Small Business Cybersecurity Assistance Evaluation Act of 2026

Floor Speech

BREAK IN TRANSCRIPT

Mr. WILLIAMS of Texas. Mr. Speaker, I move to suspend the rules and pass the bill (H.R. 8880) to require the Comptroller General to evaluate Federal cybersecurity assistance to small business concerns, and for other purposes, as amended.

The Clerk read the title of the bill.

The text of the bill is as follows: H.R. 8880

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE.

This Act may be cited as the ``Small Business Cybersecurity Assistance Evaluation Act of 2026''. SEC. 2. GAO STUDY ON SMALL BUSINESS CYBERSECURITY ASSISTANCE.

(a) Study.--The Comptroller General of the United States shall conduct a study of current Federal cybersecurity initiatives, programs, resources, tools, and services intended to assist owners of small business concerns (as defined under section 3 of the Small Business Act (15 U.S.C. 632)) with--

(1) identifying cyber risks, cyber threats, and cybersecurity vulnerabilities relating to such concerns;

(2) assessing the preparedness of such concerns for such risks, threats, and vulnerabilities;

(3) planning for, mitigating, and recovering from cyberattacks and incidents of social engineering, scams, and fraud (including developing, adopting, and implementing cybersecurity measures, training, protocols, tools, and infrastructure); and

(4) identifying sources of capital, or obtaining capital, to carry out the activities specified in paragraphs (1), (2), and (3).

(b) Required Content.--The study required by subsection (a) shall include--

(1) information on the most common cyberattacks affecting small business concerns;

(2) an identification and description of the Federal cybersecurity initiatives, programs, resources, tools, and services included in the study described in subsection (a);

(3) an assessment of the awareness and use of such Federal cybersecurity initiatives, programs, resources, tools, and services by small business concerns and reasons for differences in levels of such awareness and use;

(4) an assessment of the coordination and integration among such Federal cybersecurity initiatives, programs, resources, tools, and services;

(5) an assessment of the effectiveness of such Federal cybersecurity initiatives, programs, resources, tools, and services in assisting small business concerns with the activities listed in paragraphs (1) through (4) of subsection (a);

(6) an identification of any foundational cybersecurity concepts absent from such Federal cybersecurity initiatives, programs, resources, tools, and services; and

(7) recommendations on how to improve the effectiveness, awareness, and coordination of such Federal cybersecurity initiatives, programs, resources, tools, and services for small business concerns.

(c) Report.--The Comptroller General shall submit to the Committee on Small Business of the House of Representatives and the Committee on Small Business and Entrepreneurship of the Senate a report containing all findings and determinations made in carrying out the study required under subsection (a). SEC. 3. COMPLIANCE WITH CUTGO.

No such funds are authorized to be appropriated to carry out this Act.

Mr. Speaker, I rise today in strong support of H.R. 8880, the Small Business Cybersecurity Assistance Evaluation Act of 2026, introduced by the gentlewoman from California (Ms. Simon) and the gentleman from Pennsylvania (Mr. Bresnahan), my friends.

Small businesses are facing a growing wave of cybersecurity threats from ransomware attacks, phishing scams, and fraud schemes. Unfortunately, many small businesses lack the financial resources and technological expertise necessary to defend themselves against increasingly sophisticated crimes.

Data indicates that small businesses are 210 percent more likely to experience a cyber incident than larger companies. At the same time, 51 percent of small businesses reported having no cybersecurity measures in place, leaving them particularly vulnerable to malicious cyber activity.

As artificial intelligence becomes more and more prevalent, threat actors are increasingly using AI-generated content and impersonation schemes to target small business owners and their employees. These developments raise questions about the extent to which existing cybersecurity resources and Federal support adequately address the risks small businesses face.

While the Federal Government currently offers a variety of cybersecurity programs, tools, resources, and even services to assist small business, it is often unclear whether businessowners are aware of the resources available, whether they are utilizing them, and whether gaps exist in current Federal efforts.

H.R. 8880 takes a practical approach. This bill directs GAO to evaluate how Federal agencies help small businesses identify cybersecurity risks and vulnerabilities, assess preparedness for small businesses to have a plan for and recover from cyberattacks, and access resources needed to strengthen their cybersecurity infrastructure.

This legislation also directs the GAO to assess the awareness, coordination, accessibility, and effectiveness of existing Federal cybersecurity assistance programs and identify opportunities for improvement. By examining what works and what needs additional attention, Congress can better ensure that resources reach the small businesses it serves.

As cyber threats continue to evolve, small businesses need access to effective tools, training, and resources to protect their operations, employees, and customers. This legislation will provide Congress with valuable information to strengthen cybersecurity assistance and help ensure Main Street businesses are better prepared for the challenges of the digital age.

Mr. Speaker, I urge all my colleagues to support H.R. 8880, and I reserve the balance of my time.

BREAK IN TRANSCRIPT

Mr. WILLIAMS of Texas. Mr. Speaker, we must pass H.R. 8880 to help identify gaps, improve coordination, and ensure those resources effectively address cyber threats facing small businesses.

BREAK IN TRANSCRIPT

Mr. WILLIAMS of Texas. Mr. Speaker, I urge my colleagues to vote in favor of H.R. 8880 to help strengthen cybersecurity, support small businesses, and ensure Federal resources are being used effectively to protect from growing cyber risks, and I yield back the balance of my time.

BREAK IN TRANSCRIPT

Source