Analyst Brief June 22, 2026

H.R. 8880 — Small Business Cybersecurity Assistance Evaluation Act of 2026, as amended

Current Status

Introduced

Executive Summary

H.R. 8880, the 'Small Business Cybersecurity Assistance Evaluation Act of 2026,' mandates the Government Accountability Office (GAO) to conduct a comprehensive study on the effectiveness, awareness, and coordination of federal cybersecurity assistance programs for small businesses. As cyber threats, ransomware, and social engineering scams increasingly target vulnerable small enterprises, this bill seeks to identify gaps in current federal resources and recommend improvements. The legislation aims to ensure existing federal tools are actually reaching and protecting small businesses without authorizing any new federal spending.

Bill Data

Primary Sponsor

Ms. SIMON

Bill Number

H.R. 8880

Session

119th

Co-Sponsors

Mr. BRESNAHAN
View on Congress.gov ↗

Arguments For

  • Good Government / Oversight Win: Provides a low-cost, high-visibility oversight win by ensuring existing federal cybersecurity programs are actually effective and coordinated, appealing to fiscal conservatives.
  • Pro-Small Business Posture: Demonstrates responsiveness to the growing threat of ransomware and social engineering attacks devastating Main Street businesses, offering strong political cover for members in swing districts.

Likely Supporters

National Federation of Independent Business (NFIB)U.S. Chamber of CommerceSmall Business Majority

Arguments Against

  • Unfunded Mandate for GAO: The strict CUTGO provision means the GAO must absorb the cost of this comprehensive study within its existing budget, potentially delaying other oversight priorities.
  • Action Delay: Critics might argue that commissioning another study delays immediate, concrete legislative action or funding needed to actively protect small businesses from imminent cyber threats.

Likely Opponents

None specified

📋 Key Provisions

  • Directs the Comptroller General (GAO) to study current federal cybersecurity initiatives, programs, and tools intended to assist small business owners.
  • Requires the study to assess small business preparedness, risk identification, and recovery strategies regarding cyberattacks, social engineering, scams, and fraud.
  • Mandates an evaluation of small business awareness and use of federal cybersecurity resources, as well as the coordination and integration among these federal programs.
  • Requires the GAO to submit a report to the House and Senate Small Business Committees with findings and recommendations for improving program effectiveness.
  • Includes a CUTGO compliance provision explicitly stating that no new funds are authorized to be appropriated to carry out the Act.
search Verification Guide BETA expand_more

Don't trust AI? Don't worry, neither do I. Verify the claims yourself.

Claim Analysis Page 2, Line 3

Directs the Comptroller General to conduct a study of federal cybersecurity initiatives for small businesses.

Verify Text

"The Comptroller General of the United"

Claim Analysis Page 2, Line 12

Requires an assessment of small business preparedness for cyber risks and threats.

Verify Text

"assessing the preparedness of such concerns"

Claim Analysis Page 3, Line 22

Requires recommendations on how to improve the effectiveness and coordination of federal cybersecurity initiatives.

Verify Text

"recommendations on how to improve the ef"

Claim Analysis Page 4, Line 10

Prohibits new funding authorizations to carry out the Act (CUTGO compliance).

Verify Text

"No such funds are authorized to be"