; and (II) an estimate of the number of individuals and small business concerns affected by the cybersecurity risk or incident, including an assessment of the risk of harm to affected individuals and small business concerns. (3) Rule of construction Nothing in this subsection shall be construed to affect the reporting requirements of the Administrator under chapter 35 of title 44, United States Code, in particular the requirement to notify the Federal information security incident center under section 3554(b)(7)(C)(ii) of such title, or any other provision of law. (4) Definitions In this subsection: (A) Appropriate congressional committees The term appropriate congressional committees means— (i) the Committee on Small Business and Entrepreneurship of the Senate; and (ii) the Committee on Small Business of the House of Representatives. (B) Cybersecurity risk; incident The terms cybersecurity risk and incident have the meanings given such terms, respectively, under section 2209(a) of the Homeland Security Act of 2002. . 90016. Reporting on small business programs under the CARES Act (a) Definitions In this section— (1) the terms Administration and Administrator mean the Small Business Administration and the Administrator thereof; (2) the term appropriate congressional committees means— (A) Committee on Appropriations and the Committee on Small Business and Entrepreneurship of the Senate; and (B) the Committee on Appropriations and the Committee on Small Business of the House of Representatives; (3) the term covered assistance means— (A) loans made under section 7(a)(36) of the Small Business Act ( 15 U.S.C. 636(a)(36) ); (B) an advance on a loan made under section 1110(e) of the CARES Act ( Public Law 116–136 ); (C) loans made under section 7(b)(2) of the Small Business Act ( 15 U.S.C. 636(b)(2) ), including those made in accordance with section 1110 of the CARES Act ( Public Law 116–136 ); (D) loan forgiveness under section 1106 of the CARES Act ( Public Law 116–136 )