Homeland Security Announces $279.9 Million in Cybersecurity Grant Funding for State and Local Governments

The Department of Homeland Security (DHS) has announced the release of $279.9 million in grant funding for the Fiscal Year (FY) 2024 as part of the State and Local Cybersecurity Grant Program (SLCGP). This funding, now in its third year, is intended to help state, local, and territorial (SLT) governments enhance their cybersecurity measures, reduce risks, and strengthen resilience against the increasing threat of cyberattacks. The SLCGP was established under the State and Local Cybersecurity Improvement Act and is part of the broader Bipartisan Infrastructure Law. The overall objective of the program is to provide around $1 billion over four years to help SLT governments develop the necessary tools and capabilities to detect, prevent, and respond to cyber threats.

Alejandro N. Mayorkas, Secretary of Homeland Security, emphasized the importance of cybersecurity in today’s world and the increasing risk posed by sophisticated cyberattacks on essential systems such as hospitals, schools, and energy grids. He stated, “In the modern threat landscape, every community can – and too often does – face sophisticated cyberattacks on vital systems like hospitals, schools, and electrical grids.” He further explained that the SLCGP is designed to equip governmental partners with the resources and tools they need to secure critical infrastructure and build resilience. “The Department of Homeland Security’s State and Local Cybersecurity Grant Program empowers key intergovernmental partners with the tools and support necessary to increase resilience and better secure critical infrastructure. Our message to communities everywhere is simple: do not underestimate the reach or ruthlessness of nefarious cyber actors. Through initiatives like the State and Local Cybersecurity Grant Program, we can confront these threats together,” he added.

The SLCGP is jointly managed by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Emergency Management Agency (FEMA). CISA plays a critical role in providing cybersecurity expertise and strategic guidance, while FEMA is responsible for overseeing the grant allocation and award process. Grant recipients will be able to use the funding to implement a variety of cybersecurity improvements, ranging from hiring cybersecurity personnel to developing and exercising detailed cybersecurity plans and enhancing the digital services on which citizens depend.

CISA Director Jen Easterly highlighted the significance of these grants in maintaining the security of the nation’s infrastructure. She remarked, “These cyber grants are an investment in the security of our nation’s infrastructure, helping to ensure that communities across the country have the tools they need to defend against cyberattacks.” Easterly also noted that the SLCGP is instrumental in helping local and state governments lay the groundwork for sustainable cybersecurity programs that are resilient and robust for the long term. “CISA is proud to offer the SLCGP, helping governments lay a solid foundation for building a sustainable and resilient cybersecurity program for the future,” she said.

Additionally, Deanne Criswell, the FEMA Administrator, reiterated FEMA’s dedication to supporting its partners in strengthening their defense against cyber threats, with a special focus on improving the security of infrastructure and critical systems. She credited the Biden-Harris Administration for its role in securing funding for this program and underscored the positive impact it would have on local and state governments. “FEMA is committed to helping our partners address and withstand cybersecurity threats to both infrastructure and systems,” Criswell explained. She continued, “Thanks to funding from the Biden-Harris Administration, state, local, tribal and territorial governments will be able to build their capacity to better protect themselves from evolving cyber threats.”

For eligible entities interested in applying for the grant funding, the application period begins on September 23 and runs through December 3, 2024, at 5 p.m. ET. Applications can be submitted through the FEMA GO platform. The DHS also provides additional resources and information about the State and Local Cybersecurity Grant Program on CISA’s official website, cisa.gov/cybergrants.

This announcement comes at a critical time as cybersecurity threats continue to evolve and target vital systems across the country. By investing in programs like the SLCGP, the DHS aims to ensure that communities and governmental agencies have the resources they need to protect their systems and maintain resilience in the face of increasingly sophisticated cyberattacks. The collaboration between CISA, FEMA, and other governmental partners is central to the program’s mission of building a nationwide cybersecurity framework that can respond to current and future threats.

The $279.9 million available in this fiscal year is part of the broader four-year $1 billion plan, which has already seen substantial success in previous years. The funding allows for flexibility in its usage, giving SLT governments the ability to tailor their cybersecurity strategies based on specific needs and vulnerabilities. This includes creating comprehensive cybersecurity plans, conducting exercises to prepare for potential cyber incidents, recruiting and training cybersecurity personnel, and enhancing the cybersecurity infrastructure that supports essential services such as energy, healthcare, and education.

The program also encourages the sharing of cybersecurity best practices across state and local jurisdictions. By fostering collaboration between different levels of government, the DHS hopes to create a unified approach to cybersecurity that strengthens the overall defense of critical infrastructure in the United States. This is particularly important as cyberattacks become more sophisticated and widespread, targeting everything from small municipalities to major metropolitan areas.

One of the primary objectives of the SLCGP is to close the gaps in cybersecurity capabilities that exist between different regions and governmental bodies. By providing funding and resources to local governments that may lack the necessary cybersecurity infrastructure, the program aims to create a more even playing field in terms of cybersecurity readiness. This helps to prevent weaker points in the nation’s cybersecurity network from being exploited by malicious actors.

The program also emphasizes the importance of long-term planning in cybersecurity. Rather than focusing solely on immediate needs, the SLCGP encourages state and local governments to develop sustainable cybersecurity programs that can grow and adapt as new threats emerge. This forward-thinking approach is essential for maintaining the security of critical infrastructure in the years to come.

As the threat landscape continues to evolve, the DHS, through initiatives like the SLCGP, is positioning itself as a key player in the fight against cyber threats. By providing state and local governments with the resources they need to defend themselves, the DHS is not only protecting critical infrastructure but also ensuring the safety and security of the citizens who rely on those systems. As Mayorkas pointed out, cybersecurity is a collective effort, and programs like the SLCGP play a crucial role in fostering that collective resilience.

Entities eligible for the grant are encouraged to submit their applications within the specified timeframe and take advantage of the resources available through FEMA and CISA to build a more robust cybersecurity infrastructure. With the funding provided by the SLCGP, SLT governments will be better equipped to defend against cyberattacks and protect the essential services that communities depend on every day.