Small Business Cyber Training Act of 2022

136 STAT. 4424 PUBLIC LAW 117–319—DEC. 27, 2022 Public Law 117–319 117th Congress An Act To amend section 21 of the Small Business Act to require cyber certification for small business development center counselors, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ‘‘Small Business Cyber Training Act of 2022’’. SEC. 2. DUTIES OF SMALL BUSINESS DEVELOPMENT CENTER COUN- SELORS. (a) CYBER TRAINING.—Section 21 of the Small Business Act (15 U.S.C. 648) is amended by adding at the end the following: ‘‘(o) CYBER STRATEGY TRAINING FOR SMALL BUSINESS DEVELOP- MENT CENTERS.— ‘‘(1) DEFINITIONS.—In this subsection— ‘‘(A) the term ‘cyber strategy’ means resources and tactics to assist in planning for cybersecurity and defending against cyber risks and attacks; and ‘‘(B) the term ‘lead small business development center’ means a small business development center that receives reimbursement from the Administrator under paragraph (5). ‘‘(2) CERTIFICATION PROGRAM.—The Administrator shall establish a cyber counseling certification program, or designate 1 or more substantially similar governmental or private cyber- security certification programs, to certify the employees of lead small business development centers in providing cyber planning assistance to small business concerns. ‘‘(3) NUMBER OF CERTIFIED EMPLOYEES.—The Administrator shall ensure that the number of employees of each lead small business development center who are certified in providing cyber planning assistance is not less than the lesser of— ‘‘(A) 5; or ‘‘(B) 10 percent of the total number of employees of the lead small business development center. ‘‘(4) CYBER STRATEGY.—In carrying out paragraph (2), the Administrator, to the extent practicable, shall consider any cyber strategy methods included in the Small Business Develop- ment Center Cyber Strategy developed under section 1841(a)(3)(B) of the National Defense Authorization Act for Fiscal Year 2017 (Public Law 114–328; 130 Stat. 2662). ‘‘(5) REIMBURSEMENT FOR CERTIFICATION.— 15 USC 631 note. Small Business Cyber Training Act of 2022. Dec. 27, 2022 [S. 1687] VerDate Sep 11 2014 01:49 Jan 12, 2023 Jkt 039139 PO 00319 Frm 00001 Fmt 6580 Sfmt 6581 E:\PUBLAW\PUBL319.117 PUBL319 kcroghan on LAP7511N33PROD with PUBLAWS 136 STAT. 4425 PUBLIC LAW 117–319—DEC. 27, 2022 LEGISLATIVE HISTORY—S. 1687: CONGRESSIONAL RECORD, Vol. 168 (2022): Sept. 28, considered and passed Senate. Dec. 5, considered in House. Dec. 6, prior proceedings vacated; considered and passed House, amended. Dec. 14, Senate concurred in House amendment. Æ ‘‘(A) IN GENERAL.—Subject to the availability of appro- priations, the Administrator may reimburse each lead small business development center for costs relating to the certifi- cation of 1 or more employees of the lead small business center in providing cyber planning assistance under a pro- gram established or designated under paragraph (2). ‘‘(B) LIMITATION.—The total amount reimbursed by the Administrator under subparagraph (A) may not exceed $350,000 in any fiscal year.’’. (b) IMPLEMENTATION.—Not later than 180 days after the date of enactment of this Act, the Administrator of the Small Business Administration shall implement paragraphs (2), (3), and (4) of sec- tion 21(o) of the Small Business Act, as added by subsection (a). Approved December 27, 2022. Deadline. 15 USC 648 note. VerDate Sep 11 2014 01:49 Jan 12, 2023 Jkt 039139 PO 00319 Frm 00002 Fmt 6580 Sfmt 6580 E:\PUBLAW\PUBL319.117 PUBL319 kcroghan on LAP7511N33PROD with PUBLAWS