1. Short title This Act may be cited as the SBA Cyber Awareness Act . 2. Cybersecurity awareness reporting Section 10 of the Small Business Act ( 15 U.S.C. 639 ) is amended by striking subsection (b) and inserting the following: (b) Cybersecurity reports (1) Definition In this subsection, the term appropriate congressional committees means— (A) the Committee on Small Business and Entrepreneurship of the Senate; and (B) the Committee on Small Business of the House of Representatives. (2) Annual report Not later than 180 days after the date of enactment of the SBA Cyber Awareness Act , and every year thereafter, the Administration shall submit a report to the appropriate congressional committees that includes— (A) an assessment of the information technology and cybersecurity of the Administration; (B) a strategy to increase the cybersecurity of the Administration; (C) a detailed account of any information technology component or system of the Administration that was manufactured by a company located in the People's Republic of China; and (D) an account of any cyber threat, breach, or cyber attack that occurred at the Administration during the 2-year period preceding the date on which the report is submitted, and any action taken by the Administration to respond to or remediate the cyber threat, breach, or cyber attack. (3) Additional reports If the Administration determines that there is a reasonable basis to conclude that a cyber threat, breach, or cyber attack occurred at the Administration, the Administration shall— (A) not later than 7 days after the date on which the Administration makes that determination, notify the appropriate congressional committees of the cyber threat, breach, or cyber attack