{"format":1,"id":"117-hr-3462","congress":117,"number":"H.R. 3462","kind":"bill","group":"bills","title":"SBA Cyber Awareness Act","title_source":"Short Titles as Enacted","official_title":"To require an annual report on the cybersecurity of the Small Business Administration, and for other purposes.","titles":[{"type":"Official Title as Introduced","title":"To require an annual report on the cybersecurity of the Small Business Administration, and for other purposes."},{"type":"Short Titles from ENR (Enrolled) bill text","title":"SBA Cyber Awareness Act"},{"type":"Short Title(s) from Engrossed Amendment Senate bill text","title":"SBA Cyber Awareness Act"},{"type":"Short Titles from RFS (Referred to Senate) bill text","title":"SBA Cyber Awareness Act"},{"type":"Display Title","title":"SBA Cyber Awareness Act"},{"type":"Short Titles as Enacted","title":"SBA Cyber Awareness Act"},{"type":"Short Titles as Passed Senate","title":"SBA Cyber Awareness Act"},{"type":"Short Title(s) as Reported to Senate","title":"SBA Cyber Awareness Act"},{"type":"Short Title(s) as Passed House","title":"SBA Cyber Awareness Act"},{"type":"Short Title(s) as Introduced","title":"SBA Cyber Awareness Act"},{"type":"Short Title(s) as Reported to House","title":"SBA Cyber Awareness Act"}],"outcome":"became_law","law_number":"Public Law 117-259","introduced":"2021-05-21","chambers":{"house":{"status":"roll_call","date":"2021-11-02","vote":{"id":"117-2021-h350","question":"On Motion to Suspend the Rules and Pass","title":"SBA Cyber Awareness Act","result":"Passed","yea":423,"nay":0,"present":0,"not_voting":8,"source":"https://clerk.house.gov/evs/2021/roll350.xml"}},"senate":{"status":"voice","date":"2022-09-28","vote":null,"how":"unanimous_consent","words":"Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent."}},"president":{"status":"signed","date":"2022-12-21"},"vice_president_tie_breaker":null,"latest_action":{"text":"Became Public Law No: 117-259.","date":"2022-12-21"},"nominees":null,"amendments":[],"other_votes":[{"chamber":"house","date":"2022-12-06","question":"On the Motion to Suspend the Rules and Concur in the Senate Amendment","title":"SBA Cyber Awareness Act","result":"Passed","yea":417,"nay":0,"present":0,"not_voting":14,"kind":"procedural","source":"https://clerk.house.gov/evs/2022/roll506.xml"}],"crs_summary":{"date":"2022-12-21","stage":"Public Law","blocks":[{"k":"h","t":"SBA Cyber Awareness Act"},{"k":"p","t":"This act requires the Small Business Administration (SBA) to annually report specified information related to cybersecurity awareness."},{"k":"p","t":"Such reports must include (1) a strategy to increase the cybersecurity of the SBA's information technology (IT) infrastructure, (2) a supply chain risk management strategy that includes risk mitigation activities for IT components originating from an entity that has its principal place of business in China, and (3) any SBA cybersecurity incident that occurred during the two years prior to the initial report (including the SBA's action to respond to or remediate it)."}],"words":94},"summary":{"main_subject":{"text":"Amends the Small Business Act to require the Small Business Administration to submit an annual report to congressional committees on the cybersecurity of its information technology, and to provide a one-time account of its information technology made by entities based in the People's Republic of China.","cites":[{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}]},"core_areas":["Small Business Administration cybersecurity reporting","Supply chain risk management for agency information technology equipment"],"what_it_does":[{"text":"Amends section 10 of the Small Business Act to require the Administrator to submit a report to the appropriate congressional committees within 180 days after enactment and every year after that.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}},{"text":"Requires each annual report to include a strategy to increase the cybersecurity of the Administration's information technology infrastructure.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}},{"text":"Requires each annual report to include a supply chain risk management strategy and an implementation plan, with specific risk mitigation activities for components originating from entities with principal places of business in the People's Republic of China.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}},{"text":"Requires each annual report to account for incidents at the Administration and the Administrator's actions to respond to or remediate them, covering the preceding 2 years in the first report and the preceding 1 year in later reports.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}},{"text":"Allows each report to be submitted as part of the report required under section 3554 of title 44, United States Code, and states that the new subsection does not affect other reporting requirements under chapter 35 of title 44.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}},{"text":"Requires the Administrator, to the greatest extent practicable and within 1 year after enactment, to give four named House and Senate committees a detailed account of Administration information technology manufactured by an entity with its principal place of business in the People's Republic of China.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr#HE52F35EDD109491B88B5CBD00600ED6E:~:text=2.%20Cybersecurity%20awareness%20reporting"}}],"unexpected":[],"version":{"type":"Enrolled Bill","date":null,"rule":"enrolled","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr"},"current":true,"model":"claude-sonnet-5-5","approved":"2026-10-15","approved_by":"checks"},"changes":{"first":{"chamber":"House","type":"Engrossed in House","date":"2021-11-02","href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/eh"},"final":{"type":"Enrolled Bill","date":null,"href":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text/enr"},"kept":0.32,"replaced":false,"removed":[],"added":[],"added_count":0,"approved":"2026-10-15","approved_by":"checks"},"sources":{"congress_gov":"https://www.congress.gov/bill/117th-congress/house-bill/3462","text":"https://www.congress.gov/bill/117th-congress/house-bill/3462/text"},"card":{"image":"card/item/117-hr-3462.png","v":"8665d3eb5878","alt":"Votes on Record. H.R. 3462, 117th Congress: SBA Cyber Awareness Act. House: 423 Yea, 0 Nay. Senate: unanimous consent. Outcome: Became law, 21 Dec 2022."}}