A Republican bill with 1 Democratic cosponsor · See all 3 cosponsors
Last activity — Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.
In the other chamber's committee
Passed one chamber and has been handed to a committee in the other.
The committee decides whether it goes any further, and most bills that reach a committee never leave it. A committee that simply does nothing kills a bill without anyone ever voting against it, so no news from here is usually the news.
Its path through Congress
- Introduced
- Passed House voice vote
- In Senate committee
The House by voice vote (members called out yes or no together): no member's position on it was recorded.
What this bill would do
The Cybersecurity for Small Businesses Act of 2026 requires the Small Business Administration Administrator to share cybersecurity information and resources with small businesses. This is done by working with the Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology. The bill also directs the Small Business Administration to provide information and resources about the Cybersecurity Maturity Model Certification program to small businesses seeking federal contracts or subcontracts. Additionally, the Administrator must publish this information on a website and include it in outreach and communications. Finally, the Administrator must submit an annual report to Congress detailing the number and description of small businesses that contacted the Administrator about cybersecurity matters.
Yes· 3 of 10
- Scored +9
Would business owners be better off under this?
Provides direct support, resources, and compliance guidance for small business owners.
- Scored +8
Does this make it easier to run a small business?
Provides critical cybersecurity resources and compliance guidance specifically for small business concerns.
- Scored +6
Does this better protect the country from computer attacks?
Strengthens the cybersecurity posture of small businesses, which often serve as entry points in supply chain attacks.
The opposite
No question was scored the opposite.
How the text last changed
Reported in House (10/13/2026), compared with Introduced in House. Each change is on the Text tab.
The newer version of the bill adds the Director of the National Institute of Standards and Technology to the officials working on general cybersecurity resources for small businesses. It shifts the focus of specific federal contracting help from general cybersecurity compliance to the Cybersecurity Maturity Model Certification program, while updating who provides and distributes these resources. The annual report to Congress on small businesses contacting officials with cybersecurity matters now goes to the Administrator of the Small Business Administration instead of the Chief Counsel for Advocacy, with the first report still due not later than 90 days after the date of the enactment of this Act, and annually thereafter.
Who it would affect, and how
Potential Positive Impacts for People
-
Section 2: This section helps small businesses by requiring the Small Business Administration to develop and share information and resources to strengthen their cybersecurity infrastructure and implement best practices.
-
Section 3(a): This provision assists small businesses wanting to work with the federal government by providing them with resources regarding the Cybersecurity Maturity Model Certification program.
-
Section 3(d): This part holds the government accountable by requiring an annual report to Congress on how many small businesses reached out for help with cybersecurity.
Potential Negative Impacts for People
- There are no negative impacts explicitly found within the text of the provided bill.
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Tap or hover a score for the reason it gave.
- Economy And Finance
- Does this make it easier to run a small business? — Provides critical cybersecurity resources and compliance guidance specifically for small business concerns. Does this give people more protection from unfair business practices? — Better cybersecurity for small businesses indirectly protects the consumer data they hold. Is this likely to grow the economy? — Improving cybersecurity for small businesses protects them from costly data breaches and financial loss.
- Demographic And Interest Groups
- Would business owners be better off under this? — Provides direct support, resources, and compliance guidance for small business owners. Would farmers be better off under this? — Agricultural small businesses can leverage these cybersecurity resources.
- National Security And Foreign Policy
- Does this better protect the country from computer attacks? — Strengthens the cybersecurity posture of small businesses, which often serve as entry points in supply chain attacks.
- Education And Technology
- Does this give people more control over their personal data? — Resources for best practices in cybersecurity will likely increase the data privacy protections of small businesses.
- Governance And Ideology
- Does this make what the government does easier for the public to see? — Requires annual reporting to Congress on cybersecurity matters affecting small businesses. Does this give the federal government more power? — Mandates the SBA to take a more active role in disseminating cybersecurity standards.
- Environment Energy And Infrastructure
- Does this invest in rural communities? — Small businesses in rural areas benefit from improved cybersecurity resources.
The version one chamber actually passed
What changed from Reported in House: No change to the wording. Only the printed details that record the bill’s progress, such as the heading and dates, are different.
A committee approved it and sent it to the floor
What changed from Introduced in House
The newer version of the bill adds the Director of the National Institute of Standards and Technology to the officials working on general cybersecurity resources for small businesses. It shifts the focus of specific federal contracting help from general cybersecurity compliance to the Cybersecurity Maturity Model Certification program, while updating who provides and distributes these resources. The annual report to Congress on small businesses contacting officials with cybersecurity matters now goes to the Administrator of the Small Business Administration instead of the Chief Counsel for Advocacy, with the first report still due not later than 90 days after the date of the enactment of this Act, and annually thereafter.
Each change
-
Section 2: Adds the Director of the National Institute of Standards and Technology to the officials the Administrator of the Small Business Administration must consult with to develop and disseminate cybersecurity information and resources for small business concerns.
-
Section 3(a): Changes the focus of resources for small businesses seeking federal contracts from general cybersecurity compliance to the Cybersecurity Maturity Model Certification program, updates the Administrator's role from disseminating information to providing information and resources in coordination with the Secretary of Defense and other agencies, removes the requirement to use small business development centers and district offices to facilitate compliance, and adds resources produced and provided by three specific Department of Defense or defense-related programs.
-
Section 3(d): Replaces the Chief Counsel for Advocacy with the Administrator of the Small Business Administration as the person responsible for submitting the annual report to Congress, and specifies that the report includes contacts regarding the cybersecurity of small business concerns.
Written by an AI model from a comparison of this version’s text with the one before it, not by a person. .
-
- 11/12/2026
- Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.
- 11/11/2026
- Motion to reconsider laid on the table Agreed to without objection.
- Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.
- On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.
- DEBATE - The House proceeded with forty minutes of debate on H.R. 10238.
- Considered under suspension of the rules.
- Mr. Williams (TX) moved to suspend the rules and pass the bill, as amended.
- 10/13/2026
- Reported (Amended) by the Committee on Small Business. H. Rept. 119-851.
- Placed on the Union Calendar, Calendar No. 748.
- 9/16/2026
- Committee Consideration and Mark-up Session Held
- Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 23 - 0.
- 9/14/2026
- 1 Cosponsor added.
- 9/2/2026
- Referred to the House Committee on Small Business.
- 2 Cosponsors added.
- Introduced in House
Kimberlyn King-HindsRepublican · Northern Mariana Islands
George LatimerDemocrat · New York
Beth Van DuyneRepublican · Texas