Small Business Cyber Security Improvements Act of 2016

(This measure has not been amended since it was introduced. The summary has been expanded because action occurred on the measure.)

Small Business Cyber Security Improvements Act of 2016

(Sec. 2) This bill amends the Small Business Act to authorize the Small Business Administration (SBA) to make grants to small business development centers (SBDCs) in furtherance of a Small Business Development Center Cyber Strategy to be developed by the SBA and the Department of Homeland Security (DHS) after the Government Accountability Office (GAO) submits a report that reviews the cybersecurity resources of federal agencies aimed at assisting small businesses.

SBDCs shall provide access to external cyber security specialists to counsel small businesses.

(Sec. 3) DHS and other federal agencies coordinating with DHS may assist SBDCs, through the dissemination of cyber security risk information and other homeland security information, to help small businesses in developing such cyber security infrastructure, threat awareness, and employee training programs.

(Sec. 4) The GAO's cyber resources report must include: (1) an accounting, description, and assessment of the utilization of federal agency programs that provide cybersecurity assistance to small businesses; and (2) an assessment of whether the resources are duplicative of other programs or accessible to small businesses.

The SBA and DHS must include in their SBDC cyber strategy:

• plans for incorporating SBDCs into cyber programs to assist small businesses;
• counsel and assistance to improve small businesses' cyber security infrastructure, threat awareness, and training programs for employees, including agreements with Information Sharing and Analysis Centers to gain awareness of actionable threat information that may be beneficial to small businesses; and
• an analysis of how SBDCs can leverage federal agency programs and develop partnerships to improve cyber support services to small businesses.

The SBA's and DHS's strategy must be developed in consultation with entities representing SBDC concerns and submitted to Congress.