H.R. 10238

In plain English

Cybersecurity for Small Businesses Act of 2026 This bill requires the Small Business Administration (SBA) to provide cybersecurity information and resources to small businesses, including resources for businesses seeking to contract with the federal government. Specifically, the SBA must develop and distribute resources to assist small businesses in strengthening their cybersecurity infrastructure and implementing best practices. Further, in coordination with the Department of Defense (DOD) and other appropriate federal agencies, the SBA must provide information and resources on the Cybersecurity Maturity Model Certification (CMMC) program to small businesses seeking to contract with the federal government. (CMMC is a cybersecurity framework for DOD contractors; certification is mandatory for contractors with access to certain controlled information.) The information and resources provided to small businesses must include certain existing DOD resources. Finally, the SBA must report annually to Congress with information on small businesses that have contacted the SBA about cybersecurity.

Congressional Research Service summary from Congress.gov (not yet simplified).

Sponsor and status

Loading from Congress.gov…

How South Carolina voted

No recorded roll-call vote on this bill yet. Most bills never get one.

Who lobbied

Lobbying reports name the bills a client worked on. They don't say which side anyone took.

No lobbying reported on this bill in the reports we have loaded (January 2025 through September 2026). Lobbyists report each quarter, about 20 days after it ends, so any lobbying since October 2026 will be added once those reports are filed.