To require the Administrator of the Small Business Administration to disseminate to small business concerns certain information and resources relating to cybersecurity matters, and for other purposes.
Require the Small Business Administration to disseminate cybersecurity information and resources to small businesses.
Occurrences
H.R. 10238 : “Cybersecurity for Small Businesses Act of 2026” — introduced by Reps. Wied (R-WI), Van Duyne (R-TX), Del. King-Hinds (R-CNMI), and Latimer (D-NY) This bill requires the SBA to provide small businesses with resources to strengthen their cybersecurity infrastructure and promote cybersecurity best practices. This bill also requires the SBA to provide small businesses with compliance guidance regarding the Cybersecurity Maturity Model Certification (CMMC) program.
To require the Administrator of the Small Business Administration to disseminate to small business concerns certain information and resources relating to cybersecurity matters, and for other purposes.
Evidence
legacy_unverified · Source version not recorded · locator unknown
H.R. 10238 was introduced by Mr. Wied on September 2, 2026 and referred to the House Committee on Small Business. The bill text would require the SBA Administrator, in consultation with CISA, to develop and disseminate cybersecurity information and resources for small business concerns.
legacy_unverified · Source version not recorded · locator unknown
Wied's House media page lists a September 3, 2026 press release stating that the Cybersecurity for Small Businesses Act requires SBA to work with CISA to provide small businesses with information on cybersecurity best practices.
Assessments
Tony Wied introduced H.R. 10238 in the 119th Congress to require SBA, in consultation with CISA, to disseminate cybersecurity information and resources to small businesses. That closely matches the promise and qualifies as a serious legislative effort. However, the bill record shows only introduction and referral to the House Small Business Committee, with no passage, enactment, or SBA implementation of the requirement. The promised outcome has therefore not been delivered.