H.R. 3138 · 117th Congress
State and Local Cybersecurity Improvement Act
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Passed the House without a recorded vote, then expired. It passed by voice vote or unanimous consent, which don't record how each member voted, but didn't become law before the 117th Congress ended.
7 cosponsors · 4 D, 3 R
6 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
- House Introduced May 12, 2021
- House Passed Jul 20, 2021
This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to establish the State and Local Cybersecurity Grant Program to address cybersecurity risks and threats to the information systems of state, local, or tribal organizations.
What it does: CRS summary · Passed House · Jul 20, 2021
State and Local Cybersecurity Improvement Act
This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to establish the State and Local Cybersecurity Grant Program to address cybersecurity risks and threats to the information systems of state, local, or tribal organizations.
Eligible grant applicants (i.e., states and certain Indian tribes) must submit a cybersecurity plan—to be approved by CISA as a condition of disbursement—that describes how the applicant will use the funds to address cybersecurity risks and threats to their information systems. Grant funds must be used to implement, develop, or revise the applicant's cybersecurity plan or to assist with activities that address imminent cybersecurity risks or threats.
CISA must establish a State and Local Cybersecurity Resilience Committee to provide state, local, and tribal stakeholder expertise, situational awareness, and recommendations to CISA on how to address cybersecurity risks and threats.
CISA must develop and maintain a resource guide for state, local, tribal, and territorial government officials to assist with identifying, preparing for, detecting, protecting against, responding to, and recovering from cybersecurity risks, threats, and incidents. In addition, CISA must develop and make publicly available a Homeland Security Strategy to Improve the Cybersecurity of State, Local, Tribal, and Territorial Governments.
Finally, CISA must assess the feasibility of implementing a short-term rotational program to detail approved state, local, tribal, and territorial government employees to CISA in cyber workforce positions.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: State and Local Cybersecurity Improvement Act
Latest action (Jul 21, 2021): Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Policy area: Science, Technology, Communications · Origin: House · Introduced: May 12, 2021
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
- House Introduced May 12, 2021
- House Passed Jul 20, 2021
No recorded floor vote found.