United States 115th Congress ✓ Enacted · P.L. 115-236 1 D cosponsors

S 770 — NIST Small Business Cybersecurity Act

Last action — Became Public Law No: 115-236.

  1. ✓
    Introduced
  2. ✓
    In Committee
  3. ✓
    Passed Senate
  4. ✓
    Passed House
  5. ✓
    To Executive
  6. 6
    Enacted

This bill has been enacted into law. Introduced March 29, 2017. Enacted.

Odds of enactment

High chance

Based on the sponsor, cosponsors, and committee posture, this bill has a high chance of becoming law.

Upgrade to see the exact probability and what's driving it.

A statistical estimate from our own model of past outcomes — an insight, not a guarantee. Policymaking is volatile.

Prognosis

Advancing 52% · moderate confidence

  • Enacted

    Current position in the legislative process.

  • 1 sponsor

    1 primary, 0 co-sponsors signed on.

  • Single-party support

    Sponsorship is currently within one party (1 D).

Based on stage, sponsorship breadth, committee status, recorded votes, and cross-state momentum — a description of the observable signals, not a prediction.

Bill Text

What changed in the latest version

64 added · 52 removed

Plain-language change summary

The amendment adds the requirement for the Director of the National Institute of Standards and Technology (NIST) to "consider small business concerns" when disseminating guidance on cybersecurity risks. This change emphasizes the need for the guidance to be tailored to the specific challenges faced by small businesses. Additionally, the requirement to disseminate "resources" was changed to "guidance," potentially indicating a shift towards providing more general recommendations rather than specific tools. The practical effect of these changes is that the approach to supporting small businesses in cybersecurity will take their unique needs into account, promoting a more relevant and effective response to their cybersecurity challenges.

→
Previous
Latest
[Congressional Bills 115th Congress] [From the U.S.
[115th Congress Public Law 236] [From the U.S.
Government Publishing Office] [S.
Government Publishing Office] [[Page 2443]] NIST SMALL BUSINESS CYBERSECURITY ACT [[Page 132 STAT.
770 Engrossed Amendment House (EAH)] <DOC> In the House of Representatives, U.
2444]] Public Law 115-236 115th Congress An Act To require the Director of the National Institute of Standards and Technology to disseminate guidance to help reduce small business cybersecurity risks, and for other purposes.
S., July 25, 2018.
<<NOTE:
Resolved, That the bill from the Senate (S.
Aug.
770) entitled ``An Act to require the Director of the National Institute of Standards and Technology to disseminate resources to help reduce small business cybersecurity risks, and for other purposes.'', do pass with the following AMENDMENTS:
14, - [S.
Strike out all after the enacting clause and insert:
770]>> Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, <<NOTE:
SECTION 1.
NIST Small Business Cybersecurity Act.
15 USC 271 note.>> SECTION 1.
IMPROVING CYBERSECURITY OF SMALL BUSINESSES.
<<NOTE:
15 USC 272 note.>> IMPROVING CYBERSECURITY OF SMALL BUSINESSES.
(c) Dissemination of Resources for Small Businesses.-- (1) In general.--Not later than one year after the date of the enactment of this Act, the Director, in carrying out section 2(e)(1)(A)(viii) of the National Institute of Standards and Technology Act, as added by subsection (b) of this Act, in consultation with the heads of other appropriate Federal agencies, shall disseminate clear and concise resources to help small business concerns identify, assess, manage, and reduce their cybersecurity risks.
(c) Dissemination of Resources for Small Businesses.-- (1) <<NOTE:
Deadline.
Consultation.>> In general.--Not later than one year after the date of the enactment of this Act, the Director, in carrying out section 2(e)(1)(A)(viii) of the National Institute of Standards and Technology Act, as added by subsection (b) of this Act, in consultation with the heads of other appropriate Federal agencies, shall disseminate clear and concise resources to help small business concerns identify, assess, manage, and reduce their cybersecurity risks.
(B) vary with the nature and size of the implementing small business concern, and the nature and sensitivity of the data collected or stored on the information systems or devices of the implementing small business concern;
(B) vary with the nature and size of the implementing small business concern, and the nature and sensitivity [[Page 132 STAT.
2445]] of the data collected or stored on the information systems or devices of the implementing small business concern;
et seq.).
3701 et seq.).
(6) Updates.--The Director shall review and, if necessary, update the resources disseminated under paragraph (1) in accordance with the requirements under paragraph (2).
(6) <<NOTE:
(7) Public availability.--The Director and the head of each Federal agency that so elects shall make prominently available on the respective agency's public Internet website information about the resources and updates to the resources disseminated under paragraph (1).
Review.>> Updates.--The Director shall review and, if necessary, update the resources disseminated under paragraph (1) in accordance with the requirements under paragraph (2).
(7) <<NOTE:
Web posting.>> Public availability.--The Director and the head of each Federal agency that so elects shall make prominently available on the respective agency's public Internet website information about the resources and updates to the resources disseminated under paragraph (1).
(e) Funding.--This Act shall be carried out using funds otherwise authorized to be appropriated or made available to the National Institute of Standards and Technology.
[[Page 132 STAT.
Amend the title so as to read:
2446]] (e) Funding.--This Act shall be carried out using funds otherwise authorized to be appropriated or made available to the National Institute of Standards and Technology.
``An Act to require the Director of the National Institute of Standards and Technology to disseminate guidance to help reduce small business cybersecurity risks, and for other purposes.''.
Approved August 14, 2018.
Attest:
LEGISLATIVE HISTORY--S.
Clerk.
770 (H.R.
115th CONGRESS 2d Session S.
2105):
770 _______________________________________________________________________ AMENDMENTS
--------------------------------------------------------------------------- SENATE REPORTS:
No.
115-153 (Comm.
on Commerce, Science, and Transportation).
CONGRESSIONAL RECORD:
Vol.
163 (2017):
Sept.
28, considered and passed Senate.
Vol.
164 (2018):
July 25, considered and passed House, amended.
Aug.
Show all 42 changed rows (2 more)
Previous
Latest
1, Senate concurred in House amendments.
<all>
⬇ Download PDF
View plain text versions (6)

Action History

  1. Introduced in Senate

  2. Read twice and referred to the Committee on Commerce, Science, and Transportation.

  3. Committee on Commerce, Science, and Transportation. Ordered to be reported with an amendment in the nature of a substitute favorably.

  4. Committee on Commerce, Science, and Transportation. Reported by Senator Thune with an amendment in the nature of a substitute. With written report No. 115-153.

  5. Committee on Commerce, Science, and Transportation. Reported by Senator Thune with an amendment in the nature of a substitute. With written report No. 115-153.

  6. Placed on Senate Legislative Calendar under General Orders. Calendar No. 217.

  7. Measure laid before Senate by unanimous consent. (consideration: CR S6232-6233)

  8. The committee substitute as amended agreed to by Unanimous Consent.

  9. Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.(text: CR S6233)

  10. Passed Senate with an amendment by Unanimous Consent. (text: CR S6233)

  11. Message on Senate action sent to the House.

  12. Received in the House.

  13. Held at the desk.

  14. Committee on Small Business and Entrepreneurship. Hearings held. Hearings printed: S.Hrg. 115-300.

  15. Mr. Webster (FL) asked unanimous consent to take from the Speaker's table and consider.

  16. Considered by unanimous consent. (consideration: CR H7201-7202)

  17. Passed/agreed to in House: On passage Passed without objection.(text: CR H7201)

  18. On passage Passed without objection. (text: CR H7201)

  19. Motion to reconsider laid on the table Agreed to without objection.

  20. The title of the measure was amended. Agreed to without objection.

  21. Message on House action received in Senate and at desk: House amendments to Senate bill.

  22. Resolving differences -- Senate actions: Senate agreed to the House amendments to S. 770 by Unanimous Consent.(text as Senate agree to the House amendment: CR S5561)

  23. Senate agreed to the House amendments to S. 770 by Unanimous Consent. (text as Senate agree to the House amendment: CR S5561)

  24. Message on Senate action sent to the House.

  25. Presented to President.

  26. Presented to President.

  27. Signed by President.

  28. Signed by President.

  29. Became Public Law No: 115-236.

  30. Became Public Law No: 115-236.

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 546 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (546)

546 members have not signed on to this bill.

Show all 546 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

Who sponsors S 770?
S 770 is sponsored by Schatz, Brian (Democratic).
What is the current status of S 770?
This bill has been enacted into law. Introduced March 29, 2017. Enacted.
Where can I track S 770?
Track S 770 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on S 770

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of S 770

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →