Rep. Swalwell Questions Cybersecurity Grant Program Improvements

Improving State and Local Cybersecurity Grants

• 🎯 Rep. Eric Swalwell questioned witnesses on improving the effectiveness of state and local cybersecurity grants.
• 💡 A key suggestion is to structure future reauthorizations to better reflect the differences between city sizes and target where the need is.
• 💰 Larger cities like Louisville have resources and dedicated cybersecurity staff, while smaller towns lack them.

Grant Distribution and Resource Allocation

• 🤝 Allowing grants to flow through state leagues of cities or municipal organizations could ensure money reaches local governments.
• 🧑‍🏫 This approach would also enable these organizations to hire shared cybersecurity personnel to assist multiple cities.
• 🏫 The need extends to school systems, which handle significant data and often have limited resources.

Grant Program Weaknesses and Lessons Learned

• 📉 The program had a slow start, with initial challenges in clarifying eligibility and understanding recipient needs.
• 📊 Cybersecurity assessments were critical in the first year for municipalities to understand their risks and how to address them.
• ⚠️ Continuing assessments to demonstrate improvements is crucial for securing additional funding.
• ⚖️ A stable matching fund requirement over the program's life would be easier to administer than fluctuating rates, which can impact participation as local government budgets remain tight.