The bill strengthens SBA IT risk management, budgeting, and cybersecurity and increases transparency, but imposes short-term administrative burdens, potential higher procurement costs, and possible reduced vendor competition during implementation.
Small-business owners and borrowers will have stronger protection of sensitive data because the SBA must incorporate cyber risk information into acquisition and strategic plans.
Taxpayers, small-business borrowers, and contractors will face fewer costly IT failures and service disruptions because SBA IT projects will use clearer risk management and GAO cost-estimating guidance for more realistic timelines and budgets.
Taxpayers and Congress will get greater transparency and oversight because the SBA must produce an implementation plan and provide congressional briefings on modernization progress.
Government contractors and taxpayers may incur higher administrative costs and experience slower project delivery because of new documentation, review requirements, and GAO-guided procedures.
Small-business vendors and procurement officials may face reduced competition and higher contracting costs if tighter security and SME participation requirements limit eligible bidders.
Federal employees and SBA clients (small businesses) may see reduced staff attention to services during implementation because increased oversight and reporting will consume staff time.
Based on analysis of 2 sections of legislative text.
Requires the Small Business Administration (SBA), through its Chief Information Officer, to implement the recommendations in GAO report GAO–25–106963 on IT modernization risks and to submit an implementation plan to congressional small business committees within 180 days of enactment. The plan must spell out 11 specific risk-management and project-planning practices, identify the SBA office responsible for each action, include timelines, and the Administrator must brief the same committees within 30 days after submitting the plan. The legislation does not appropriate funds.
Introduced July 17, 2025 by Gilbert Ray Cisneros · Last progress December 2, 2025