One Hundred Seventeenth Congress of the United States of America
2d Sess.
Begun and held at the City of Washington on Monday, the third day of January, two thousand and twenty two
S. 1687
AN ACT
To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.
Short title
This Act may be cited as the Small Business Cyber Training Act of 2022
.
Duties of small business development center counselors
Cyber training
Section 21 of the Small Business Act (15 U.S.C. 648) is amended by adding at the end the following:
Cyber strategy training for small business development centers
Definitions
In this subsection—
the term cyber strategy
means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and
the term lead small business development center
means a small business development center that receives reimbursement from the Administrator under paragraph (5).
Certification program
The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cybersecurity certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns.
Number of certified employees
The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of—
5; or
10 percent of the total number of employees of the lead small business development center.
Cyber strategy
In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Development Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 (Public Law 114–328; 130 Stat. 2662).
Reimbursement for certification
In general
Subject to the availability of appropriations, the Administrator may reimburse each lead small business development center for costs relating to the certification of 1 or more employees of the lead small business center in providing cyber planning assistance under a program established or designated under paragraph (2).
Limitation
The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year.
.
Implementation
Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of section 21(o) of the Small Business Act, as added by subsection (a).
Speaker of the House of Representatives
Vice President of the United States and President of the Senate