H.R. 10238 · In committee · Commerce

Cybersecurity for Small Businesses Act of 2026

What it does

Directs the Small Business Administration Administrator, in consultation with the Cybersecurity and Infrastructure Security Agency Director, to develop and disseminate information and resources to small businesses for strengthening cybersecurity infrastructure and implementing best practices.
Requires the Small Business Administration Administrator, in coordination with the Secretary of Defense and other Federal agencies, to disseminate information about Cybersecurity Maturity Model Certification program requirements.
Directs the Small Business Administration Administrator to include cybersecurity information in its outreach and communications, including on its website.
Requires the Chief Counsel for Advocacy to annually consult with the Small Business Administration Administrator to determine best practices for disseminating cybersecurity information to small businesses.
Directs the Chief Counsel for Advocacy to submit an annual report to Congress within 90 days of enactment and annually thereafter describing the number and nature of small business cybersecurity matters raised with the Office of Advocacy.

Sep 16, 2026: Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 23 - 0.

Committee: House Small Business