PRIA Logo™
119-hr-10238119th CongressWALLET

Cybersecurity for Small Businesses Act of 2026

Sponsored By: Representative Wied, Tony [R-WI-8]

In Committee

Summary

Centralizes cybersecurity guidance for small businesses by directing the Small Business Administration to develop and publish accessible tools and best practices in coordination with federal cybersecurity and defense agencies. It also links targeted help for companies pursuing federal contracts to the Cybersecurity Maturity Model Certification program and requires annual reporting to Congress.

Show full summary
  • Small businesses: Small businesses gain a single place for practical cybersecurity guidance and tools aimed at strengthening their cybersecurity infrastructure. The SBA must include this material in outreach and on its website.
  • Small businesses seeking federal contracts: Firms that want to bid or subcontract for federal work get targeted CMMC-related resources. The SBA must share materials from the DoD Small and Disadvantaged Business Utilization office, the NDAA section 1807 program, and the DoD APEX Accelerator.
  • SBA operations and oversight: The SBA must consult yearly with the Office of Advocacy’s Chief Counsel to set best practices for sharing cybersecurity information. The Administrator must report to Congress within 90 days and annually after that on small business contacts about cybersecurity.

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

1 provisions identified: 1 benefits, 0 costs, 0 mixed.

More cybersecurity help for small businesses

This bill would require the Small Business Administration to create and share cybersecurity guidance and tools for small businesses. The Administrator would consult with CISA and NIST and coordinate with the Department of Defense on related materials. For firms seeking federal contracts or subcontracts, the SBA would publish information about the Cybersecurity Maturity Model Certification program, including materials from the DoD SBDU, the FY2026 section 1807 program, and the APEX Accelerator. The SBA would include the information in outreach and on its website. The Administrator would report to Congress within 90 days of enactment and then annually, listing the number and description of small businesses that contacted the SBA about cybersecurity. The bill would not provide new funding or direct payments to businesses.

Sponsors & CoSponsors

Sponsor

Wied, Tony [R-WI-8]

WI • R

Cosponsors

  • Del. King-Hinds, Kimberlyn [R-MP-At Large]

    MP • R

    Sponsored 9/2/2026

  • Rep. Van Duyne, Beth [R-TX-24]

    TX • R

    Sponsored 9/2/2026

  • Rep. Latimer, George [D-NY-16]

    NY • D

    Sponsored 9/14/2026

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation