Bill orders SBA to fix IT flaws flagged by government watchdog

Q: What does this do?

This bill requires the SBA to act on a 2024 GAO report that found serious risks in a newly deployed SBA IT system. The SBA's Chief Information Officer must create rules for managing tech projects, covering risk identification, cybersecurity threat tracking, contractor oversight, and cost/schedule estimating. The SBA must submit an implementation plan to Congress within 180 days and brief House and Senate small business committees within 30 days after that.

Q: Why does it matter?

The bill legally compels the SBA to implement GAO's recommendations rather than merely reviewing them, changing internal technology management and reporting requirements. SBA employees and contractors will need to follow new project-management and risk-assessment procedures.

Passed one chamberH.R. 4491Latest action Dec 2, 2025

Sponsor: Gilbert Ray Cisneros, Jr. · Representative · CA

AIDecoded by AI · checked against the record

Read the official text

Official title: SBA IT Modernization Reporting Act

119th Congress

Topics: Jobs & the economy

Introduced: July 17, 2025

Read the official bill on Congress.gov

In plain words

The plain-language version comes first. The official text is always the reference.

HR 4491 requires the SBA to act on 's 2024 recommendations for fixing risky IT systems, with reports due to Congress.

45-second read · 4 questions answered below

What does this do?

This bill requires the SBA to act on a 2024 report that found serious risks in a newly deployed SBA IT system. The SBA's Chief Information Officer must create rules for managing tech projects, covering risk identification, cybersecurity threat tracking, contractor oversight, and cost/schedule estimating. The SBA must submit an implementation plan to Congress within 180 days and brief House and Senate small business committees within 30 days after that.

Who does it affect?

The SBA, its Chief Information Officer, and SBA employees and contractors are directly affected. Small business owners, lenders, and others relying on SBA loan and disaster assistance programs are affected indirectly.

Why does it matter?

The bill legally compels the SBA to implement 's recommendations rather than merely reviewing them, changing internal technology management and reporting requirements. SBA employees and contractors will need to follow new project-management and risk-assessment procedures.

AI-drafted summary. Check it against the official text before you act on it.

Read the official bill on Congress.gov

Make the call

Three steps: where you stand, your script, the call.

Where do you stand?

Where does it stand?

IntroducedJul 17, 2025
House committee
House vote
SenateYou are here · Dec 2, 2025
The president's desk

Right now: it passed the House, and the official record shows nothing new since. If the Senate changes it, it goes back to the House before reaching the president.

Latest action: December 2, 2025 — Received in the Senate and Read twice and referred to the Committee on Small Business and Entrepreneurship.

See how a call works

Share on WhatsApp