FY22 SLCGP

OVERVIEW: The purpose of the FY 2022 State and Local Cybersecurity Grant Program (SLCGP) is to strengthen cybersecurity practices and resilience of state and local governments. The SLCGP provides funding from the Infrastructure Investment and Jobs Act to implement investments that improve the security of critical infrastructure and improve the resilience of the services governments provide their communities. The grant is a reimbursable pass-through grant program with an overall goal to improve the cybersecurity posture of state and local government organizations by providing assistance for managing and reducing systemic cyber risk through the following objectives: Objective 1: Develop and establish appropriate governance structures, including developing, implementing, or revising cybersecurity plans, to improve capabilities to respond to cybersecurity incidents and ensure continuity of operations. Objective 2: Understand their current cybersecurity posture and areas for improvement based on continuous testing, evaluation, and structured assessments. Objective 3: Implement security protections commensurate with risk. Objective 4: Ensure organization personnel are appropriately trained in cybersecurity, commensurate with responsibility. IMPORTANT Please review and follow the State and Local Cybersecurity Grant Program (SLCGP) state guidance document. The SLCGP grant requires the state to develop a Cybersecurity Plan, establish a Cybersecurity Planning Committee to support the development of the plan, adopt key cybersecurity best practices, and identify projects to implement using the SLCGP funding. The cybersecurity committee has identified key efforts in the Cybersecurity Plan to strengthen cybersecurity across the state. All project applications must align with at least one of the focus areas identified in the plan. These focus areas are: -Build cybersecurity awareness -Build a professional cybersecurity workforce -Server and workstation behavior-based endpoint protection -Network monitoring and management intrusion detection systems for county networks Each application must demonstrate how the project relates to improving, preventing, preparing for, protecting against, and responding to cybersecurity incidents and best practices.

For FY 2022 SLCGP funds, each county, tribe, city, or special district may apply for funding in all focus areas. Projects must be prioritized due to limited federal funding available.

Cost share or match is not required for the FFY 2022 SLCGP. Future awards will have cost share requirements. Match amounts for each year are as follows: FY 2023 20%, FY 2024 30%, FY 2025 40%. Local match may be in-kind/soft from eligible activities.

Eligible Applicants for competitive awards include local and tribal governments. Local government means a city, town, county, consolidated city-county, special district, or school district or subdivision of these entities. Nonprofit, for-profit, and other entities not deemed as a local government entity are not eligible to receive SLCGP funds.

This is a competitive state grant, and there are often more funding requests than funding available. The Cybersecurity Planning Committee will make the final decision on projects to be included in the state application to FEMA in late spring. All applicants will be informed as to the status of their projects after the state application has been submitted. Please note - the project period of performance is projected to begin October 1, 2024.

For those projects awarded, preparedness reports (a.k.a. status reports), will be due by the 10th day after the end of each quarter until the project is complete and until a closeout request is submitted to your grant coordinator.

State Awarding Agency Contacts Amanda Avard - State Authorized Representative Pam Fruh Pam.Fruh@mt.gov 406-439-5917 Emily Schuff Emily.Schuff@mt.gov 406-417-9236