The Combating Foreign Threats to Main Street Act of 2026 directs the Small Business Administration to create and distribute educational materials that help small businesses identify and protect against harmful activities by foreign adversaries. These materials must cover topics such as intellectual property theft, cybersecurity risks, forced labor in supply chains, and the dangers of specific commercial relationships with foreign-controlled entities. The bill requires the agency to review and update these resources annually starting in 2027 to ensure they reflect current threats and best practices. Additionally, if the agency determines that a specific activity poses a significant risk to national or economic security, it must notify the relevant congressional committees about the finding and its justification.
The Cybersecurity for Small Businesses Act of 2026 directs the Small Business Administration, in partnership with federal cybersecurity agencies, to create and distribute resources that help small businesses improve their digital security practices. The bill specifically requires the administration to provide guidance on federal cybersecurity compliance standards to small companies seeking government contracts or subcontracting opportunities. This information must be made available through small business development centers, district offices, and the agency's website. Additionally, the Office of Advocacy is required to submit an annual report to Congress detailing how many small businesses have contacted them regarding cybersecurity issues.
The Small Business Cybersecurity Assistance Evaluation Act of 2026 directs the Government Accountability Office to conduct a comprehensive study of existing federal cybersecurity initiatives, tools, and services designed to support small businesses. The investigation will assess how effectively these resources help owners identify cyber risks, prepare for threats, recover from attacks, and secure funding for security measures. Additionally, the study will evaluate the level of awareness among small business owners regarding these programs and examine how well different federal efforts are coordinated with one another. Upon completion, the findings and recommendations for improving these services will be submitted to the relevant congressional committees without authorizing any new spending.
The SBA IT Modernization Reporting Act requires the Small Business Administration to create a detailed plan for updating its information technology systems based on a recent audit report. This plan must outline specific steps to manage project risks, improve scheduling and cost estimates, and ensure security experts are involved in hiring contractors. The agency must submit this implementation plan to Congress within 180 days and provide a briefing on it within 30 days of submission. These measures aim to establish clearer policies for managing technology projects and reducing risks within the SBA.
Tags
Small Business
