U.S. Sens. Cory Gardner (R-CO) and Mark Warner (D-VA) introduced legislation this week to encourage state, local, and tribal governments to strengthen their defenses against cybersecurity threats.
The State Cyber Resiliency Act would authorize the Department of Homeland Security (DHS) to run a grant program for states seeking to develop, revise or implement cyber resiliency measures. This includes efforts to identify, detect, protect, respond, and recover from cyber threats.
“As cyberattacks increase in frequency and gravity, we must ensure that our nation—from our local governments on up—is adequately prepared to protect public safety and combat cyber threats,” Warner said. “Nearly 70 percent of states have reported that they lack adequate funding to develop sufficient cybersecurity. This bill will aim to mitigate that need by providing grants to state and local jurisdictions so that they are better prepared to take on these emerging challenges.”
A companion bill was introduced in the House by Reps. Derek Kilmer (D-WA) and Michael McCaul (R-TX).
“It’s critical that our state and local governments invest in cyber preparedness and training, and I’m proud to work with Senator Warner and Representatives Kilmer and McCaul to create a grant program to help our communities with this effort,” Gardner said. “Colorado is at the forefront of our nation’s cybersecurity efforts and home to the National Cybersecurity Center in Colorado Springs. As the threat of cyber warfare intensifies, it’s important that local governments are properly prepared to deter and protect themselves from cyber-attacks.”
Most state cyber budgets are inadequate, according to a 2018 survey by Deloitte-National Association. Most states allocate between zero and three percent of their overall IT budget for cybersecurity purposes. In the past year, hackers have attacked local governments in Colorado, Georgia, Maryland, and Pennsylvania.
“America should dedicate far more attention and resources to combating cyber threats,” Kilmer said. “Cyber-attacks could threaten our election systems, municipally-owned water treatment facilities, local emergency responder networks, or other vital systems that impact our communities. With that in mind, building our cyber resiliency matters to employers, workers, local governments, consumers – and even to our national security.”
The bill also ensures that states enhance recruitment and retention efforts. Currently, there are more than 313,000 cybersecurity job openings nationwide, including 33,500 in Virginia, 24,800 in Texas, 10,200 in Colorado, and 6,300 in Washington.
“The enactment of CISA last year was a positive step forward to recalibrate our federal posture on cybersecurity, however, more needs to be done on a state and local level. Despite playing a vital role in protecting our nation against cyber-attacks, state governments often do not have the vital resources they need to strengthen their cybersecurity capabilities or retain or recruit seasoned cybersecurity professionals,” McCaul said.