1. Short title This Act may be cited as the Improving Cybersecurity of Small Organizations Act of 2020 . 2. Improving cybersecurity of small organizations (a) Definitions In this section: (1) Administration The term Administration means the Small Business Administration. (2) Administrator The term Administrator means the Administrator of the Administration. (3) Commission The term Commission means the Federal Trade Commission. (4) Cybersecurity guidance The term cybersecurity guidance means the cybersecurity guidance documented and promoted in the resource maintained under section 3(a). (5) Director The term Director means the Director of the Cybersecurity and Infrastructure Security Agency. (6) NIST The term NIST means the National Institute of Standards and Technology. (7) Secretary The term Secretary means the Secretary of Commerce. (8) Small business The term small business has the meaning given the term small business concern under section 3 of the Small Business Act ( 15 U.S.C. 632 ). (9) Small governmental jurisdiction The term small governmental jurisdiction has the meaning given the term in section 601 of title 5, United States Code. (10) Small nonprofit The term small nonprofit has the meaning given the term small organization in section 601 of title 5, United States Code. (11) Small organization The term small organization means an organization that is unlikely to employ a specialist in cybersecurity, including— (A) a small business; (B) a small nonprofit; and (C) a small governmental jurisdiction. (b) Cybersecurity guidance (1) In general The Director shall maintain cybersecurity guidance that documents and promotes evidence-based cybersecurity policies and controls for use by small organizations, which shall— (A) include simple, basic controls that have the most impact in protecting small organizations against common cybersecurity threats and risks