Bill to Enhance Federal Cybersecurity Resources for State, Local Governments Signed into Law
October 31, 2022 | Cole Arreola-Karr
Legislation to solidify collaboration among Federal cyber agencies and enhance their collaboration on cybersecurity measures with state and local government is now law.
President Joe Biden signed S. 2520 (Peters), the State and Local Cybersecurity Act of 2021, (PL 117-150), which codifies communication between the Cybersecurity Infrastructure and Security Agency (CISA) and official organizations, such as the Multi-State Information Sharing Analysis Center, that exist to enhance state and local governments’ cybersecurity capacity.
CISA already consistently works directly with state and local governments as well agencies providing cyber assistance to governments. The law codifies some of the agencies’ best practices, endorsing its ongoing efforts to cooperate and boost state and local governments’ cyber efforts. The law authorizes CISA to work with public organizations to:
- Assist with cybersecurity exercises.
- Provide operational trainings and technical assistance.
- Share real-time, detailed information on threats, risks, incidents, and other information for situational awareness.
- Offer to and periodically update state and local governments on information about products, resources, policies, guidelines, controls, and cybersecurity best practices.
- Aid state and local governments in the development of policies and procedures for coordinating vulnerability disclosures.
The Department of Homeland Security, the Department which CISA falls under, will be required to report to Congress every two years the services and capabilities CISA provides state and local entities.
NSDC supports the bipartisan State and Local Cybersecurity Act and sent a February 7, 2022 letter to the House Homeland Security Committee supporting the then-Senate passed S. 2520 sponsored by Senator Gary Peters, D-Ind., and the then-pending House companion sponsored by Congressman Joe Neguse, D-Colo.
NSDC will keep members updated on the State and Local Cybersecurity Act’s execution. Contact Cole Arreola-Karr, NSDC Federal Advocacy Director.