# 119-hr-4491: SBA IT Modernization Reporting Act

119-hr-4491, SBA IT Modernization Reporting Act, is a 119th Congress bill sponsored by Rep. Cisneros, Gilbert Ray [D-CA-31] (D-CA); status passed_house; PRIA reads it as touching household money (as of 2026-09-10).

- Canonical: https://policyrisk.com/legislation/119-hr-4491
- As of: 2026-09-10
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-hr-4491
- Congress: 119
- Title: SBA IT Modernization Reporting Act
- Status: passed_house
- Introduced: 2025-07-17
- Sponsor: Rep. Cisneros, Gilbert Ray [D-CA-31] (D-CA)
- Cosponsors: 1
- Policy area: Commerce
- Touches household money: yes
- Last recorded action: 2026-09-10

## Summary

**Risk-based IT modernization governance at the SBA**. This bill would require the Small Business Administration to adopt GAO recommendations for its recently deployed IT system and deliver a detailed implementation plan within 180 days and a briefing 30 days after plan submission. - SBA leaders and IT teams would have to create a governance framework with 11 explicit requirements. These include documenting risks across project life cycles, defining risk parameters, developing risk mitigation plans, performing traceability analyses, and using GAO best practices for schedules and cost estimates. - Contractors and vendors bidding on SBA IT work would face stricter selection and acquisition rules, including involvement of security subject-matter experts in contractor selection and inclusion of cyber-risk information in acquisition and strategic plans. - Congressional small-business committees would receive the implementation plan and a briefing, creating fixed oversight milestones to track adoption and timelines.

## Cosponsors (1)

- Rep. Jack, Brian [R-GA-3] (R-GA), 2025-07-17T00:00:00.000Z

## Provisions PRIA read

- New rules for SBA IT upgrades: benefit, low. If enacted, the SBA Chief Information Officer would carry out GAO‑25‑106963 fixes (published Nov. 6, 2024). Within 180 days, SBA would send Congress an IT modernization plan with a lead office and timelines. For each project, it would require clear risk sources, defined risk limits, and risk plans…

## Related bills

- 119-hr-3151: SHIPS for America Act of 2025
- 119-hr-7977: Energy Bills Relief Act
- 119-hr-7481: Department of Homeland Security Appropriations Act, 2026
- 119-hr-1229: United States-Israel Defense Partnership Act of 2025
- 119-hr-7973: Momnibus Act
- 119-hr-6976: Duty Status Reform Act

## Sources
- [119-hr-4491 on Congress.gov](https://www.congress.gov/bill/119th-congress/house-bill/4491)

## Related
- [119-hr-3151: SHIPS for America Act of 2025](https://policyrisk.com/legislation/119-hr-3151)
- [119-hr-7977: Energy Bills Relief Act](https://policyrisk.com/legislation/119-hr-7977)
- [119-hr-7481: Department of Homeland Security Appropriations Act, 2026](https://policyrisk.com/legislation/119-hr-7481)
- [119-hr-1229: United States-Israel Defense Partnership Act of 2025](https://policyrisk.com/legislation/119-hr-1229)
- [119-hr-7973: Momnibus Act](https://policyrisk.com/legislation/119-hr-7973)
- [119-hr-6976: Duty Status Reform Act](https://policyrisk.com/legislation/119-hr-6976)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-hr-4491 (as of 2026-09-10).