H.R. 2105 · 115th Congress
NIST Small Business Cybersecurity Act of 2017
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Passed the House without a recorded vote, then expired. It passed by voice vote or unanimous consent, which don't record how each member voted, but didn't become law before the 115th Congress ended.
R
WebsterSponsor17 cosponsors · 4 D, 13 R
R
Comstock
RH
R
Hultgren
SK
R
Knight
DL
D
Lipinski
DL
R
LaHood
RM
R
Marshall
BP
R
Posey
JR
D
Rosen
LS
R
Smith
CT
R
Tenney
ND
R
Dunn
FL
R
Lucas
SB
D
Bonamici
JM
D
McNerney
ER
R
Royce
DT
R
Trott
DB
R
Bacon9 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
- House Introduced Apr 20, 2017
- House Passed Oct 11, 2017
NIST must consult with other federal agencies to disseminate, and publish on its website, standard and method resources that small business may use voluntarily to help identify, assess, manage, and reduce their cybersecurity risks.
What it does: CRS summary · Passed House amended · Oct 11, 2017
NIST Small Business Cybersecurity Act
(Sec. 2) This bill amends the National Institute of Standards and Technology Act to require the National Institute of Standards and Technology (NIST) to consider small businesses when it facilitates and supports the development of voluntary, consensus-based, industry-led guidelines and procedures to cost-effectively reduce cyber risks to critical infrastructure.
NIST must consult with other federal agencies to disseminate, and publish on its website, standard and method resources that small business may use voluntarily to help identify, assess, manage, and reduce their cybersecurity risks. The resources must: (1) include case studies of practical application, (2) be based on international standards to the extent possible, (3) be able to vary with the nature and size of the implementing small business and the sensitivity of the data collected or stored on the information systems, (4) be capable of promoting awareness of third-party stakeholder relationships to assist small businesses in mitigating common cybersecurity risks, and (5) be consistent with the national cybersecurity awareness and education program under the Cybersecurity Enhancement Act of 2014.
Other federal agencies may elect to publish the resources on their own websites.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: NIST Small Business Cybersecurity Act
Latest action (Oct 16, 2017): Received in the Senate and Read twice and referred to the Committee on Commerce, Science, and Transportation.
Policy area: Science, Technology, Communications · Origin: House · Introduced: Apr 20, 2017
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
- House Introduced Apr 20, 2017
- House Passed Oct 11, 2017
No recorded floor vote found.