SBA IT Modernization Reporting Act

The SBA IT Modernization Reporting Act would require the Small Business Administration (SBA), through its Chief Information Officer, to implement specific recommendations from a Government Accountability Office (GAO) IT modernization report focused on risks tied to SBA’s newly deployed system. The bill mandates the SBA to produce an implementation plan within 180 days that establishes policies and procedures for IT modernization projects. The plan must address risk identification, management, tracing, cyber risk integration, contractor selection with security input, and adherence to GAO best-practice guidance for schedules and cost estimates. After submitting the plan, SBA must brief Congress within 30 days. In short, the bill provides targeted federal oversight and standardized governance to improve the governance, security, scheduling, and cost management of SBA IT projects.