Mr. Speaker, I thank the gentleman from Florida (Mr. Webster) for yielding me time and for introducing H.R. 2105, the NIST Small Business Cybersecurity Act. This important and timely bipartisan bill, cosponsored by 17 Members of Congress…
Mr. Speaker, I thank the gentleman from Florida (Mr. Webster) for yielding me time and for introducing H.R. 2105, the NIST Small Business Cybersecurity Act.
This important and timely bipartisan bill, cosponsored by 17 Members of Congress and approved by the Science Committee by voice vote, directs the National Institute of Standards and Technology to provide small businesses with cybersecurity guidelines, tools, best practices, standards, and methodologies necessary to better protect themselves from cyber attacks.
Small businesses help produce a thriving economy that benefits our entire country. They bring innovative ideas, cutting-edge products and services, and jobs to the marketplace. In my home State, for example, there are more than 2.4 million small businesses that employ almost 4.5 million Texans.
Major cyber attacks dominate news coverage, such as the Equifax or Yahoo hacks that impacted millions and billions of people. But small businesses, which often do not have sufficient information to adequately monitor and protect their computer systems, are frequently the target of cyber attacks, as well.
A 2016 Symantec report notes that cyber attacks against businesses with fewer than 250 employees have grown from 18 percent in 2011 to 43 percent in 2015. This bill can help those businesses.
October is National Cybersecurity Awareness Month, so it is appropriate that we consider a bill designed to help protect small businesses from cybersecurity attacks. Today's legislation provides small businesses with NIST expertise to reduce their cybersecurity risk.
NIST experts developed a cybersecurity framework through collaboration between the government and the private sector. This framework is accepted and used by many private organizations to address and manage their information technology vulnerabilities in a cost- effective way.
The guidance described in this bill to help small businesses is based on the NIST cybersecurity framework. H.R. 2105 prioritizes dissemination of this guidance by NIST within its almost $1 billion budget.
Mr. Speaker, I urge my colleagues to show their support for small business by approving Mr. Webster's fiscally responsible, innovation protection bill today.