Critical Infrastructure Policy Failure: Risks to America
- HereS a breakdown of the key information from the provided text, focusing on the two cybersecurity programs and their current status:
- * Purpose: Supports federal-private coordination for cybersecurity information sharing.
- * Purpose: Builds basic cyber capacity at the state and local level - funding cybersecurity plans,assessments,and best practice adoption.
HereS a breakdown of the key information from the provided text, focusing on the two cybersecurity programs and their current status:
1.CISA 2015 (Cybersecurity Information Sharing Act of 2015)
* Purpose: Supports federal-private coordination for cybersecurity information sharing.
* Reauthorization: Rep. Garbarino introduced the Widespread Information Management for the Welfare of Infrastructure and Government Act to reauthorize it for ten years.
* New Component: includes a mandate for outreach to small and rural critical infrastructure owners/operators to encourage participation in information sharing.
* Status: Awaiting reauthorization.
2. SLCGP (State and Local Cybersecurity Grant Program)
* Purpose: Builds basic cyber capacity at the state and local level – funding cybersecurity plans,assessments,and best practice adoption.
* Funding Source: 2021 bipartisan infrastructure law.
* Impact:
* Backed over 800 projects in 33 states/territories, totaling $838 million.
* successfully prevented a ransomware attack in Utah (airport & 911 center).
* Funded coordinated efforts in Maryland (40 counties).
* State officials report projects “would not have been possible” without the funding.
* Limitations: Uneven cost-sharing and bureaucratic restrictions hinder access for smaller communities.
* Status: Expired as of August 31st. Without reauthorization, states and municipalities will likely have to pause cybersecurity initiatives, weakening national cyber defenses.
* Reauthorization Bill: Rep. Andy Ogles introduced the Protecting Information by Local Leaders for Agency Resilience Act to reauthorize it for ten years, but it currently lacks a dedicated funding amount.
Overall Situation:
Both programs are critical for national cybersecurity. CISA 2015 focuses on information sharing between the federal government and private sector, while SLCGP builds foundational cybersecurity capabilities at the state and local levels. The expiration of SLCGP is a significant concern, and the lack of a funding commitment in its reauthorization bill is a key issue.