Under the IIJA, $185 million in funding has been made available under the State and Local Cybersecurity Grant Program (SLCGP). Each state and territory has a baseline allocation – please see the Notice of Funding Opportunity (NOFO) for the specific allocation for the state or territory where you are located.
Eligible entities include only states and territories, and “the Governor designated State Administrative Agency is the only entity eligible to submit SLCGP applications to DHS/FEMA” (p. 4). Tribes are not eligible for direct funding but may be eligible as subrecipients. Local entities are also not eligible to apply on their own. The legislation requires states to distribute at least 80% of funds to local governments, with a minimum of 25% of the allocated funds distributed to rural areas. Funding will be distributed to local governments in the same way as the Homeland Security Grant Program.
Required conditions in order to receive a grant include establishing a Cybersecurity Planning Committee, developing a state-wide Cybersecurity Plan, conducting assessment and evaluations “as the basis for individual projects,” and adopting best practices for cybersecurity.
See the NOFO for further information; applications will close November 15, 2022.