H.R. 10238 — Cybersecurity for Small Businesses Act of 2026

This section directs the Administrator of the Small Business Administration, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency and the Director of the National Institute of Standards and Technology, to develop and disseminate information and resources to assist small business concerns in strengthening their cybersecurity infrastructure and implementing best practices.

This section directs the Administrator of the Small Business Administration to provide small business concerns seeking federal contracts or subcontracts with information and resources on the Cybersecurity Maturity Model Certification program, including materials from the Department of Defense's Director of Small and Disadvantaged Business Utilization, the program under section 1807 of the National Defense Authorization Act for Fiscal Year 2026, and the APEX Accelerator Program. It requires publication of the information on the Administration's website, annual consultation with the Chief Counsel for Advocacy on best practices for disseminating cybersecurity information, and an annual report to Congress on the number and description of small businesses contacting the Administrator about cybersecurity matters, beginning 90 days after enactment.