Small Business Cyber Training Act of 2022
Dec 27, 2022
Statute: 136 Stat. 4424
Became law: Dec 27, 2022
Dec 27, 2022
Statute: 136 Stat. 4424
Became law: Dec 27, 2022
Summary
Creates a program to certify counselors at Small Business Development Centers to help small businesses with their cybersecurity plans and defenses.
What problem does this solve?
Many small businesses lack the knowledge and resources to protect themselves from online threats and cyberattacks. This law creates a program to train and certify counselors at Small Business Development Centers to give expert cybersecurity advice to these businesses.
What does this law do?
Creates a cyber counseling certification program
Directs the Small Business Administration (SBA) to create or approve a certification program for employees of Small Business Development Centers (SBDCs) to provide cyber planning help.
Sets minimum number of certified employees
Requires each lead SBDC to have at least a certain number of certified cyber counselors, which is the lesser of 5 employees or 10% of its total staff.
Reimburses SBDCs for training costs
Allows the SBA to pay back lead SBDCs for the costs of getting their employees certified, but the total amount for all centers cannot be more than $350,000 per year.
Who does this affect?
- Small business owners
- Small Business Development Center counselors
What is the real world impact?
•
Strengthens small business defenses
Provides small businesses with access to free, certified experts who can help them create strategies to defend against common cyberattacks, protecting their data and finances.
When does this start?
The Small Business Administration must implement the new certification program within 180 days of the law's enactment on December 27, 2022.

