Cybersecurity for Small Businesses Act of 2026
Bill journey · stage 2 of 5
Under committee review
What it doesSummary reported to house (Oct 13, 2026)
Cybersecurity for Small Businesses Act of 2026
This bill requires the Small Business Administration (SBA) to provide cybersecurity information and resources to small businesses, including resources for businesses seeking to contract with the federal government.
Specifically, the SBA must develop and distribute resources to assist small businesses in strengthening their cybersecurity infrastructure and implementing best practices.
Further, in coordination with the Department of Defense (DOD) and other appropriate federal agencies, the SBA must provide information and resources on the Cybersecurity Maturity Model Certification (CMMC) program to small businesses seeking to contract with the federal government. (CMMC is a cybersecurity framework for DOD contractors; certification is mandatory for contractors with access to certain controlled information.) The information and resources provided to small businesses must include certain existing DOD resources.
Finally, the SBA must report annually to Congress with information on small businesses that have contacted the SBA about cybersecurity.
What just happenedOct 13, 2026
Placed on the Union Calendar, Calendar No. 748.
Who’s behind it
- Introduced in HouseSep 2, 2026
- Sep 16, 2026Committee
Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 23 - 0.
Small Business Committee - Sep 16, 2026Committee
Committee Consideration and Mark-up Session Held
Small Business Committee - Sep 2, 2026IntroReferralH11100
Referred to the House Committee on Small Business.
Small Business Committee - Sep 2, 2026IntroReferralIntro-H
Introduced in House
- Sep 2, 2026IntroReferral1000
Introduced in House