H. R. 4491, SBA IT Modernization Reporting Act — 119th Congress, Report No. 119–223
- Issuer
- Congressional materials
- Document type
- 407344 2025 12 01 House Committee On Small Business Celebrates Five Att2
- Date
- 2025-12-01
- Case
- 407344 2025 12 01 House Committee On Small Business Celebrates Five Att2
Summary
H. R. 4491, the SBA IT Modernization Reporting Act, as reported in the House of Representatives of the 119th Congress (Union Calendar No. 181, Report No. 119–223). The bill was introduced July 17, 2025 by Mr. Cisneros for himself and Mr. Jack, referred to the Committee on Small Business, and on August 15, 2025 committed to the Committee of the Whole House on the State of the Union. Section 2 requires the Administrator of the Small Business Administration, acting through its Chief Information Officer, to implement the recommendations of GAO report GAO–25–106963, published November 6, 2024. It requires an implementation plan within 180 days of enactment, listing eleven required risk management, scheduling and cost-estimating policies, and a briefing to the House and Senate small business committees within 30 days after the plan is submitted.
Summary drafted by a model from the document's text below and checked by script against that text before publication. It is a navigation aid, not a reading of what the document proves. Where AI is used
Full text
IB
Union Calendar No. 181
119TH CONGRESS
1ST SESSION
H. R. 4491
[Report No. 119–223]
To require the Administrator of the Small Business Administration to imple-
ment certain recommendations relating to information technology mod-
ernization, and for other purposes.
IN THE HOUSE OF REPRESENTATIVES
JULY 17, 2025
Mr. CISNEROS (for himself and Mr. JACK) introduced the following bill; which
was referred to the Committee on Small Business
AUGUST 15, 2025
Committed to the Committee of the Whole House on the State of the Union
and ordered to be printed
kjohnson on DSK7ZCZBW3PROD with $$_JOB
VerDate Sep 11 2014 21:25 Aug 15, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6652 E:\BILLS\H4491.RH H4491
2
A BILL
To require the Administrator of the Small Business Adminis-
tration to implement certain recommendations relating
to information technology modernization, and for other
purposes.
kjohnson on DSK7ZCZBW3PROD with $$_JOB
•HR 4491 RH
VerDate Sep 11 2014 21:25 Aug 15, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6652 E:\BILLS\H4491.RH H4491
3
1 Be it enacted by the Senate and House of Representa-
2 tives of the United States of America in Congress assembled,
3 SECTION 1. SHORT TITLE.
4 This Act may be cited as the ‘‘SBA IT Modernization
5 Reporting Act’’.
6 SEC. 2. IMPLEMENTATION OF RECOMMENDATIONS RELAT-
7 ING TO INFORMATION TECHNOLOGY MOD-
8 ERNIZATION FOR THE SMALL BUSINESS AD-
9 MINISTRATION.
10 (a) IN GENERAL.—The Administrator of the Small
11 Business Administration, acting through the Chief Infor-
12 mation Officer of the Administration, shall take such ac-
13 tions as may be necessary to implement the recommenda-
14 tions contained in the report of the Comptroller General
15 of the United States titled ‘‘IT MODERNIZATION: SBA
16 Urgently Needs to Address Risks on Newly Deployed Sys-
17 tem’’ (GAO–25–106963; published November 6, 2024).
18 (b) IMPLEMENTATION PLAN.—Not later than 180
19 days after the date of the enactment of this Act, the Ad-
20 ministrator shall submit to the Committee on Small Busi-
21 ness of the House of Representatives and the Committee
22 on Small Business and Entrepreneurship of the Senate an
23 implementation plan detailing the actions the Small Busi-
kjohnson on DSK7ZCZBW3PROD with $$_JOB
24 ness Administration will undertake to establish and imple-
25 ment policies and procedures to govern information tech-
•HR 4491 RH
VerDate Sep 11 2014 21:25 Aug 15, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.RH H4491
4
1 nology modernization projects of the Administration. Such
2 policies and procedures shall, with respect to each
3 project—
4 (1) for each risk identified, explicitly state the
5 source of such risk in the relevant risk documenta-
6 tion;
7 (2) clearly define risk parameters;
8 (3) establish and maintain risk management
9 strategies;
10 (4) identify and document risks for all phases
11 of the life cycle;
12 (5) evaluate, categorize, and prioritize risks
13 based on defined risk parameters and develop
14 project risk management plans;
15 (6) connect measures to mitigate risk to risk
16 mitigation plans;
17 (7) require that any information technology ac-
18 quisition plan and any strategic plan contains infor-
19 mation needed to manage cyber risks;
20 (8) require that a traceability analysis is per-
21 formed and documented;
22 (9) require that security-related subject matter
23 experts are involved in selection process for contrac-
kjohnson on DSK7ZCZBW3PROD with $$_JOB
24 tors for a project;
•HR 4491 RH
VerDate Sep 11 2014 21:25 Aug 15, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.RH H4491
5
1 (10) develop master schedules using the guide-
2 lines contained in the publication of the Comptroller
3 General titled ‘‘GAO Schedule Assessment Guide:
4 Best Practices for Project Schedules’’ (GAO–16–
5 89G; published December 22, 2015); and
6 (11) develop cost estimates using the guidelines
7 contained in the publication of the Comptroller Gen-
8 eral titled ‘‘Cost Estimating and Assessment Guide:
9 Best Practices for Developing and Managing Pro-
10 gram Costs’’ (GAO–20–195G; published March 12,
11 2020).
12 (c) ADDITIONAL REQUIREMENTS.—The implementa-
13 tion plan required by this section shall include the actions
14 required to carry out the requirements listed in para-
15 graphs (1) through (11) of subsection (b), an identifica-
16 tion of the office of the Administration responsible for im-
17 plementation, and the timelines for completion of each ac-
18 tion.
19 (d) BRIEFING REQUIRED.—Not later than 30 days
20 after the submission of the implementation plan required
21 under this section, the Administrator shall provide to the
22 Committee on Small Business of the House of Representa-
23 tives and the Committee on Small Business and Entrepre-
kjohnson on DSK7ZCZBW3PROD with $$_JOB
24 neurship of the Senate a briefing on the plan.
•HR 4491 RH
VerDate Sep 11 2014 21:25 Aug 15, 2025 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\H4491.RH H4491
Union Calendar No. 181
119TH CONGRESS
1ST SESSION H. R. 4491
[Report No. 119–223]
H4491
A BILL
E:\BILLS\H4491.RH
To require the Administrator of the Small Business
Administration to implement certain rec-
ommendations relating to information technology
modernization, and for other purposes.
AUGUST 15, 2025 Sfmt 6651
Committed to the Committee of the Whole House on the
Fmt 6651
State of the Union and ordered to be printed
Frm 00006
PO 00000
Jkt 059200
21:25 Aug 15, 2025
VerDate Sep 11 2014
kjohnson on DSK7ZCZBW3PROD with $$_JOB
File and source
- File
- 407344_2025-12-01_house-committee-on-small-business-celebrates-five-_att2.pdf
- Size
- 230,434 bytes
- SHA-256
- 0240fc0aeb755401eb7ed943935628651dd427f73eeabb6b499ea6014c156586
- Original
- No public link identified.