CFDA#
|
|
Funder Type
State Government
|
IT Classification
A - Primarily intended to fund technology
|
|
|
Authority
Maryland Department of Emergency Management
Summary
The State and Local Cybersecurity Grant Program (SLCGP) provides funding to eligible state, local, and territorial (SLT) governments to manage and reduce systemic cyber risk, thus improving the security of critical infrastructure and improving the resilience of the services SLT governments provide their community.
Maryland Guidance:
The Committee's identified project categories are as follows:
- Project Category 1 (PC1): Adoption or enhancement of priority cybersecurity best practices - The Maryland Cybersecurity Planning Committee has identified five baseline best practices that will significantly enhance the cybersecurity posture across the state. Due to the limited amount of funding available, jurisdictions are encouraged to propose projects that enable or enhance these five priority best practices. These best practices are:
- Asset Discovery & Vulnerability Management;
- Multi-Factor Authentication (MFA);
- End-Point Detection and Response (EDR);
- Email Security (such as Secure Email Gateway (SEG) solutions); and
- Security Awareness Training
- Project Category (PC2): Adoption or enhancement of general cybersecurity best practices - While not identified as Maryland's prioritized baseline cybersecurity best practices, jurisdictions can submit project proposals that support the adoption or enhancement of other general cybersecurity best practices. These best practices include, but are not limited to: Enhanced logging; data encryption; end of use processes of software and hardware; strong password management; ability to reconstitute systems (backups); migration to .gov domain;
- Project Category 3 (PC3): Cybersecurity policy and governance - Jurisdictions may seek funding to support the development of cybersecurity policies and governance. Examples include, but are not limited to: cyber incident response plans; acceptable use policies; continuity of operations plans; technology modernization processes; risk and threat assessments. Implementing the NIST Cybersecurity Framework; implementing NIST cyber supply chain risk management practices; and making use of knowledge bases of adversary tools and tactics.
- Project Category (PC4): Addressing specific jurisdictional cybersecurity needs - Recognizing that some jurisdictions may have specific or unique cybersecurity needs, jurisdictions may propose projects to address those needs. For example: addressing gaps in cybersecurity critical infrastructure specific to your entity/jurisdiction.
- Project Category 5 (PC5): Cybersecurity workforce development - Jurisdictions may seek funding to support workforce recruitment and development needs using the NICE Cybersecurity Workforce Framework.
History of Funding
The FY24 allocation for the State of Maryland was $4,924,161.
The FY23 allocation for the State of Maryland was $6,514,533.
The FY22 allocation for the State of Maryland was $3,214,008.
Additional Information
Applying for this award is a multi-step process and requires time to complete. Please read the overview below on how to apply. Please be advised that several updates have been made to the application package for the FFY2023 SLCGP cycle.
- Applicants should complete both the Maryland FFY2023 SLCGP Subgrant Project Proposal Application and the Maryland SLCGP FFY2023 Additional Application Documents Packet. Please see the Step-by-Step Process below on how to apply.
- The FY23 SLCGP Budget Narrative and Justification must include budgets broken down by Federal and POETE categories to meet the requirements of SLCGP. Further information is provided within the information guides on this change.
- Applicants using a vendor or contract services MUST provide an itemized quote with their application.
- The Committee has expanded the definition of a Rural jurisdiction to meet the needs of smaller Maryland localities not eligible under the Federal Rural Classification. Please see the Maryland FFY2023 SLCGP Funding Guide, Eligibility Criteria section for more information.
Please review these documents before beginning the application.
- Maryland FFY2023 SLCGP Funding Guide https://mdem.maryland.gov/Documents/SLCGP/FY2023%20%5b2024%5d/Maryland%20FFY2023%20SLCGP%20Funding%20Guide.docx.pdf
- Maryland FFY2023 SLCGP Project Applications & Budget Narrative Instruction Manual (Sub-grant & ISO Program application instructions provided) https://mdem.maryland.gov/Documents/SLCGP/FY2023%20%5b2024%5d/Maryland%20FFY2023%20SLCGP%20Project%20Applications%20%26%20Budget%20Narrative%20Instruction%20Manual.1.pdf
- Maryland FFY2023 SLCGP FAQs https://mdem.maryland.gov/Documents/SLCGP/FY2023%20%5b2024%5d/Maryland%20SLCGP%20FFY2023%20FAQs.docx.pdf
Any entity that receives funds from a grant under this program may not use the grant:
- Supplanting state or local funds;
- Recipient cost-sharing contributions;
- Payment of a ransom from cyberattacks;
- Recreational or social purposes, or for any purpose that does not address cybersecurity risks or cybersecurity threats on SLTT information systems;
- Lobbying or intervention in federal regulatory or adjudicatory proceedings;
- Suing the federal government or any other government entity;
- Acquiring land or constructing, remodeling or altering buildings or other physical facilities; or
- Cybersecurity Insurance; or
- Any purpose that does not address cybersecurity risks or cybersecurity threats on information systems owned or operated by, or on behalf of, the eligible entity or a local government within the jurisdiction of the eligible entity.