Congress orders audit of small-business cybersecurity help

What it does

This bill directs the Government Accountability Office (GAO) to study what federal cybersecurity help is available to small businesses, how well small businesses know about and use these programs, and whether they actually work. The GAO will report back to Congress with findings and recommendations on how to improve coordination and effectiveness of federal cybersecurity assistance for small firms. No new money is authorized.

Why we flagged it

The bill's sole operative mechanism is a mandated GAO study of existing federal small-business cybersecurity programs. It is a fact-finding and accountability measure, not a new program, subsidy, or regulatory change.

What the text implies

• Study findings may expose coordination failures or redundancy among federal agencies, potentially triggering reorganization or consolidation of cybersecurity assistance programs.
• GAO recommendations could form the basis for future legislation expanding or restructuring federal cybersecurity support, making this a precursor to larger policy changes.
• Awareness assessment may reveal that small businesses are underutilizing existing free or low-cost federal resources, suggesting a communication/outreach problem rather than a resource shortage.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Small businesses are a significant part of the economy and workforce; they face growing cyber threats but often lack resources to defend themselves. A comprehensive audit of existing federal assistance programs—identifying gaps, coordination failures, and awareness problems—creates the factual foundation for better policy. The study itself costs nothing new and produces public information that can guide future improvements.

Named in the bill

Government Accountability Office (GAO), Comptroller General, Small Business Administration (SBA), House Committee on Small Business, Senate Committee on Small Business and Entrepreneurship, Small Business Act (section 3 definition)

Where it stands

1 cosponsor: 1 Republicans.

• May 19, 2026 — Introduced · Congress.gov: “Introduced in House”
• May 19, 2026 — Referred to House Committee on Small Business and Senate Committee on Homeland Security and Governmental Affairs · Congress.gov: “Referred to the House Committee on Small Business”
• May 20, 2026 — Markup held in committee · Congress.gov: “Committee Consideration and Mark-up Session Held”
• May 20, 2026 — Reported out of committee · Congress.gov: “Ordered to be Reported by the Yeas and Nays: 23 - 0”
• Jun 23, 2026 — Passed the House · Congress.gov: “On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H4146-4147)”
• Jun 23, 2026 — Floor vote scheduled · Congress.gov: “Mr. Williams (TX) moved to suspend the rules and pass the bill, as amended”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $2,690,000 in lobbying spend. A filing names 25 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 0% of bills with at least one filing.

Lateefah Simon, the sponsor, reported $282,970 in PAC receipts in the 2026 cycle.

• Microsoft Corporation — $2,690,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.