Cyber Risks For Small Contractors In Spotlight By House Panel - Legis1

The hearing titled "Protecting Main Street, Securing America: Examining Cybersecurity Challenges for Small Business Contractors" will be held by the Subcommittee on Contracting and Infrastructure. This comes amid growing concerns about cybersecurity vulnerabilities among small businesses that serve federal contractors.

On Nov. 11, the House passed two small business bills by voice vote, including measures directing the Small Business Administration to provide cybersecurity resources and guidance to small businesses. One of these is the Cybersecurity for Small Businesses Act of 2026, H.R. 10238, which includes resources for businesses seeking federal contracts.

CMMC Program Challenges

The hearing occurs as the Defense Department's Cybersecurity Maturity Model Certification (CMMC) program faces scrutiny. Federal News Network reported on Oct. 26 that respondents identified system security plans as a significant source of effort and documentation burden in response to the department's request for information on its CMMC program.

The department paused the Phase II transition in July, which had been associated with November 2026 third-party certification requirements. This pause reflects the challenges small contractors face in meeting increasingly complex cybersecurity standards.