Skip to main content
CivicGate

S 5291
Introduced Re-checks Congress.gov for new actions and updates the bill's status, and fills in any sponsors, committees, or related bills that are missing. It does not re-pull sponsors/cosponsors/committees/related — those rarely change — and it skips all work if nothing has changed upstream, so it's cheap to click.

Small Business Cybersecurity Assistance Evaluation Act of 2026

To require the Comptroller General to evaluate Federal cybersecurity assistance to small business concerns, and for other purposes.

Introduced Aug 6, 2026

Latest action (Aug 6, 2026) Read twice and referred to the Committee on Small Business and Entrepreneurship.

Referred to
Small Business and Entrepreneurship Committee
Policy area
Commerce
Issues
Technology & Privacy

Summary
  • Requires the Comptroller General to study Federal cybersecurity initiatives, programs, resources, tools, and services available to assist small businesses.
  • Requires the study to assess small business awareness and use of Federal cybersecurity assistance and the coordination and integration among these programs.
  • Requires the study to evaluate the effectiveness of Federal cybersecurity assistance in helping small businesses identify risks, assess preparedness, mitigate attacks, and obtain capital for cybersecurity improvements.
  • Requires the study to identify any missing foundational cybersecurity concepts from Federal programs and provide recommendations to improve effectiveness, awareness, and coordination.
  • Requires the Comptroller General to submit the study findings and recommendations to Congress.

AI-generated plain-language summary of the bill text — neutral, and may be imperfect. See the full text below for the exact wording.

Sponsor (1)
1 cosponsor

Actions (2)
  1. Aug 6, 2026 Read twice and referred to the Committee on Small Business and Entrepreneurship. · senate
  2. Aug 6, 2026 Introduced in Senate

Text versions (1)
  • Introduced in Senate · Aug 6, 2026

Only one text version is on file, so there’s no earlier version to compare against yet.

Full text

IN THE SENATE OF THE UNITED STATES

August 6, 2026

Mr. Schiff (for himself and Mr. Young) introduced the following bill; which was read twice and referred to the Committee on Small Business and Entrepreneurship

A BILL

To require the Comptroller General to evaluate Federal cybersecurity assistance to small business concerns, and for other purposes.

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

This Act may be cited as the “Small Business Cybersecurity Assistance Evaluation Act of 2026”.

SEC. 2. GAO STUDY ON SMALL BUSINESS CYBERSECURITY ASSISTANCE.

(a) Small Business Concern Defined.—In this section, the term “small business concern” has the meaning given the term in section 3 of the Small Business Act (15 U.S.C. 632).

(b) Study.—The Comptroller General of the United States shall conduct a study of available Federal cybersecurity initiatives, programs, resources, tools, and services intended to assist owners of small business concerns with—

(1) identifying cyber risks, cyber threats, and cybersecurity vulnerabilities relating to small business concerns;

(2) assessing the preparedness of small business concerns for the risks, threats, and vulnerabilities described in paragraph (1);

(3) planning for, mitigating, and recovering from cyber attacks and incidents of social engineering, scams, and fraud, including developing, adopting, and implementing cybersecurity measures, training, protocols, tools, and infrastructure; and

(4) identifying sources of capital, or obtaining capital, to carry out the activities described in paragraphs (1), (2), and (3).

(c) Required Content.—The study required under subsection (b) shall include—

(1) information on the most common cyberattacks affecting small business concerns;

(2) an identification and description of the Federal cybersecurity initiatives, programs, resources, tools, and services included in the study;

(3) an assessment of the awareness and use of those Federal cybersecurity initiatives, programs, resources, tools, and services by small business concerns and reasons for differences in levels of such awareness and use;

(4) an assessment of the coordination and integration among those Federal cybersecurity initiatives, programs, resources, tools, and services;

(5) an assessment of the effectiveness of those Federal cybersecurity initiatives, programs, resources, tools, and services in assisting small business concerns with the activities described in paragraphs (1) through (4) of subsection (b);

(6) an identification of any foundational cybersecurity concepts absent from those Federal cybersecurity initiatives, programs, resources, tools, and services; and

(7) recommendations on how to improve the effectiveness, awareness, and coordination of those Federal cybersecurity initiatives, programs, resources, tools, and services for small business concerns.

(d) Report.—The Comptroller General of the United States shall submit to the Committee on Small Business and Entrepreneurship of the Senate and the Committee on Small Business of the House of Representatives a report containing all findings and determinations made in carrying out the study required under subsection (b).

(e) No Additional Funds.—No additional amounts are authorized to carry out this Act. <all>

Comments

Comments

Loading comments…