Small Business and Local Infrastructure Cyber Resilience Act

This bill directs the Cybersecurity and Infrastructure Security Agency, in coordination with the National Institute of Standards and Technology, to establish voluntary, risk-based cybersecurity standards for small businesses and critical local infrastructure, including water systems, public utilities, and emergency services. It provides competitive grants through existing federal programs for eligible entities to conduct risk assessments, adopt multifactor authentication, improve backup and incident-response systems, and train personnel, while protecting recipients from unfunded federal mandates and requiring annual reports to Congress on implementation and outcomes.