About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline

LOG IN
LOG IN


S. Rept. 117-102 1 (2022-05-03)

handle is hein.congrecreports/crptxaejp0001 and id is 1 raw text is: AUTHENTICATED U.S. GOVERNMENT INFORMATION . Calendar No. 281 117TH CONGRESS REPORT 2d Session SENATE 117-102 SBA CYBER AWARENESS ACT MAY 3, 2022.-Ordered to be printed Mr. CARDIN, from the Committee on Small Business and Entrepreneurship, submitted the following R E P O R T [To accompany H.R. 3462] [Including cost estimate of the Congressional Budget Office] The Committee on Small Business and Entrepreneurship, to which was referred the bill (H.R. 3462) to require an annual report on the cybersecurity of the Small Business Administration, and for other purposes, reports favorably thereon, without amendment and recommends that the bill do pass. I. INTRODUCTION A bill to require an annual report on the cybersecurity of the SBA and issue additional reports as necessary was introduced by Representatives Jason Crow and Young Lee on May 21, 2021. A Senate companion, S. 1691, was introduced by Senators Marco Rubio, Jim Risch, and Bill Cassidy on May 18, 2021. This bill requires the Administrator to issue a report within 180 days of enactment, and annually thereafter, to the appropriate Congressional committees (defined in the bill as the Committee on Small Business and Entrepreneurship of the Senate and the Com- mittee on Small Business of the House of Representatives) that in- cludes: (1) an assessment of the information technology (as defined in section 11101 of title 40, United States Code) and cybersecurity infrastructure of the Administration; (2) a strategy to increase the cybersecurity infrastructure of the Administration; (3) a detailed account of any information technology equipment or interconnected system or subsystem of equipment of the Administration that was manufactured by an entity that has its principal place of business located in the People's Republic of China; and (4) an account of any cybersecurity risk or incident that occurred at the Administration 29-010