SBA IT Modernization Reporting Act
Sponsored By: Representative Cisneros
Passed House
Summary
Risk-based IT modernization governance at the SBA. This bill would require the Small Business Administration to adopt GAO recommendations for its recently deployed IT system and deliver a detailed implementation plan within 180 days and a briefing 30 days after plan submission.
Show full summary
- SBA leaders and IT teams would have to create a governance framework with 11 explicit requirements. These include documenting risks across project life cycles, defining risk parameters, developing risk mitigation plans, performing traceability analyses, and using GAO best practices for schedules and cost estimates.
- Contractors and vendors bidding on SBA IT work would face stricter selection and acquisition rules, including involvement of security subject-matter experts in contractor selection and inclusion of cyber-risk information in acquisition and strategic plans.
- Congressional small-business committees would receive the implementation plan and a briefing, creating fixed oversight milestones to track adoption and timelines.
Your PRIA Score
Personalized for You
How does this bill affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
1 provisions identified: 1 benefits, 0 costs, 0 mixed.
New rules for SBA IT upgrades
If enacted, the SBA Chief Information Officer would carry out GAO‑25‑106963 fixes (published Nov. 6, 2024). Within 180 days, SBA would send Congress an IT modernization plan with a lead office and timelines. For each project, it would require clear risk sources, defined risk limits, and risk plans across the life cycle. It would also require traceability checks, cyber‑risk details in acquisition and strategic plans, and security experts in contractor picks. Schedules and costs would follow GAO guides, and SBA would brief both committees within 30 days after submitting the plan.
Free Policy Watch
You just read the policy. Now see what it costs you.
Pick a topic. PRIA runs your household against live legislation and sends you a free personalized readout.
Pick a topic to get started
Sponsors & CoSponsors
Sponsor
Cisneros
CA • D
Cosponsors
Jack
GA • R
Sponsored 7/17/2025
Roll Call Votes
No roll call votes available for this bill.
View on Congress.govTake It Personal
Get Your Personalized Policy View
Take the PRIA Score to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in