PRIA Logo™
119-s-4948119th CongressWALLET

SBA IT Modernization Reporting Act

Sponsored By: Senator Schiff, Adam B. [D-CA]

Introduced

Summary

This bill would require the Small Business Administration to implement GAO's IT modernization recommendations to address urgent risks in a newly deployed SBA system and strengthen how future IT projects are managed.

Show full summary
  • SBA leaders and the Chief Information Officer would have to deliver a detailed implementation plan within 180 days that identifies risks, risk owners, mitigation strategies, schedules, and cost estimating practices.
  • Small businesses that use SBA online services would benefit if the plan reduces operational and cybersecurity problems tied to the newly deployed system.
  • The Administrator must send the plan to the House and Senate small business committees and provide a briefing within 30 days after submission, increasing congressional oversight.
  • IT project teams and contractors would face stricter rules, including documented traceability analyses and requiring security subject matter experts in contractor selection.

*This bill does not authorize new funding and therefore would not directly change federal spending.*

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

1 provisions identified: 1 benefits, 0 costs, 0 mixed.

Stronger SBA IT rules for small businesses

If enacted, the SBA Administrator would be required to implement the GAO IT report published November 6, 2024 (GAO-25-106963) through the Chief Information Officer. Not later than 180 days after enactment, the Administrator would send Congress an implementation plan to the Senate and House small business committees. The plan would document project risk sources, risk parameters, life-cycle risks, risk management strategies, traceability analyses, security experts in contractor selection, and link mitigation measures to plans. The plan would also require master schedules per GAO Schedule Assessment Guide (GAO-16-89G) and cost estimates per GAO Cost Estimating Guide (GAO-20-195G). The Administrator would brief those same committees within 30 days after sending the plan. This bill would not itself provide new funding.

Sponsors & CoSponsors

Sponsor

Schiff, Adam B. [D-CA]

CA • D

Cosponsors

  • Sen. Curtis, John R. [R-UT]

    UT • R

    Sponsored 7/13/2026

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation