State and Local Cybersecurity Improvement Act

To amend the Homeland Security Act of 2002 to develop tools to help State and local governments establish or improve cybersecurity, and for other purposes. 1. Short title This Act may be cited as the State and Local Cybersecurity Improvement Act 2. State cybersecurity grants (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 651 2215. Cybersecurity resource guide development for State and local government officials The Secretary, acting through the Director, shall develop a resource guide for use by State, local, and Tribal officials, including law enforcement officers, to help such officials prepare for, protect against, respond to, recover from, and mitigate against cyber attacks. 2216. State identification of high value assets (a) In general The Director shall establish a State and local government cybersecurity initiative to make grants to State and local governments to identify high value assets and critical system architecture in order to assess cybersecurity risks (as such term is defined in section 2209). (b) Application (1) In general Each State and local government may apply for a grant under this section, and shall submit such information in support of an application relating thereto as the Director may require. (2) Minimum contents of application An application under this subsection shall include the following: (A) A description of how the State or local government plans to allocate grant funds. (B) A budget showing how the State or local government intends to expend grant funds. (3) Duration Grants under this section shall be for one year, and a State or local government may not reapply until five years has elapsed from the previous award of such a grant. (c) Grant award To be eligible to receive a grant under this section, a State or local government shall agree to contribute, from State or local government appropriated funds, other State or local government revenue, or from private contributions received by the State or local government, not less than 20 percent of the amount of the grant. (d) Authorization of appropriations There is authorized to be appropriated $5,000,000 for each of fiscal years 2020 through 2024 and such sums as may be necessary for each fiscal year thereafter to carry out this section. 2217. State cyber exercises grants (a) In general The Director shall establish a State and local government cybersecurity initiative to make grants to State and local governments to conduct tabletop and live training exercises to assess the capability of the State or local government to respond to a cyberattack. (b) Application (1) In general Each State and local government may apply for a grant under this section, and shall submit such information in support of an application relating thereto as the Director may require. (2) Minimum contents of application An application under this subsection shall include the following: (A) A description of how the State or local government plans to allocate grant funds. (B) A budget showing how the State or local government intends to expend grant funds. (3) Duration Grants under this section shall be for one year, and a State or local government may apply or reapply on an annual basis. (c) Grant award To be eligible to receive a grant under this section, a State or local government shall agree to contribute, from State or local government appropriated funds, other State or local government revenue, or from private contributions received by the State or local government, not less than 20 percent of the amount of the grant. (d) Authorization of appropriations There is authorized to be appropriated $5,000,000 for each of fiscal years 2020 through 2024 and such sums as may be necessary for each fiscal year thereafter to carry out this section . (b) Clerical amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2214 the following new items: Sec. 2215. Cybersecurity resource guide development for State and local government officials. Sec. 2216. State identification of high value assets. Sec. 2217. State cyber exercises grants. .

Summary: State and Local Cybersecurity Improvement Act This bill directs the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland Security to develop a resource guide for use by state, local, and tribal officials, including law enforcement officers, to help such officials prepare for, protect against, respond to, recover from, and mitigate cyberattacks. CISA shall establish initiatives to make grants to state and local governments to (1) identify high value assets and critical system architecture in order to assess cybersecurity risks, and (2) conduct tabletop and live training exercises to assess the capability of the state or local government to respond to a cyberattack.