Why it Matters

Small business cybersecurity is the subject of a House hearing that puts federal contractors' security obligations in front of the House Small Business Committee. The panel will hold "Protecting Main Street, Securing America: Examining Cybersecurity Challenges for Small Business Contractors" on Nov. 18, in its Subcommittee on Contracting and Infrastructure. ​

Rep. Roger Williams (R-TX-25) is the full committee's Chair, and Rep. Nydia Velázquez (D-NY-7) is its Ranking Member. The subcommittee is led by Chair Rep. Tony Wied (R-WI-8) and Ranking Member Rep. Gil Cisneros (D-CA-31).

Broader Context

On Nov. 11, the House passed two small business bills by voice vote, including measures directing the Small Business Administration (SBA) to provide cybersecurity resources and guidance to small businesses, Inside Defense reported. One is the Cybersecurity for Small Businesses Act of 2026, H.R. 10238, which Congress.gov describes as including resources for businesses seeking federal contracts. The hearing record lists no legislation, and nothing in the sources ties the vote to the hearing's scheduling.

Federal News Network reported on Oct. 26 on responses to the defense department's request for information on its Cybersecurity Maturity Model Certification (CMMC) program. Respondents identified system security plans as a significant source of effort and documentation burden. The department paused the Phase II transition in July. That phase had been associated with November 2026 third-party certification requirements.

The Bottom Line

The House passed SBA cybersecurity guidance legislation on Nov. 11, and the Defense Department's CMMC Phase II transition has been paused since July.

Access the Legis1 platform for comprehensive political news, data, and insights.

Advertisement

Spot something wrong? Report an issue with this article