arrow_back Back to App

Enhanced Cybersecurity Reporting for Small Business Administration

New rules require the Small Business Administration (SBA) to regularly report on its cybersecurity status. This aims to protect the data of citizens and small businesses using SBA services by increasing transparency and accountability in digital security. In case of serious incidents, the SBA will have to quickly inform Congress and affected parties.
Key points
The SBA will annually assess and report on its digital security, including threats and attacks.
In the event of a serious cyberattack, the SBA must notify Congress within 7 days and provide a detailed report within 30 days.
Reports will include information on the number of affected individuals and businesses, and plans to notify them of the incident.
article Official text account_balance Process page
Expired
Citizen Poll
No votes cast
Additional Information
Print number: 117_S_1691
Sponsor: Sen. Rubio, Marco [R-FL]
Process start date: 2021-05-18