1. Short title This Act may be cited as the NIST Small Business Cybersecurity Act of 2017 . 2. Findings Congress makes the following findings: (1) Small businesses play a vital role in the economy of the United States, accounting for 54 percent of all United States sales and 55 percent of jobs in the United States. (2) Attacks targeting small and medium businesses account for a high percentage of cyberattacks in the United States. Sixty percent of small businesses that suffer a cyberattack are out of business within 6 months, according to the National Cyber Security Alliance. (3) The Cybersecurity Enhancement Act of 2014 ( 15 U.S.C. 7421 et seq.) calls on the National Institute of Standards and Technology to facilitate and support a voluntary public-private partnership to reduce cybersecurity risks to critical infrastructure. Such a partnership continues to play a key role in improving the cyber resilience of the United States and making cyberspace safer. (4) There is a need to develop simplified resources that are consistent with the partnership described in paragraph (3) that improves its use by small businesses. 3. Improving cybersecurity of small businesses (a) Definitions In this section: (1) Director The term Director means the Director of the National Institute of Standards and Technology. (2) Resources The term resources means guidelines, tools, best practices, standards, methodologies, and other ways of providing information. (3) Small business concern The term small business concern has the meaning given such term in section 3 of the Small Business Act ( 15 U.S.C. 632 ). (b) Small business cybersecurity Section 2(e)(1)(A) of the National Institute of Standards and Technology Act ( 15 U.S.C. 272(e)(1)(A) ) is amended— (1) in clause (vii), by striking and at the end; (2) by redesignating clause (viii) as clause (ix); and (3) by inserting after clause (vii) the following: (viii) consider small business concerns (as defined in section 3 of the Small Business Act ( 15 U.S.C. 632 ))