House Homeland Security Hearing on State and Local Cybersecurity Grant Program

Importance of the State and Local Cybersecurity Grant Program

• 💡 The State and Local Cybersecurity Grant Program (SLCGP) is crucial for bolstering the cyber defenses of state and local governments, especially as cyber attacks are real and rising.
• 🎯 The program, established in 2021 and up for reauthorization, has allocated $838 million to address cybersecurity risks to government information systems.
• ⚠️ Cyber actors are becoming increasingly sophisticated, targeting critical infrastructure sectors like water, energy, and transportation, making national cyber preparedness and resilience essential.

Program Strengths and Challenges

• ✅ Stakeholders appreciate the program's value in improving cybersecurity postures, with successful use cases in states like Virginia, Connecticut, and Utah.
• 🧩 Challenges include administrative burdens, barriers to access for smaller governments, and the need for clear guidance and potentially lower cost-share requirements.
• 📈 The program encourages a "whole of state" approach, fostering collaboration between state and local officials and promoting proactive, risk-informed strategies.

Threats and Adversaries

• 🚀 The threat landscape includes sophisticated nation-state actors like China's Volt Typhoon, targeting critical infrastructure, and criminal gangs perpetrating ransomware attacks.
• 💻 Ransomware attacks have doubled, causing over $1 billion in operational downtime for state and local governments.
• 🤖 Emerging threats like AI are complicating the cybersecurity landscape, with malicious actors leveraging AI for more sophisticated phishing and attacks.

Recommendations for Reauthorization

• 💰 Sustainable funding and longer program durations are recommended to enable long-term planning and investment by local governments.
• 🛠️ Reducing administrative burdens, simplifying applications, and providing clear guidance are key to improving access and efficiency.
• 🤝 Encouraging direct funding tracks for larger municipalities and supporting shared services models can enhance program effectiveness and reach.
• 🚀 Continued collaboration between federal agencies like CISA and FEMA, and state/local partners, is vital for national cybersecurity.