,,ii #aag? ,,congress #a/ ,session ,s4 #behe ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,augu/ #c1 #bjba,ms4 ,hassan 7= h]self1 ,mr4 ,cornyn1 ,ms4 ,s9ema1 & ,mr4 ,tillis7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to am5d ! ,homel& ,security ,act ( #bjjb to au?orize a grant program relat+ to ! cyb]security ( ,/ate1 local1 ,tribal1 & t]ritorial gov]nm5ts1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,/ate & ,local ,cyb]security ,improvem5t ,act4 #b4 ,/ate & ,local ,cyb]security ,grant ,program 7a7 ,9 g5]al ,subtitle ,a ( title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is am5d$ by add+ at ! end ! foll[+3 #bbah4 ,/ate & ,local ,cyb]security ,grant ,program 7a7 ,def9itions ,9 ?is section3 7#a7 ,appropriate committees ( ,congress ,! t]m appropriate committees ( ,congress means-- 7,a7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 & 7,b7 ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives4 7#b7 ,cyb] ?reat indicator ,! t]m cyb] ?reat indicator has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,act ( #bjae 7#f ,u4,s4,c4 #aeja74 7#c7 ,cyb]security ,plan ,! t]m ,cyb]security ,plan means a plan submitt$ by an eligible entity "u subsection 7e77#a74 7#d7 ,eligible entity ,! t]m eligible entity means a-- 7,a7 ,/ate2 or 7,b7 ,tribal gov]nm5t4 7#e7 ,incid5t ,! t]m incid5t has ! mean+ giv5 ! t]m 9 section #bbji4 7#f7 ,in=mation %>+ & analysis organization ,! t]m in=mation %>+ & analysis organization has ! mean+ giv5 ! t]m 9 section #bbbb4 7#g7 ,in=mation sy/em ,! t]m in=mation sy/em has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,act ( #bjae 7#f ,u4,s4,c4 #aeja74 7#h7 ,multi-entity gr\p ,! t]m multi-entity gr\p means a gr\p ( #b or m eligible entities desir+ a grant "u ?is section4 7#i7 ,onl9e s]vice ,! t]m onl9e s]vice means any int]net-fac+ s]vice1 includ+ a website1 email1 virtual private network1 or cu/om application4 7#aj7 ,rural area ,! t]m rural area has ! mean+ giv5 ! t]m 9 section #ecjb ( title #di1 ,unit$ ,/ates ,code4 7#aa7 ,/ate & ,local ,cyb]security ,grant ,program ,! t]m ,/ate & ,local ,cyb]security ,grant ,program means ! program e/abli%$ "u subsection 7b74 7#ab7 ,tribal gov]nm5t ,! t]m ,tribal gov]nm5t means ! recogniz$ gov]n+ body ( any ,indian or ,alaska ,native ,tribe1 b&1 nation1 pueblo1 village1 community1 compon5t b&1 or compon5t res]vation1 t is individually id5tifi$ 7includ+ p>5!tically7 9 ! mo/ rec5t li/ publi%$ pursuant to ,section #ajd ( ! ,f$]ally ,recogniz$ ,indian ,tribe ,li/ ,act ( #aiid 7#be ,u4,s4,c4 #eaca74 7b7 ,e/abli%m5t 7#a7 ,9 g5]al ,!re is e/abli%$ )9 ! ,dep>tm5t a program to aw>d grants to eligible entities to address cyb]security risks & cyb]security ?reats to in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ,/ate1 local1 or ,tribal gov]nm5ts4 7#b7 ,application ,an eligible entity desir+ a grant "u ! ,/ate & ,local ,cyb]security ,grant ,program %all submit to ! ,secret>y an application at su* "t1 9 su* mann]1 & conta9+ su* in=mation z ! ,secret>y may require4 7c7 ,adm9i/ration ,! ,/ate & ,local ,cyb]security ,grant ,program %all be adm9i/]$ 9 ! same (fice ( ! ,dep>tm5t t adm9i/]s grants made "u sections #bjjc & #bjjd4 7d7 ,use ( funds ,an eligible entity t receives a grant "u ?is section & a local gov]nm5t t receives funds f a grant "u ?is section1 z appropriate1 %all use ! grant to-- 7#a7 implem5t ! ,cyb]security ,plan ( ! eligible entity2 7#b7 develop or revise ! ,cyb]security ,plan ( ! eligible entity2 7#c7 pay exp5ses directly relat+ to ! adm9i/ration ( ! grant1 :i* %all n exce$ #e p]c5t ( ! am\nt ( ! grant2 7#d7 assi/ ) activities t address imm95t cyb]security ?reats1 z confirm$ by ! ,secret>y1 act+ ?r\gh ! ,director1 to ! in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity or a local gov]nm5t )9 ! jurisdiction ( ! eligible entity2 or 7#e7 fund any o!r appropriate activity det]m9$ by ! ,secret>y1 act+ ?r\gh ! ,director4 7e7 ,cyb]security plans 7#a7 ,9 g5]al ,an eligible entity apply+ = a grant "u ?is section %all submit to ! ,secret>y a ,cyb]security ,plan = review 9 accordance ) subsection 7i74 7#b7 ,requir$ elem5ts ,a ,cyb]security ,plan ( an eligible entity %all-- 7,a7 incorporate1 to ! ext5t practicable-- 7i7 any exi/+ plans ( ! eligible entity to protect aga9/ cyb]security risks & cyb]security ?reats to in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ,/ate1 local1 or ,tribal gov]nm5ts2 & 7ii7 if ! eligible entity is a ,/ate1 consultation & fe$back f local gov]nm5ts & associations ( local gov]nm5ts )9 ! jurisdiction ( ! eligible entity2 7,b7 describe1 to ! ext5t practicable1 h[ ! eligible entity w-- 7i7 manage1 monitor1 & track in=mation sy/ems1 applications1 & us] acc\nts own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 & ! in=mation te*nology deploy$ on ^? in=mation sy/ems1 includ+ legacy in=mation sy/ems & in=mation te*nology t are no long] support$ by ! manufactur] ( ! sy/ems or te*nology2 7ii7 monitor1 audit1 &1 track network traffic & activity transit+ or travel+ to or f in=mation sy/ems1 applications1 & us] acc\nts own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity2 7iii7 enhance ! prep>ation1 response1 & resili5cy ( in=mation sy/ems1 applications1 & us] acc\nts own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 aga9/ cyb]security risks & cyb]security ?reats2 7iv7 implem5t a process ( cont9u\s cyb]security vuln]ability assessm5ts & ?reat mitigation practices prioritiz$ by degree ( risk to address cyb]security risks & cyb]security ?reats on in=mation sy/ems1 applications1 & us] acc\nts own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity2 7v7 ensure t ! eligible entity &1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 adopt & use be/ practices & me?odologies to enhance cyb]security1 su* z-- 7,i7 ! practices set =? 9 ! cyb]security framework develop$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology2 7,,ii7 cyb] *a9 supply *a9 risk managem5t be/ practices id5tifi$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology2 & 7,,iii7 k bases ( adv]s>y tools & tactics2 7vi7 promote ! deliv]y ( safe1 recognizable1 & tru/wor?y onl9e s]vices by ! eligible entity &1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 includ+ ?r\gh ! use ( ! 4gov int]net doma92 7vii7 ensure cont9uity ( op]ations ( ! eligible entity &1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 9 ! ev5t ( a cyb]security incid5t1 includ+ by conduct+ ex]cises to practice respond+ to a cyb]security incid5t2 7viii7 use ! ,national ,initiative = ,cyb]security ,education ,work=ce ,framework = ,cyb]security develop$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology to id5tify & mitigate any gaps 9 ! cyb]security work=ces ( ! eligible entity &1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 enhance recruitm5t & ret5tion ef=ts = ^? work=ces1 & bol/] ! k1 skills1 & abilities ( p]sonnel ( ! eligible entity &1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 to address cyb]security risks & cyb]security ?reats1 su* z ?r\gh cyb]security hygi5e tra9+2 7ix7 if ! eligible entity is a ,/ate1 ensure cont9uity ( communications & data networks )9 ! jurisdiction ( ! eligible entity betwe5 ! eligible entity & local gov]nm5ts )9 ! jurisdiction ( ! eligible entity 9 ! ev5t ( an incid5t involv+ ^? communications or data networks2 7x7 assess & mitigate1 to ! greate/ degree possible1 cyb]security risks & cyb]security ?reats relat+ to critical infra/ructure & key res\rces1 ! degradation ( :i* may impact ! p]=mance ( in=mation sy/ems )9 ! jurisdiction ( ! eligible entity2 7xi7 enhance capabilities to %>e cyb] ?reat indicators & relat$ in=mation betwe5 ! eligible entity &-- 7,i7 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity1 includ+ by exp&+ in=mation %>+ agreem5ts ) ! ,dep>tm5t2 & 7,,ii7 ! ,dep>tm5t2 7xii7 lev]age cyb]security s]vices (f]$ by ! ,dep>tm5t2 7xiii7 implem5t an in=mation te*nology & op]ational te*nology mod]nization cyb]security review process t ensures alignm5t betwe5 in=mation te*nology & op]ational te*nology cyb]security objectives2 7xiv7 develop & coord9ate /rategies to address cyb]security risks & cyb]security ?reats 9 consultation )-- 7,i7 if ! eligible entity is a ,/ate1 local gov]nm5ts & associations ( local gov]nm5ts )9 ! jurisdiction ( ! eligible entity2 & 7,,ii7 z applicable-- 7aa7 eligible entities t neighbor ! jurisdiction ( ! eligible entity or1 z appropriate1 memb]s ( an in=mation %>+ & analysis organization2 & 7bb7 c\ntries t neighbor ! jurisdiction ( ! eligible entity2 7xv7 ensure adequate access to1 & p>ticipation 91 ! s]vices & programs describ$ 9 ?is subp>agraph by rural areas )9 ! jurisdiction ( ! eligible entity2 & 7xvi7 di/ribute funds1 items1 s]vices1 capabilities1 or activities to local gov]nm5ts "u subsection 7n77#b77;,a71 includ+ ! fraction ( t di/ribution ! eligible entity plans to di/ribute to rural areas "u subsection 7n77#b77;,b72 7,c7 assess ! capabilities ( ! eligible entity relat+ to ! actions describ$ 9 subp>agraph 7,b72 7,d7 describe1 z appropriate & to ! ext5t practicable1 ! individual responsibilities ( ! eligible entity & local gov]nm5ts )9 ! jurisdiction ( ! eligible entity 9 implem5t+ ! plan2 7,e7 outl9e1 to ! ext5t practicable1 ! necess>y res\rces & a timel9e = implem5t+ ! plan2 & 7,f7 describe ! metrics ! eligible entity w use to measure progress t[>ds-- 7i7 implem5t+ ! plan2 & 7ii7 r$uc+ cyb]security risks to1 & id5tify+1 respond+ to1 & recov]+ f cyb]security ?reats to1 in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity4 7#c7 ,discretion>y elem5ts ,9 draft+ a ,cyb]security ,plan1 an eligible entity may-- 7,a7 consult ) ! ,multi-,/ate ,in=mation ,%>+ & ,analysis ,c5t]2 7,b7 include a description ( coop]ative programs develop$ by gr\ps ( local gov]nm5ts )9 ! jurisdiction ( ! eligible entity to address cyb]security risks & cyb]security ?reats2 & 7,c7 include a description ( programs provid$ by ! eligible entity to support local gov]nm5ts & own]s & op]ators ( critical infra/ructure to address cyb]security risks & cyb]security ?reats4 7f7 ,multi-,entity grants 7#a7 ,9 g5]al ,! ,secret>y may aw>d grants "u ?is section to a multi-entity gr\p to support multi-entity ef=ts to address cyb]security risks & cyb]security ?reats to in=mation sy/ems )9 ! jurisdictions ( ! eligible entities t comprise ! multi-entity gr\p4 7#b7 ,satisfaction ( o!r requirem5ts ,9 ord] to be eligible = a multi-entity grant "u ?is subsection1 ea* eligible entity t comprises a multi-entity gr\p %all h-- 7,a7 a ,cyb]security ,plan t has be5 review$ by ! ,secret>y 9 accordance ) subsection 7i72 & 7,b7 a cyb]security plann+ committee e/abli%$ 9 accordance ) subsection 7g74 7#c7 ,application 7,a7 ,9 g5]al ,a multi-entity gr\p apply+ = a multi-entity grant "u p>agraph 7#a7 %all submit to ! ,secret>y an application at su* "t1 9 su* mann]1 & conta9+ su* in=mation z ! ,secret>y may require4 7,b7 ,multi-entity project plan ,an application = a grant "u ?is section ( a multi-entity gr\p "u subp>agraph 7,a7 %all include a plan describ+-- 7i7 ! division ( responsibilities among ! eligible entities t comprise ! multi-entity gr\p2 7ii7 ! di/ribution ( fund+ f ! grant among ! eligible entities t comprise ! multi-entity gr\p2 & 7iii7 h[ ! eligible entities t comprise ! multi-entity gr\p w "w toge!r to implem5t ! ,cyb]security ,plan ( ea* ( ^? eligible entities4 7g7 ,plann+ committees 7#a7 ,9 g5]al ,an eligible entity t receives a grant "u ?is section %all e/abli% a cyb]security plann+ committee to-- 7,a7 assi/ ) ! developm5t1 implem5tation1 & revision ( ! ,cyb]security ,plan ( ! eligible entity2 7,b7 approve ! ,cyb]security ,plan ( ! eligible entity2 & 7,c7 assi/ ) ! det]m9ation ( effective fund+ priorities = a grant "u ?is section 9 accordance ) subsections 7d7 & 7j74 7#b7 ,composition ,a committee ( an eligible entity e/abli%$ "u p>agraph 7#a7 %all-- 7,a7 be compris$ ( repres5tatives f-- 7i7 ! eligible entity2 7ii7 if ! eligible entity is a ,/ate1 c\nties1 cities1 & t[ns )9 ! jurisdiction ( ! eligible entity2 & 7iii7 in/itutions ( public education & heal? )9 ! jurisdiction ( ! eligible entity2 & 7,b7 include1 z appropriate1 repres5tatives ( rural1 suburban1 & high-population jurisdictions4 7#c7 ,cyb]security exp]tise ,n less ?an "o-half ( ! repres5tatives ( a committee e/abli%$ "u p>agraph 7#a7 %all h pr(essional exp]i5ce relat+ to cyb]security or in=mation te*nology4 7#d7 ,rule ( con/ruction reg>d+ exi/+ plann+ committees ,no?+ 9 ?is subsection %all be con/ru$ to require an eligible entity to e/abli% a cyb]security plann+ committee if ! eligible entity has e/abli%$ & uses a multijurisdictional plann+ committee or commission t-- 7,a7 meets ! requirem5ts ( ?is subsection2 or 7,b7 may be exp&$ or lev]ag$ to meet ! requirem5ts ( ?is subsection1 includ+ ?r\gh ! =mation ( a cyb]security plann+ subcommittee4 7#e7 ,rule ( con/ruction reg>d+ control ( in=mation sy/ems ( eligible entities ,no?+ 9 ?is subsection %all be con/ru$ to p]mit a cyb]security plann+ committee ( an eligible entity t meets ! requirem5ts ( ?is subsection to make decisions relat+ to in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity4 7h7 ,special rule = ,tribal gov]nm5ts ,) respect to any requirem5t "u subsection 7e7 or 7g71 ! ,secret>y1 9 consultation ) ! ,secret>y ( ! ,int]ior & ,tribal gov]nm5ts1 may prescribe an alt]native sub/antively simil> requirem5t = ,tribal gov]nm5ts if ! ,secret>y f9ds t ! alt]native requirem5t is necess>y = ! effective deliv]y & adm9i/ration ( grants to ,tribal gov]nm5ts "u ?is section4 7i7 ,review ( plans 7#a7 ,review z condition ( grant 7,a7 ,9 g5]al ,subject to p>agraph 7#c71 be=e an eligible entity may receive a grant "u ?is section1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all-- 7i7 review ! ,cyb]security ,plan ( ! eligible entity1 includ+ any revis$ ,cyb]security ,plans ( ! eligible entity2 & 7ii7 det]m9e t ! ,cyb]security ,plan review$ "u clause 7i7 satisfies ! requirem5ts "u p>agraph 7#b74 7,b7 ,duration ( det]m9ation ,9 ! case ( a det]m9ation "u subp>agraph 7,a77ii7 t a ,cyb]security ,plan satisfies ! requirem5ts "u p>agraph 7#b71 ! det]m9ation %all be effective = ! #b-ye> p]iod beg9n+ on ! date ( ! det]m9ation4 7,c7 ,annual r5ewal ,n lat] ?an #b ye>s aft] ! date on :i* ! ,secret>y det]m9es "u subp>agraph 7,a77ii7 t a ,cyb]security ,plan satisfies ! requirem5ts "u p>agraph 7#b71 & annually !reaft]1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all-- 7i7 det]m9e :e!r ! ,cyb]security ,plan & any revisions cont9ue to meet ! crit]ia describ$ 9 p>agraph 7#b72 & 7ii7 r5ew ! det]m9ation if ! ,secret>y1 act+ ?r\gh ! ,director1 makes a positive det]m9ation "u clause 7i74 7#b7 ,plan requirem5ts ,9 review+ a ,cyb]security ,plan ( an eligible entity "u ?is subsection1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all ensure t ! ,cyb]security ,plan-- 7,a7 satisfies ! requirem5ts ( subsection 7e77#b72 & 7,b7 has be5 approv$ by-- 7i7 ! cyb]security plann+ committee ( ! eligible entity e/abli%$ "u subsection 7g72 & 7ii7 ! ,*ief ,in=mation ,(fic]1 ! ,*ief ,in=mation ,security ,(fic]1 or an equival5t (ficial ( ! eligible entity4 7#c7 ,exception ,not)/&+ subsection 7e7 & p>agraph 7#a7 ( ?is subsection1 ! ,secret>y may aw>d a grant "u ?is section to an eligible entity t does n submit a ,cyb]security ,plan to ! ,secret>y = review be=e ,septemb] #cj1 #bjbc1 if ! eligible entity c]tifies to ! ,secret>y t-- 7,a7 ! activities t w be support$ by ! grant are-- 7i7 integral to ! developm5t ( ! ,cyb]security ,plan ( ! eligible entity2 or 7ii7 necess>y to assi/ ) activities describ$ 9 subsection 7d77#d71 z confirm$ by ! ,director2 & 7,b7 ! eligible entity w submit to ! ,secret>y a ,cyb]security ,plan = review "u ?is subsection by ,septemb] #cj1 #bjbc4 7#d7 ,rule ( con/ruction ,no?+ 9 ?is subsection %all be con/ru$ to provide au?ority to ! ,secret>y to-- 7,a7 regulate ! mann] by :i* an eligible entity or local gov]nm5t improves ! cyb]security ( ! in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity or local gov]nm5t2 or 7,b7 condition ! receipt ( grants "u ?is section on-- 7i7 p>ticipation 9 a p>ticul> ,f$]al program2 or 7ii7 ! use ( a specific product or te*nology4 7j7 ,limitations on uses ( funds 7#a7 ,9 g5]al ,any entity t receives funds f a grant "u ?is section may n use ! grant-- 7,a7 to supplant ,/ate or local funds2 7,b7 = any recipi5t co/-%>+ contribution2 7,c7 to pay a ransom2 7,d7 = recreational or social purposes2 or 7,e7 = any purpose t does n address cyb]security risks or cyb]security ?reats on in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity t receives ! grant or a local gov]nm5t )9 ! jurisdiction ( ! eligible entity4 7#b7 ,compliance ov]sight ,9 addition to any o!r rem$y available1 ! ,secret>y may take su* actions z are necess>y to ensure t a recipi5t ( a grant "u ?is section uses ! grant = ! purposes = :i* ! grant is aw>d$4 7#c7 ,rule ( con/ruction ,no?+ 9 p>agraph 7#a77;,a7 %all be con/ru$ to prohibit ! use ( funds f a grant "u ?is section aw>d$ to a ,/ate1 local1 or ,tribal gov]nm5t = o!rwise p]missible uses "u ?is section on ! basis t ! ,/ate1 local1 or ,tribal gov]nm5t has previ\sly us$ ,/ate1 local1 or ,tribal funds to support ! same or simil> uses4 7k7 ,opportunity ,to am5d applications ,9 consid]+ applications = grants "u ?is section1 ! ,secret>y %all provide applicants ) a reasonable opportunity to correct any defects 9 ^? applications be=e mak+ f9al aw>ds1 includ+ by all[+ applicants to revise a submitt$ ,cyb]security ,plan4 7l7 ,apportionm5t ,= fiscal ye> #bjbb & ea* fiscal ye> !reaft]1 ! ,secret>y %all apportion am\nts appropriat$ to c>ry out ?is section among eligible entities z foll[s3 7#a7 ,basel9e am\nt ,! ,secret>y %all fir/ apportion-- 7,a7 #j4be p]c5t ( su* am\nts to ea* ( ,am]ican ,samoa1 ! ,commonweal? ( ! ,nor!rn ,m>iana ,isl&s1 ,guam1 & ! ,unit$ ,/ates ,virg9 ,isl&s2 7,b7 #a p]c5t ( su* am\nts to ea* ( ! rema9+ ,/ates2 & 7,c7 #c p]c5t ( su* am\nts to ,tribal gov]nm5ts4 7#b7 ,rema9d] ,! ,secret>y %all apportion ! rema9d] ( su* am\nts to ,/ates z foll[s3 7,a7 #ej p]c5t ( su* rema9d] 9 ! ratio t ! population ( ea* ,/ate1 be>s to ! population ( all ,/ates2 & 7,b7 #ej p]c5t ( su* rema9d] 9 ! ratio t ! population ( ea* ,/ate t resides 9 rural areas1 be>s to ! population ( all ,/ates t resides 9 rural areas4 7#c7 ,apportionm5t among ,tribal gov]nm5ts ,9 det]m9+ h[ to apportion am\nts to ,tribal gov]nm5ts "u p>agraph 7#a77;,c71 ! ,secret>y %all consult ) ! ,secret>y ( ! ,int]ior & ,tribal gov]nm5ts4 7#d7 ,multi-entity grants ,an am\nt receiv$ f a multi-entity grant aw>d$ "u subsection 7f77#a7 by a ,/ate or ,tribal gov]nm5t t is a memb] ( ! multi-entity gr\p %all qualify z an apportionm5t = ! purpose ( ?is subsection4 7m7 ,f$]al %>e 7#a7 ,9 g5]al ,! ,f$]al %>e ( ! co/ ( an activity c>ri$ out us+ funds made available ) a grant "u ?is section may n exce$-- 7,a7 9 ! case ( a grant to an eligible entity-- 7i7 = fiscal ye> #bjbb1 #ij p]c5t2 7ii7 = fiscal ye> #bjbc1 #hj p]c5t2 7iii7 = fiscal ye> #bjbd1 #gj p]c5t2 & 7iv7 = fiscal ye> #bjbe1 #fj p]c5t2 & 7,b7 9 ! case ( a grant to a multi-entity gr\p-- 7i7 = fiscal ye> #bjbb1 #ajj p]c5t2 7ii7 = fiscal ye> #bjbc1 #ij p]c5t2 7iii7 = fiscal ye> #bjbd1 #hj p]c5t2 & 7iv7 = fiscal ye> #bjbe1 #gj p]c5t4 7#b7 ,waiv] 7,a7 ,9 g5]al ,! ,secret>y may waive or modify ! requirem5ts ( p>agraph 7#a7 if an eligible entity or multi-entity gr\p demon/rates economic h>d%ip4 7,b7 ,guidel9es ,! ,secret>y %all e/abli% & publi% guidel9es = det]m9+ :at con/itutes economic h>d%ip = ! purposes ( ?is subsection4 7,c7 ,consid]ations ,9 develop+ guidel9es "u subp>agraph 7,b71 ! ,secret>y %all consid]1 ) respect to ! jurisdiction ( an eligible entity-- 7i7 *anges 9 rates ( unemploym5t 9 ! jurisdiction f previ\s ye>s2 7ii7 *anges 9 ! p]c5tage ( individuals :o are eligible to receive b5efits "u ! supplem5tal nutrition assi/ance program e/abli%$ "u ! ,food & ,nutrition ,act ( #bjjh 7#g ,u4,s4,c4 #bjaa et seq47 f previ\s ye>s2 & 7iii7 any o!r factors ! ,secret>y consid]s appropriate4 7#c7 ,waiv] = ,tribal gov]nm5ts ,not)/&+ p>agraph 7#b71 ! ,secret>y1 9 consultation ) ! ,secret>y ( ! ,int]ior & ,tribal gov]nm5ts1 may waive or modify ! requirem5ts ( p>agraph 7#a7 = #a or m ,tribal gov]nm5ts if ! ,secret>y det]m9es t ! waiv] is 9 ! public int]e/4 7n7 ,responsibilities ( grantees 7#a7 ,c]tification ,ea* eligible entity or multi-entity gr\p t receives a grant "u ?is section %all c]tify to ! ,secret>y t ! grant w be us$-- 7,a7 = ! purpose = :i* ! grant is aw>d$2 & 7,b7 9 compliance ) subsections 7d7 & 7j74 7#b7 ,availability ( funds to local gov]nm5ts & rural areas 7,a7 ,9 g5]al ,subject to subp>agraph 7,c71 n lat] ?an #de days aft] ! date on :i* an eligible entity or multi-entity gr\p receives a grant "u ?is section1 ! eligible entity or multi-entity gr\p %all1 )\t impos+ unreasonable or unduly burd5some requirem5ts z a condition ( receipt1 obligate or o!rwise make available to local gov]nm5ts )9 ! jurisdiction ( ! eligible entity or ! eligible entities t comprise ! multi-entity gr\p1 consi/5t ) ! ,cyb]security ,plan ( ! eligible entity or ! ,cyb]security ,plans ( ! eligible entities t comprise ! multi-entity gr\p-- 7i7 n less ?an #hj p]c5t ( funds available "u ! grant2 7ii7 ) ! cons5t ( ! local gov]nm5ts1 items1 s]vices1 capabilities1 or activities hav+ a value ( n less ?an #hj p]c5t ( ! am\nt ( ! grant2 or 7iii7 ) ! cons5t ( ! local gov]nm5ts1 grant funds comb9$ ) o!r items1 s]vices1 capabilities1 or activities hav+ ! total value ( n less ?an #hj p]c5t ( ! am\nt ( ! grant4 7,b7 ,availability to rural areas ,9 obligat+ funds1 items1 s]vices1 capabilities1 or activities to local gov]nm5ts "u subp>agraph 7,a71 ! eligible entity or eligible entities t comprise ! multi-entity gr\p %all ensure t rural areas )9 ! jurisdiction ( ! eligible entity or ! eligible entities t comprise ! multi-entity gr\p receive n less ?an-- 7i7 #be p]c5t ( ! am\nt ( ! grant aw>d$ to ! eligible entity2 7ii7 items1 s]vices1 capabilities1 or activities hav+ a value ( n less ?an #be p]c5t ( ! am\nt ( ! grant aw>d$ to ! eligible entity2 or 7iii7 grant funds comb9$ ) o!r items1 s]vices1 capabilities1 or activities hav+ ! total value ( n less ?an #be p]c5t ( ! grant aw>d$ to ! eligible entity4 7,c7 ,exceptions ,?is p>agraph %all n apply to-- 7i7 any grant aw>d$ "u ?is section t solely supports activities t are integral to ! developm5t or revision ( ! ,cyb]security ,plan ( ! eligible entity2 or 7ii7 ! ,di/rict ( ,columbia1 ! ,commonweal? ( ,pu]to ,rico1 ,am]ican ,samoa1 ! ,commonweal? ( ! ,nor!rn ,m>iana ,isl&s1 ,guam1 ! ,unit$ ,/ates ,virg9 ,isl&s1 or a ,tribal gov]nm5t4 7#c7 ,c]tifications reg>d+ di/ribution ( grant funds to local gov]nm5ts ,an eligible entity or multi-entity gr\p %all c]tify to ! ,secret>y t ! eligible entity or multi-entity gr\p has made ! di/ribution to local gov]nm5ts requir$ "u p>agraph 7#b74 7#d7 ,ext5sion ( p]iod 7,a7 ,9 g5]al ,an eligible entity or multi-entity gr\p may reque/ 9 writ+ t ! ,secret>y ext5d ! p]iod ( "t specifi$ 9 p>agraph 7#b7 = an additional p]iod ( "t4 7,b7 ,approval ,! ,secret>y may approve a reque/ = an ext5sion "u subp>agraph 7,a7 if ! ,secret>y det]m9es ! ext5sion is necess>y to ensure t ! obligation & exp5diture ( grant funds align ) ! purpose ( ! ,/ate & ,local ,cyb]security ,grant ,program4 7#e7 ,direct fund+ ,if an eligible entity does n make a di/ribution to a local gov]nm5t requir$ "u p>agraph 7#b7 9 a timely fa%ion1 ! local gov]nm5t may petition ! ,secret>y to reque/ ! ,secret>y to provide funds directly to ! local gov]nm5t4 7#f7 ,limitation on con/ruction ,a grant aw>d$ "u ?is section may n be us$ to acquire l& or to con/ruct1 remodel1 or p]=m alt]ations ( build+s or o!r physical facilities4 7#g7 ,consultation 9 allocat+ funds ,an eligible entity apply+ = a grant "u ?is section %all agree to consult ! ,*ief ,in=mation ,(fic]1 ! ,*ief ,in=mation ,security ,(fic]1 or an equival5t (ficial ( ! eligible entity 9 allocat+ funds f a grant aw>d$ "u ?is section4 7#h7 ,p5alties ,9 addition to o!r rem$ies available to ! ,secret>y1 if an eligible entity violates a requirem5t ( ?is subsection1 ! ,secret>y may-- 7,a7 t]m9ate or r$uce ! am\nt ( a grant aw>d$ "u ?is section to ! eligible entity2 or 7,b7 di/ribute grant funds previ\sly aw>d$ to ! eligible entity-- 7i7 9 ! case ( an eligible entity t is a ,/ate1 directly to ! appropriate local gov]nm5t z a replacem5t grant 9 an am\nt det]m9$ by ! ,secret>y2 or 7ii7 9 ! case ( an eligible entity t is a ,tribal gov]nm5t1 to ano!r ,tribal gov]nm5t or ,tribal gov]nm5ts z a replacem5t grant 9 an am\nt det]m9$ by ! ,secret>y4 7o7 ,consultation ) /ate1 local1 & tribal repres5tatives ,9 c>ry+ out ?is section1 ! ,secret>y %all consult ) ,/ate1 local1 & ,tribal repres5tatives ) pr(essional exp]i5ce relat+ to cyb]security1 includ+ repres5tatives ( associations repres5t+ ,/ate1 local1 & ,tribal gov]nm5ts1 to in=m-- 7#a7 guidance = applicants = grants "u ?is section1 includ+ guidance = ,cyb]security ,plans2 7#b7 ! /udy ( risk-bas$ =mulas requir$ "u subsection 7q77#d72 7#c7 ! developm5t ( guidel9es requir$ "u subsection 7m77#b77;,b72 & 7#d7 any modifications describ$ 9 subsection 7q77#b77;,d74 7p7 ,notification to ,congress ,n lat] ?an #c bus9ess days be=e ! date on :i* ! ,dep>tm5t ann\nces ! aw>d ( a grant to an eligible entity "u ?is section1 includ+ an ann\ncem5t to ! eligible entity1 ! ,secret>y %all provide to ! appropriate committees ( ,congress notice ( ! ann\ncem5t4 7q7 ,reports1 /udy1 & review 7#a7 ,annual reports by grant recipi5ts 7,a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date on :i* an eligible entity receives a grant "u ?is section = ! purpose ( implem5t+ ! ,cyb]security ,plan ( ! eligible entity1 includ+ an eligible entity t comprises a multi-entity gr\p t receives a grant = t purpose1 & annually !reaft] until #a ye> aft] ! date on :i* funds f ! grant are exp5d$ or return$1 ! eligible entity %all submit to ! ,secret>y a report t1 us+ ! metrics describ$ 9 ! ,cyb]security ,plan ( ! eligible entity1 describes ! progress ( ! eligible entity 9-- 7i7 implem5t+ ! ,cyb]security ,plan ( ! eligible entity2 & 7ii7 r$uc+ cyb]security risks to1 & id5tify+1 respond+ to1 & recov]+ f cyb]security ?reats to1 in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ! eligible entity or1 if ! eligible entity is a ,/ate1 local gov]nm5ts )9 ! jurisdiction ( ! eligible entity4 7,b7 ,abs5ce ( plan ,n lat] ?an #a ye> aft] ! date on :i* an eligible entity t does n h a ,cyb]security ,plan receives funds "u ?is section1 & annually !reaft] until #a ye> aft] ! date on :i* funds f ! grant are exp5d$ or return$1 ! eligible entity %all submit to ! ,secret>y a report describ+ h[ ! eligible entity obligat$ & exp5d$ grant funds to-- 7i7 develop or revise a ,cyb]security ,plan2 or 7ii7 assi/ ) ! activities describ$ 9 subsection 7d77#d74 7#b7 ,annual reports to ,congress ,n less frequ5tly ?an annually1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all submit to ,congress a report on-- 7,a7 ! use ( grants aw>d$ "u ?is section2 7,b7 ! proportion ( grants us$ to support cyb]security 9 rural areas2 7,c7 ! effectiv5ess ( ! ,/ate & ,local ,cyb]security ,grant ,program2 7,d7 any necess>y modifications to ! ,/ate & ,local ,cyb]security ,grant ,program2 & 7,e7 any progress made t[>d-- 7i7 develop+1 implem5t+1 or revis+ ,cyb]security ,plans2 & 7ii7 r$uc+ cyb]security risks to1 & id5tify+1 respond+ to1 & recov]+ f cyb]security ?reats to1 in=mation sy/ems own$ or op]at$ by1 or on behalf (1 ,/ate1 local1 or ,tribal gov]nm5ts z a result ( ! aw>d ( grants "u ?is section4 7#c7 ,public availability 7,a7 ,9 g5]al ,! ,secret>y1 act+ ?r\gh ! ,director1 %all make ea* report submitt$ "u p>agraph 7#b7 publicly available1 includ+ by mak+ ea* report available on ! website ( ! ,ag5cy4 7,b7 ,r$actions ,9 mak+ ea* report publicly available "u subp>agraph 7,a71 ! ,director may make r$actions t ! ,director1 9 consultation ) ea* eligible entity1 det]m9es necess>y to protect classifi$ or o!r in=mation exempt f disclosure "u section #eeb ( title #e1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! ,fre$om ( ,in=mation ,act74 7#d7 ,/udy ( risk-bas$ =mulas 7,a7 ,9 g5]al ,n lat] ?an ,septemb] #cj1 #bjbd1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all submit to ! appropriate committees ( ,congress a /udy & legislative recomm5dations on ! pot5tial use ( a risk-bas$ =mula = apportion+ funds "u ?is section1 includ+-- 7i7 pot5tial compon5ts t c\ld be includ$ 9 a risk-bas$ =mula1 includ+ ! pot5tial impact ( ^? compon5ts on support = rural areas "u ?is section2 7ii7 pot5tial s\rces ( data & in=mation necess>y = ! implem5tation ( a risk-bas$ =mula2 7iii7 any ob/acles to implem5t+ a risk-bas$ =mula1 includ+ ob/acles t require a legislative solution2 7iv7 if a risk-bas$ =mula 7 to be implem5t$ = fiscal ye> #bjbf1 a recomm5d$ risk-bas$ =mula = ! ,/ate & ,local ,cyb]security ,grant ,program2 & 7v7 any o!r in=mation t ! ,secret>y1 act+ ?r\gh ! ,director1 det]m9es necess>y to help ,congress und]/& ! progress t[>ds1 & ob/acles to1 implem5t+ a risk-bas$ =mula4 7,b7 ,inapplicability ( ,pap]work ,r$uction ,act ,! requirem5ts ( *apt] #ce ( title #dd1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! ,pap]work ,r$uction ,act71 %all n apply to any action tak5 to c>ry out ?is p>agraph4 7#e7 ,tribal cyb]security ne$s report ,n lat] ?an #b ye>s aft] ! date ( enactm5t ( ?is section1 ! ,secret>y1 act+ ?r\gh ! ,director1 %all submit to ,congress a report t-- 7,a7 describes ! cyb]security ne$s ( ,tribal gov]nm5ts1 :i* %all be det]m9$ 9 consultation ) ! ,secret>y ( ! ,int]ior & ,tribal gov]nm5ts2 & 7,b7 includes any recomm5dations = address+ ! cyb]security ne$s ( ,tribal gov]nm5ts1 includ+ any necess>y modifications to ! ,/ate & ,local ,cyb]security ,grant ,program to bett] s]ve ,tribal gov]nm5ts4 7#f7 ,,gao review ,n lat] ?an #c ye>s aft] ! date ( enactm5t ( ?is section1 ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all conduct a review ( ! ,/ate & ,local ,cyb]security ,grant ,program1 includ+-- 7,a7 ! grant selection process ( ! ,secret>y2 & 7,b7 a sample ( grants aw>d$ "u ?is section4 7r7 ,au?orization ( appropriations 7#a7 ,9 g5]al ,!re are au?oriz$ to be appropriat$ = activities "u ?is section-- 7,a7 = fiscal ye> #bjbb1 #bjj1jjj1jjj2 7,b7 = fiscal ye> #bjbc1 #djj1jjj1jjj2 7,c7 = fiscal ye> #bjbd1 #cjj1jjj1jjj2 & 7,d7 = fiscal ye> #bjbe1 #ajj1jjj1jjj4 7#b7 ,transf]s au?oriz$ 7,a7 ,9 g5]al ,dur+ a fiscal ye>1 ! ,secret>y or ! head ( any compon5t ( ! ,dep>tm5t t adm9i/]s ! ,/ate & ,local ,cyb]security ,grant ,program may transf] n m ?an #e p]c5t ( ! am\nts appropriat$ pursuant to p>agraph 7#a7 or o!r am\nts appropriat$ to c>ry out ! ,/ate & ,local ,cyb]security ,grant ,program = t fiscal ye> to an acc\nt ( ! ,dep>tm5t = sal>ies1 exp5ses1 & o!r adm9i/rative co/s incurr$ = ! managem5t1 adm9i/ration1 or evaluation ( ?is section4 7,b7 ,additional appropriations ,any funds transf]r$ "u subp>agraph 7,a7 %all be 9 addition to any funds appropriat$ to ! ,dep>tm5t or ! compon5ts describ$ 9 subp>agraph 7,a7 = sal>ies1 exp5ses1 & o!r adm9i/rative co/s4 7s7 ,t]m9ation 7#a7 ,9 g5]al ,subject to p>agraph 7#b71 ! requirem5ts ( ?is section %all t]m9ate on ,septemb] #cj1 #bjbe4 7#b7 ,exception ,! report+ requirem5ts "u subsection 7q7 %all t]m9ate on ! date t is #a ye> aft] ! date on :i* ! f9al funds f a grant "u ?is section are exp5d$ or return$4 4 7b7 ,cl]ical am5dm5t ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace71 is am5d$ by ins]t+ aft] ! item relat+ to section #bbag ! foll[+3 ,sec4 #bbah4 ,/ate & ,local ,cyb]security ,grant ,program4 4