“We are concerned that small businesses may not have the...tools necessary” to implement good security practices, Sens. Rubio and Cardin said.