Cybersecurity for Small Businesses Act of 2026
Latest action · Nov 12, 2026 Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedSep 2, 2026
- Passed HouseNov 11, 2026
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Cybersecurity for Small Businesses Act of 2026
This bill requires the Small Business Administration (SBA) to provide cybersecurity information and resources to small businesses, including resources for businesses seeking to contract with the federal government.
Specifically, the SBA must develop and distribute resources to assist small businesses in strengthening their cybersecurity infrastructure and implementing best practices.
Further, in coordination with the Department of Defense (DOD) and other appropriate federal agencies, the SBA must provide information and resources on the Cybersecurity Maturity Model Certification (CMMC) program to small businesses seeking to contract with the federal government. (CMMC is a cybersecurity framework for DOD contractors; certification is mandatory for contractors with access to certain controlled information.) The information and resources provided to small businesses must include certain existing DOD resources.
Finally, the SBA must report annually to Congress with information on small businesses that have contacted the SBA about cybersecurity.
Cosponsors 3
Members who signed on, in the order they did. Signatures ran from Sep 2, 2026 to Sep 14, 2026; 2 are original cosponsors, there from the day it was introduced.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| R-TX | Beth Van Duyne | Original | Sep 2, 2026 |
| R-MP | Kimberlyn King-Hinds | Original | Sep 2, 2026 |
| D-NY | George Latimer | Sep 14, 2026 |
Committees 2
Where it was sent and what each committee and subcommittee did with it, in order.
| Chamber | Committee | What it did |
|---|---|---|
| House | Small Business Committee | Referred Sep 2, 2026Markup Sep 16, 2026Reported Oct 13, 2026 |
| Senate | Small Business and Entrepreneurship Committee | Referred Nov 12, 2026 |
Actions 12
Everything that happened, newest first.
- Nov 12, 2026Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.
- Nov 11, 2026Mr. Williams (TX) moved to suspend the rules and pass the bill, as amended.
- Nov 11, 2026Considered under suspension of the rules.
- Nov 11, 2026DEBATE - The House proceeded with forty minutes of debate on H.R. 10238.
- Nov 11, 2026Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.
- Nov 11, 2026Motion to reconsider laid on the table Agreed to without objection.
- Oct 13, 2026Reported (Amended) by the Committee on Small Business. H. Rept. 119-851.
- Oct 13, 2026Placed on the Union Calendar, Calendar No. 748.
- Sep 16, 2026Committee Consideration and Mark-up Session Held
- Sep 16, 2026Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 23 - 0.
- Sep 2, 2026Introduced in House
- Sep 2, 2026Referred to the House Committee on Small Business.
Research
What has been written about this bill: committee reports, cost estimates, the sponsor’s authority statement, printed hearings and the Congressional Research Service’s work.
Committee report
Constitutional authority
The sponsor’s statement, as printed in the Congressional Record, vol. 172, no. 139, September 2, 2026, page H5478.
Printed hearings 1
Hearings whose printed record names this bill, newest first: hearings on it, and wider hearings where it came up.
Titles 5
Every title it has carried, official and short, at each stage.
- Official Title as Introduced
- To require the Administrator of the Small Business Administration to disseminate to small business concerns certain information and resources relating to cybersecurity matters, and for other purposes.
- Short Title(s) as Introduced
- Cybersecurity for Small Businesses Act of 2026
- Short Title(s) as Reported to House
- Cybersecurity for Small Businesses Act of 2026
- Short Title(s) as Passed House
- Cybersecurity for Small Businesses Act of 2026
- Official Title from EH (Engrossed in House) bill text
- To require the Administrator of the Small Business Administration to disseminate to small business concerns certain information and resources relating to cybersecurity matters, and for other purposes.
Subjects
Assigned by the Library of Congress. Policy area: Commerce.
Text 3
Each version as it was printed, newest first.
- Nov 11, 2026Engrossed in House
- Oct 13, 2026Reported in House
- Sep 2, 2026Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov; cost estimates are the Congressional Budget Office's, and the hearings are the printed hearings GovInfo publishes, which can appear months after the hearing.
