SBA IT Modernization Reporting Act

HR 4491, the SBA IT Modernization Reporting Act, requires the Small Business Administration (SBA) to implement specific recommendations from a 2024 GAO report about risks in its newly deployed IT systems. The bill mandates that SBA’s Administrator submit, within 180 days of enactment, a detailed implementation plan to Congress outlining how the agency will manage risks for all IT modernization projects. This plan must include 11 specific requirements, such as documenting risk sources, using GAO’s established guidelines for scheduling (GAO-16-89G) and cost estimation (GAO-20-195G), and involving cybersecurity experts in contractor selection. The SBA must also provide a briefing to congressional committees 30 days after submitting the plan.