present, I would have voted ``yes'' on all the day's legislation: rollcall No. 342 (H.R. 1975), rollcall No. 343 (H.R.…

Joaquin Castro
Rep. Joaquin CastroD-TX-20 · Dec 6, 2022

Mr. Speaker, I rise in support of the Veteran Service Recognition Act because it is time to bring our deported veterans home. Five years ago, I led a delegation of lawmakers to meet with a group of…

J. Luis Correa
Rep. J. Luis CorreaD-CA-46 · Dec 6, 2022

Mr. Speaker, this is the oath a soldier takes when he is joining the military: I do swear (or affirm) that I will support and defend the Constitution of the United States against all enemies, foreign…

Sheila Jackson Lee
Rep. Sheila Jackson LeeD-TX-18 · Nov 2, 2021

Mr. Speaker, I rise in support of H.R. 3462, the ``SBA Cyber Awareness Act,'' which will strengthen our knowledge of cybersecurity threats to the small businesses of America. In short, this bill…

Mark DeSaulnier
Rep. Mark DeSaulnierD-CA-11 · Dec 6, 2022

Mr. Speaker, I regret that I was unable to vote today as I was unavoidably detained. Had I been present, I would have voted ``yea'' on rollcall No. 502. Members Recorded Pursuant to House Resolution…

Young Kim
Rep. Young KimR-CA-39 · Dec 6, 2022

Mr. Speaker, I rise to strongly support H.R. 3462, the SBA Cyber Awareness Act, which I introduced with Representative Jason Crow to improve cybersecurity and transparency at the Small Business…

Charles E. Schumer
Sen. Charles E. SchumerD-NY · Sep 28, 2022

Mr. President, I ask unanimous consent that the Senate proceed to the immediate consideration of Calendar No. 281, H.R. 3462. I further ask that the Cardin substitute amendment, which is at the desk,…

Bill Text

8 versions available

Reading Mode
Latest
Enrolled BillPublication date not provided

One Hundred Seventeenth Congress of the United States of America

At the Second Session

Begun and held at the City of Washington on Monday, the third day of January, two thousand and twenty-two

H. R. 3462

AN ACT

To require an annual report on the cybersecurity of the Small Business Administration, and for other purposes.

1.

Short title

This Act may be cited as the SBA Cyber Awareness Act.

2.

Cybersecurity awareness reporting

(a)

In general

Section 10 of the Small Business Act (15 U.S.C. 639) is amended by inserting after subsection (a) the following:

(b)

Cybersecurity reports

(1)

Annual report

Not later than 180 days after the date of enactment of this subsection, and every year thereafter, the Administrator shall submit a report to the appropriate congressional committees that includes—

(A)

a strategy to increase the cybersecurity of information technology infrastructure of the Administration;

(B)

a supply chain risk management strategy and an implementation plan to address the risks of foreign manufactured information technology equipment utilized by the Administration, including specific risk mitigation activities for components originating from entities with principal places of business located in the People’s Republic of China; and

(C)

an account of—

(i)

any incident that occurred at the Administration during the 2-year period preceding the date on which the first report is submitted, and, for subsequent reports, the 1-year period preceding the date of submission; and

(ii)

any action taken by the Administrator to respond to or remediate any such incident.

(2)

FISMA reports

Each report required under paragraph (1) may be submitted as part of the report required under section 3554 of title 44, United States Code.

(3)

Rule of construction

Nothing in this subsection shall be construed to affect the reporting requirements of the Administrator under chapter 35 of title 44, United States Code, in particular the requirement to notify the Federal information security incident center under section 3554(b)(7)(C)(ii) of such title, any guidance issued by the Office of Management and Budget, or any other provision of law or Federal policy.

(4)

Definitions

In this subsection:

(A)

Appropriate congressional committees

The term appropriate congressional committees means—

(i)

the Committee on Small Business and Entrepreneurship of the Senate;

(ii)

the Committee on Homeland Security and Governmental Affairs of the Senate;

(iii)

the Committee on Small Business of the House of Representatives; and

(iv)

the Committee on Oversight and Reform of the House of Representatives.

(B)

Incident

The term incident has the meaning given the term in section 3552 of title 44, United States Code.

(C)

Information technology

The term information technology has the meaning given the term in section 3502 of title 44, United States Code.

.

(b)

Report

Not later than 1 year after the date of enactment of this Act, the Administrator of the Small Business Administration shall, to the greatest extent practicable, provide to the Committee on Small Business and Entrepreneurship of the Senate, the Committee on Homeland Security and Governmental Affairs of the Senate, the Committee on Small Business of the House of Representatives, and the Committee on Oversight and Reform of the House of Representatives a detailed account of information technology (as defined in section 3502 of title 44, United States Code) of the Small Business Administration that was manufactured by an entity that has its principal place of business located in the People’s Republic of China.

Speaker of the House of Representatives.

Vice President of the United States and President of the Senate.