Item 35 - FY 2022 Emergency Management Performance Grant

Home Browse Search

HSGP Appendix | 2023 Page A-46 The DHS SLTT Cybersecurity Engagement Program within CISA was established to help non-federal public stakeholders and associations manage cyber risk. The program provides appointed and elected SLTT government officials with cybersecurity risk briefings, information on available resources, and partnership opportunities to help protect their citizens online. Through these and related activities, the program coordinates DHS’s cybersecurity efforts with its SLTT partners to enhance and protect their cyber interests. More information on all of the CISA resources available to support SLTT governments is available at Resources | CISA. Framework for Improving Critical Infrastructure Cybersecurity When requesting funds for cybersecurity, applicants are encouraged to propose projects that would aid in implementation of all or part of the Framework for Improving Critical Infrastructure Cybersecurity (the “Framework”) developed by the National Institute of Standards and Technology (NIST). The Framework gathers existing international standards and practices to help organizations understand, communicate, and manage their cyber risks. For organizations that do not know where to start with developing a cybersecurity program, the Framework provides initial guidance. For organizations with more advanced practices, the Framework offers a way to improve their programs, such as better communication with their leadership and suppliers about management of cyber risks. CISA’s Critical Infrastructure Cyber Community C³ Voluntary Program also provides resources to critical infrastructure owners and operators to assist in adoption of the Framework and managing cyber risks. Additional information on the Critical Infrastructure Cyber Community C³ Voluntary Program can be found at Critical Infrastructure Cyber Community C³ Voluntary Program | CISA. DHS’s Enhanced Cybersecurity Services (ECS) program is an example of a resource that assists in protecting U.S.-based public and private entities and combines key elements of capabilities under the “Detect” and “Protect” functions to deliver an impactful solution relative to the outcomes of the Cybersecurity Framework. Specifically, ECS offers intrusion prevention and analysis services that help U.S.-based companies and SLTT governments defend their computer systems against unauthorized access, exploitation, and data exfiltration. ECS works by sourcing timely, actionable cyber threat indicators from sensitive and classified Government Furnished Information (GFI). DHS then shares those indicators with accredited Commercial Service Providers (CSPs). Those CSPs in turn use the indicators to block certain types of malicious traffic from entering a company’s networks. Groups interested in subscribing to ECS must contract directly with a CSP in order to receive services. Please visit Enhanced Cybersecurity Services (ECS) | CISA for a current list of ECS CSP points of contact. Regional Resiliency Assessment Program (RRAP) The RRAP is a cooperative assessment of specific critical infrastructure within a designated geographic area and a regional analysis of the surrounding infrastructure that address a range of infrastructure resilience issues that could have regionally and nationally significant consequences. These voluntary, non-regulatory RRAP projects are led by the Infrastructure Security Division and are selected each year by DHS with input and guidance from federal, state, and local partners. For additional information on the RRAP, visit Regional Resiliency Assessment Program | CISA. Law Enforcement Support Office (LESO), or 1033 Program The LESO facilitates a law enforcement support program, which originated from the National Defense Authorization Act of Fiscal Year 1997. This law allows the transfer of excess Department of Defense property that might otherwise be destroyed by law enforcement agencies across the United States and its territories.