; (B) the Committee on Homeland Security and Governmental Affairs of the Senate; (C) the Committee on Small Business of the House of Representatives; and (D) the Committee on Homeland Security of the House of Representatives. (3) Cybersecurity risk The term cybersecurity risk has the meaning given the term in section 2200 of the Homeland Security Act of 2002 ( 6 U.S.C. 650 ). (4) Information system The term information system has the meaning given the term in section 3502 of title 44, United States Code. (5) Rural area The term rural area means any county or other political subdivision of a State, the District of Columbia, or a territory or possession of the United States that is designated as a rural area by the Bureau of the Census. (6) Small business concern The term small business concern has the meaning given the term in section 3 of the Small Business Act ( 15 U.S.C. 632 ). (b) Study and Report Not later than 1 year after the date of enactment of this Act, the Chief Counsel for Advocacy of the Administration and the Comptroller General of the United States shall— (1) conduct a joint study assessing the impact of small business concerns turning to online marketplaces as a result of shutdowns imposed by the COVID–19 pandemic, specifically in regards to the cybersecurity of those small business concerns; and (2) submit to the appropriate committees of Congress and make publicly available a report on— (A) how identified cybersecurity risks specifically impact small business concerns that established an online presence during the period beginning on February 1, 2020, and ending on December 31, 2021; (B) the challenges that the small business concerns described in subparagraph (A) face in— (i) securing updated information systems; (ii) implementing cybersecurity protocols; and (iii) responding to data breaches or cyber attacks; (C) the Federal resources that the small business concerns described in subparagraph (A) used in establishing the online presence described in that paragraph