Government & Compliance
Cybersecurity grant programs for local government
The federal and state programs that fund local cybersecurity improvements, and how agencies use them.
Federal and state governments have created grant programs specifically to improve the cybersecurity of local governments, recognizing that small agencies cannot fund it alone. The programs come with planning and reporting requirements that shape how the money is used.
The federal program
The State and Local Cybersecurity Grant Program, administered through the Department of Homeland Security and the Federal Emergency Management Agency, provides funding to states, which pass most of it through to local governments. States must have a cybersecurity plan and a planning committee, and local projects must align with the plan. Allowable uses include assessments, planning, training, and implementation of specific controls.
State programs
Some states supplement federal funding with their own grants, shared services, or free assessments and tools for local governments, often through the state's technology or homeland security agency.
Typical funded activities
- Assessments against the NIST Cybersecurity Framework or CIS Controls
- Multi-factor authentication deployment
- Endpoint detection and response
- Backup improvements
- Security awareness training
- Incident response planning and exercises
- Migration to secure email and domain configurations
- Managed security monitoring
Requirements that come with the funds
Alignment with the state plan, adoption of specific practices, federal procurement rules for funded purchases, reporting, and sometimes participation in state-provided services.
How agencies use them well
Start with an assessment so that funds go to the highest-priority gaps. Use the funding for one-time investments and plan for ongoing costs in the operating budget. Coordinate with neighboring agencies and the state for shared services.
What to expect from vendors
Grant-funded projects have defined periods and reporting. Deliverables should map to the grant's allowable activities and produce the documentation the agency must submit.
Staying current
Program details, funding levels, and requirements change with each cycle. Agencies should work from current guidance from their state administrative agency.