Small Business Cyber Training Act of 2022
This bill requires the Small Business Administration to establish a program for certifying at least 5 or 10% of the total number of employees of a small business development center to provide cybersecurity planning assistance to small businesses.
[117th Congress Public Law 319]
[From the U.S. Government Publishing Office]



[[Page 136 STAT. 4424]]

Public Law 117-319
117th Congress

                                 An Act


 
     To amend section 21 of the Small Business Act to require cyber 
certification for small business development center counselors, and for 
          other purposes. <<NOTE: Dec. 27, 2022 -  [S. 1687]>> 

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled, <<NOTE: Small Business 
Cyber Training Act of 2022.>> 
SECTION 1. <<NOTE: 15 USC 631 note.>>  SHORT TITLE.

    This Act may be cited as the ``Small Business Cyber Training Act of 
2022''.
SEC. 2. DUTIES OF SMALL BUSINESS DEVELOPMENT CENTER COUNSELORS.

    (a) Cyber Training.--Section 21 of the Small Business Act (15 U.S.C. 
648) is amended by adding at the end the following:
    ``(o) Cyber Strategy Training for Small Business Development 
Centers.--
            ``(1) Definitions.--In this subsection--
                    ``(A) the term `cyber strategy' means resources and 
                tactics to assist in planning for cybersecurity and 
                defending against cyber risks and attacks; and
                    ``(B) the term `lead small business development 
                center' means a small business development center that 
                receives reimbursement from the Administrator under 
                paragraph (5).
            ``(2) Certification program.--The Administrator shall 
        establish a cyber counseling certification program, or designate 
        1 or more substantially similar governmental or private 
        cybersecurity certification programs, to certify the employees 
        of lead small business development centers in providing cyber 
        planning assistance to small business concerns.
            ``(3) Number of certified employees.--The Administrator 
        shall ensure that the number of employees of each lead small 
        business development center who are certified in providing cyber 
        planning assistance is not less than the lesser of--
                    ``(A) 5; or
                    ``(B) 10 percent of the total number of employees of 
                the lead small business development center.
            ``(4) Cyber strategy.--In carrying out paragraph (2), the 
        Administrator, to the extent practicable, shall consider any 
        cyber strategy methods included in the Small Business 
        Development Center Cyber Strategy developed under section 
        1841(a)(3)(B) of the National Defense Authorization Act for 
        Fiscal Year 2017 (Public Law 114-328; 130 Stat. 2662).
            ``(5) Reimbursement for certification.--

[[Page 136 STAT. 4425]]

                    ``(A) In general.--Subject to the availability of 
                appropriations, the Administrator may reimburse each 
                lead small business development center for costs 
                relating to the certification of 1 or more employees of 
                the lead small business center in providing cyber 
                planning assistance under a program established or 
                designated under paragraph (2).
                    ``(B) Limitation.--The total amount reimbursed by 
                the Administrator under subparagraph (A) may not exceed 
                $350,000 in any fiscal year.''.

    (b) Implementation. <<NOTE: Deadline. 15 USC 648 note.>> --Not later 
than 180 days after the date of enactment of this Act, the Administrator 
of the Small Business Administration shall implement paragraphs (2), 
(3), and (4) of section 21(o) of the Small Business Act, as added by 
subsection (a).

    Approved December 27, 2022.

LEGISLATIVE HISTORY--S. 1687:
---------------------------------------------------------------------------

CONGRESSIONAL RECORD, Vol. 168 (2022):
            Sept. 28, considered and passed Senate.
            Dec. 5, considered in House.
            Dec. 6, prior proceedings vacated; considered and passed 
                House, amended.
            Dec. 14, Senate concurred in House amendment.

                                  <all>
Small Business Cyber Training Act of 2022
A bill to amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes.
Small Business Cyber Training Act of 2022
Small Business Cyber Training Act of 2022
Small Business Cyber Training Act of 2021
Sen. Rubio, Marco