# State Cyber Resiliency Act: What You Need to Know

This bill creates a new federal grant program to help states, cities, and tribal governments protect themselves from cyberattacks and computer system failures. Think of it as federal funding to help local governments build stronger digital defenses against hackers and other cyber threats that could disrupt essential services like police departments, fire services, water systems, and emergency response centers.

The program works in two stages. First, states can apply for planning grants to develop a comprehensive cybersecurity strategy—essentially a roadmap for how they'll identify weaknesses in their computer systems and fix them. Once a state has an approved plan, they can then apply for implementation grants to actually carry out that plan. This might mean hiring cybersecurity experts, upgrading outdated computer systems, training government employees on security practices, or setting up systems to share threat information with neighboring states and the federal government. The bill allows each state to receive up to two planning grants and two implementation grants over a five-year period.

The money must be used for practical cybersecurity work, not just planning. States can use funds to support information-sharing networks that alert them to emerging threats, establish training programs and scholarships to help recruit cybersecurity workers for government jobs, coordinate emergency response plans with local officials and emergency services, and protect critical systems like 911 call centers. At least half of the money each state receives must go to local governments and tribal nations within that state. The bill specifically prohibits using these funds for recreational purposes or to replace existing state funding—it's meant to supplement what states are already spending on cybersecurity.

A special review committee made up of state officials, emergency managers, and cybersecurity experts will evaluate state plans and grant applications to ensure the money is being used effectively. The bill authorizes funding through 2025, though the actual amount Congress will appropriate hasn't been determined yet. Ultimately, this program aims to make government computer systems more resilient so that cyberattacks are less likely to disrupt the services that communities depend on.

State Cyber Resiliency Act

Kilmer, Derek

State Cyber Resiliency Act This bill establishes the State Cyber Resiliency Grant Program to assist state, local, and tribal governments in preventing, preparing for, protecting against, and responding to cyber threats. Under this program, the Department of Homeland Security may award grants to a state for the development and implementation of an active cyber resiliency plan. Such plan must be tailored to achieve specific objectives, including <ul> <li>enhancement of the response and resiliency of computer networks, industrial control systems, and communications systems against cybersecurity threats or vulnerabilities;</li> <li>implementation of continuous vulnerability assessments and threat mitigation practices;</li> <li>adoption of cybersecurity best practices by entities performing cybersecurity functions within a state; and</li> <li>confirmation that continuity of communications and data networks would be maintained in the event of a catastrophic disruption of such communications or networks. </li> </ul>