By now you have heard of the millions of dollars the federal government is making available for 56 states and territories as well as 3,033 counties.

If you are interested in taking advantage of one of these grants, then you should listen to this interview with technology leaders who are intimately familiar with how grants are assigned to improve cybersecurity for states and territories.

Some basic rules:  the funding will be distributed over four years.  However, the awards are designed to be stretched out, so year #1 goes for four years, year #2 goes for four years, and so on.

Second, the states are expected to contribute an increasing portion of the investment.  10% of year one; 20% of year two; 30% of year four; 40% of year four.

The concept is to make sure the applicant has a good plan on how to effectively use the funds over a long period.  According to CISA’s Trent Frazier, it is a formula-based grant program. The idea is for the states to use investments to close gaps or sustain abilities in cybersecurity.  He suggests the best practice here is to identify vulnerabilities – how to use investment to mitigate risk

The experts address practical aspects. For example, counties vary in size and a smaller county may not have the resources to complete an application. Rita Reynolds from the National Association of Counties suggests that help is available with the application process.  

Zhen Zhen Sun from Texas observes that this effort shouldn’t not just be a replacement of technology The idea is to replace technologies.