Bill > HR5078

This bill reauthorizes and expands the Cybersecurity and Infrastructure Security Agency's (CISA) State and Local Cybersecurity Grant Program through 2033, with significant updates to address emerging technology and cybersecurity challenges. The bill introduces new definitions for terms like artificial intelligence (AI) and multi-factor authentication, and broadens the scope of the grant program to include operational technology systems and AI-enabled systems. It requires eligible entities (such as state and local governments) to implement enhanced cybersecurity practices, including continuous vulnerability assessments, identity and access management solutions, and improved incident response capabilities. The bill increases federal funding for grants, with potential federal cost shares ranging from 60-75% depending on the entity and implementation of multi-factor authentication. Additionally, the legislation mandates outreach to rural and small local governments, ensures direct funding pathways for local governments, and requires periodic Government Accountability Office (GAO) reviews of the program, including an assessment of AI adoption. The bill also prohibits grant funds from being used to purchase software or hardware from foreign entities of concern and encourages alignment with cybersecurity best practices developed by the National Institute of Standards and Technology.

Military Affairs and Security, Transportation and Infrastructure

https://www.congress.gov/bill/119th-congress/house-bill/5078/all-info