H.R. 4491, SBA IT Modernization Reporting Act
Summary
H.R. 4491, the SBA IT Modernization Reporting Act, was introduced on July 17, 2025 by Mr. Cisneros for himself and Mr. Jack and referred to the Committee on Small Business. It would require the Administrator of the Small Business Administration, acting through its chief information officer, to implement the recommendations of the Comptroller General report on SBA information technology modernization, GAO-25-106963, published November 6, 2024. Not later than 180 days after enactment the Administrator would submit an implementation plan to the House Committee on Small Business and the Senate Committee on Small Business and Entrepreneurship, followed within 30 days by a briefing on the plan.
Summary drafted by a model from the document's text below and checked by script against that text before publication. It is a navigation aid, not a reading of what the document proves. Where AI is used
- Issuer
- Congressional materials
- Document type
- 407288 2025 07 21 Committee On Small Business Activity The Week Of J Att2
- Date
- 2025-07-21
- Case
- 407288 2025 07 21 Committee On Small Business Activity The Week Of J Att2
Cite this document
“H.R. 4491, SBA IT Modernization Reporting Act.”
Dated 2025-07-21. Archived at Pandemic Darlings, https://pandemicdarlings.com/source-documents/2025-07-21-407288-2025-07-21-committee-on-small-business-activity-the-week-of-j-att2/
, SHA-256 a329ca39aecfb7032a91e691a5aa30b3abf468baa0b8ab5301801e3a2a38ef1c.Full text
I
119TH CONGRESS
1ST SESSION
H. R. 4491
To require the Administrator of the Small Business Administration to imple-
ment certain recommendations relating to information technology mod-
ernization, and for other purposes.
IN THE HOUSE OF REPRESENTATIVES
JULY 17, 2025
Mr. CISNEROS (for himself and Mr. JACK) introduced the following bill; which
was referred to the Committee on Small Business
A BILL
To require the Administrator of the Small Business Adminis-
tration to implement certain recommendations relating
to information technology modernization, and for other
purposes.
1 Be it enacted by the Senate and House of Representa-
2 tives of the United States of America in Congress assembled,
3 SECTION 1. SHORT TITLE.
4 This Act may be cited as the ‘‘SBA IT Modernization
5 Reporting Act’’.
ssavage on LAPJG3WLY3PROD with BILLS
VerDate Sep 11 2014 21:09 Jul 18, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.IH H4491
2
1 SEC. 2. IMPLEMENTATION OF RECOMMENDATIONS RELAT-
2 ING TO INFORMATION TECHNOLOGY MOD-
3 ERNIZATION FOR THE SMALL BUSINESS AD-
4 MINISTRATION.
5 (a) IN GENERAL.—The Administrator of the Small
6 Business Administration, acting through the Chief Infor-
7 mation Officer of the Administration, shall take such ac-
8 tions as may be necessary to implement the recommenda-
9 tions contained in the report of the Comptroller General
10 of the United States titled ‘‘IT MODERNIZATION: SBA
11 Urgently Needs to Address Risks on Newly Deployed Sys-
12 tem’’ (GAO–25–106963; published November 6, 2024).
13 (b) IMPLEMENTATION PLAN.—Not later than 180
14 days after the date of the enactment of this Act, the Ad-
15 ministrator shall submit to the Committee on Small Busi-
16 ness of the House of Representatives and the Committee
17 on Small Business and Entrepreneurship of the Senate an
18 implementation plan detailing the actions the Small Busi-
19 ness Administration will undertake to establish and imple-
20 ment policies and procedures to govern information tech-
21 nology modernization projects of the Administration. Such
22 policies and procedures shall, with respect to each
23 project—
24 (1) for each risk identified, explicitly state the
ssavage on LAPJG3WLY3PROD with BILLS
25 source of such risk in the relevant risk documenta-
26 tion;
•HR 4491 IH
VerDate Sep 11 2014 21:09 Jul 18, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.IH H4491
3
1 (2) clearly define risk parameters;
2 (3) establish and maintain risk management
3 strategies;
4 (4) identify and document risks for all phases
5 of the life cycle;
6 (5) evaluate, categorize, and prioritize risks
7 based on defined risk parameters and develop
8 project risk management plans;
9 (6) connect measures to mitigate risk to risk
10 mitigation plans;
11 (7) require that any information technology ac-
12 quisition plan and any strategic plan contains infor-
13 mation needed to manage cyber risks;
14 (8) require that a traceability analysis is per-
15 formed and documented;
16 (9) require that security-related subject matter
17 experts are involved in selection process for contrac-
18 tors for a project;
19 (10) develop master schedules using the guide-
20 lines contained in the publication of the Comptroller
21 General titled ‘‘GAO Schedule Assessment Guide:
22 Best Practices for Project Schedules’’ (GAO–16–
23 89G; published December 22, 2015); and
24 (11) develop cost estimates using the guidelines
ssavage on LAPJG3WLY3PROD with BILLS
25 contained in the publication of the Comptroller Gen-
•HR 4491 IH
VerDate Sep 11 2014 21:09 Jul 18, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.IH H4491
4
1 eral titled ‘‘Cost Estimating and Assessment Guide:
2 Best Practices for Developing and Managing Pro-
3 gram Costs’’ (GAO–20–195G; published March 12,
4 2020).
5 (c) ADDITIONAL REQUIREMENTS.—The implementa-
6 tion plan required by this section shall include the actions
7 required to carry out the requirements listed in para-
8 graphs (1) through (11) of subsection (b), an identifica-
9 tion of the office of the Administration responsible for im-
10 plementation, and the timelines for completion of each ac-
11 tion.
12 (d) BRIEFING REQUIRED.—Not later than 30 days
13 after the submission of the implementation plan required
14 under this section, the Administrator shall provide to the
15 Committee on Small Business of the House of Representa-
16 tives and the Committee on Small Business and Entrepre-
17 neurship of the Senate a briefing on the plan.
Æ
ssavage on LAPJG3WLY3PROD with BILLS
•HR 4491 IH
VerDate Sep 11 2014 21:09 Jul 18, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6301 E:\BILLS\H4491.IH H4491
File and source
- File
- 407288_2025-07-21_committee-on-small-business-activity-the-week-of-j_att2.pdf
- Size
- 246,547 bytes
- SHA-256
- a329ca39aecfb7032a91e691a5aa30b3abf468baa0b8ab5301801e3a2a38ef1c
- Original
- No public link identified.