State and Local Cybersecurity Grant Program

Through the Infrastructure Investment and Jobs Act (IIJA), Congress established the State and Local Cybersecurity Improvement Act, which established the State and Local Cybersecurity Grant Program, appropriating $1 billion awarded over four years.

Funding for each state is calculated using a formula determined by the Cybersecurity and Infrastructure Security Agency (CISA). Georgia expects to receive approximately $9.8 million. The grant requires matching funds set at 40%.

For states, a majority of grant funding is focused on local government cybersecurity. At least 80% of grant funds must benefit local governments. Of that 80%, at least 25% must benefit rural areas.

These requirements can be met using a direct passthrough of funds, and with consent, spent on cyber capabilities provided on behalf of local governments.

Grant Objectives

  • Governance

    Develop and establish appropriate governance structures, including developing, implementing, or revising cybersecurity plants to improve capabilities to respond to cybersecurity incidents and ensure continuity of operations.

  • Evaluation

    Understand the current cybersecurity posture and areas for improvement based on continuous testing, evaluation, and structured assessments.

  • Protections

    Implement security protections commensurate with risk.

  • Training

    Ensure organization personnel are appropriately trained in cybersecurity commensurate with responsibility.

Applying for Grant Funds

All applications for this grant must be received by February 28, 2025.

To learn more about the State and Local Cybersecurity Grant Program, visit the Georgia Emergency Management and Homeland Security Agency website.