State and Local Government Cybersecurity Act of 2021

Jun 21, 2022
Jun 21, 2022

Summary

Allows a federal agency to help state, local, tribal, and territorial governments protect their computer systems from cyber threats and attacks.

What problem does this solve?

State and local governments often don't have the tools or knowledge to fight cyberattacks, which puts important public information and services in danger. This law lets a federal agency share tools, training, and warnings with these governments to help them protect their computer systems.

What does this law do?

Establishes formal cybersecurity support for local governments
Requires a federal center to coordinate with and help State, Local, Tribal, and Territorial (SLTT) governments with their cybersecurity upon request.
Offers cybersecurity training and exercises
Authorizes the center to provide cybersecurity training and conduct security exercises with local governments to help them prepare for and respond to cyber incidents.
Improves cyber threat information sharing
Helps local governments share and receive real-time information about cyber threats, defensive measures, and security risks with the federal government and each other.
Includes election security support
Specifies that support should be provided to entities that collaborate with election officials, directly addressing election system security.
Requires regular reporting to Congress
Mandates the Secretary of Homeland Security to report to Congress every two years on the cybersecurity services and capabilities provided to state and local governments.

Who does this affect?

  • State, Local, Tribal, and Territorial governments
  • Election officials
  • Federal cybersecurity agencies

What is the real world impact?

Strengthens national security from the ground up
Helps local governments to make the entire country safer. Cyberattacks on small towns or state agencies can have ripple effects, and this law aims to prevent that by providing federal support.
Protects election systems
Specifies that help should be given to groups that work with election officials. This helps secure voting systems and builds public trust in elections by protecting them from cyber threats.

When does this start?

This law became effective on June 21, 2022, and includes a deadline for a future report.
First report to Congress
By June 21, 2023, the Secretary of Homeland Security must submit the first report on cybersecurity services provided to local governments.