August 9, 2025
August 9, 2025
CISA and FEMA announced more than $100 million in FY2025 cybersecurity funding to help U.S. state, local, and tribal governments strengthen defenses. The package combines the State and Local Cybersecurity Grant Program (about $91.7 million) and the Tribal Cybersecurity Grant Program (about $12.1 million) to support planning and exercises, hiring local experts, and improving essential services. Funding flows through state administrative agencies, with at least 80% passed down to local governments and a minimum of 25% directed to rural areas.
The notice outlines eligibility and planning requirements, including the use of the FEMA GO system and resubmission of statewide Cybersecurity Plans by January 30, 2026. Recommended priorities include multifactor authentication, stronger logging, encryption of data at rest and in transit, phasing out unsupported internet-facing tech, eliminating default credentials, reliable backups, rapid two-way information sharing with CISA, and adoption of .gov domains. The announcement builds on a multiyear, $1 billion initiative launched in 2022 and comes as Congress weighs program reauthorization and potential refinements to improve effectiveness.