Cybersecurity for Small Businesses Act of 2026
13 October 2026 | Reported by committee (Small Business, as amended, H. Rept. 119-851)
What's next: Floor scheduling (leadership decides if and when it gets a vote)
Official summary (Congressional Research Service, Reported to House): Cybersecurity for Small Businesses Act of 2026
This bill requires the Small Business Administration (SBA) to provide cybersecurity information and resources to small businesses, including resources for businesses seeking to contract with the federal government.
Specifically, the SBA must develop and distribute resources to assist small businesses in strengthening their cybersecurity infrastructure and implementing best practices.
Further, in coordination with the Department of Defense (DOD) and other appropriate federal agencies, the SBA must provide information and resources on the Cybersecurity Maturity Model Certification (CMMC) program to small businesses seeking to contract with the federal government. (CMMC is a cybersecurity framework for DOD contractors; certification is mandatory for contractors with access to certain controlled information.) The information and resources provided to small businesses must include certain existing DOD resources.
Finally, the SBA must report annually to Congress with information on small businesses that have contacted the SBA about cybersecurity.
Posted 14 October 2026
Sign in to vote or follow