Cyber Plan Template User Guide_FINAL_508c.pdf

FY 2023 Tribal Cybersecurity Grant Program

(TCGP)

Cybersecurity Plan Template User Guide September 2023

General Information

This guide is intended to help applicants complete the Fiscal Year (FY) 2023 TCGP Cybersecurity Plan Template and includes key tips and instructions for specific sections of the template in the order in which they appear on the form.

The template is a Microsoft Word document which is currently in draft format; however, this draft form should be completed by tribal applicants as part of the TCGP application.

Acronyms:

□ CIO: Chief Information Officer

□ CISO: Chief Information Security Officer

□ IJ: Investment Justification

□ PW: Project Worksheet

□ FEMA: Federal Emergency Management Agency

□ TCGP: Tribal Cybersecurity Grant Program

Helpful Hints

Complete all required fields prior to submission of your template. Incomplete submissions may delay the review and approval of associated projects and your grant application.

Editing functionality is limited in the template. Do NOT copy and paste content from Microsoft Word into the template as this may result in issues with spacing and formatting during the drafting process.

Please reach out to your assigned FEMA Preparedness Officer if you require additional technical assistance with completing this Cybersecurity Plan Template. Or send an email to the TCGP mailbox: FEMA- TCGP@fema.dhs.gov.

mailto:FEMA-TCGP@fema.dhs.gov mailto:FEMA-TCGP@fema.dhs.gov

AFFIRMATION OF FUNDING USE

Affirmation of Funding Use

The Chief Information Officer (CIO), Chief Information Security Officer (CISO), or equivalent official to the CIO or CISO must match the officials on the Investment Justification (IJ) and Project Worksheet

(PW).

Please print and sign the signatory's name of 1) the CISO, CISO, or equivalent official to the CIO or CISO; and 2) Chair of the Cybersecurity Committee (or equivalent organization).

TCGP OBJECTIVES

TCGP Objectives

The goal of TCGP is to assist tribal governments with managing and reducing systemic cyber risk.

Accomplishment of this goal can be achieved by implementing or revising Cybersecurity Plans, priorities, projects and addressing TCGP objectives.

It is required for tribes to submit a project that coincides with Objective 1 for FY 2023. The remaining three objectives are optional depending on the tribal government's cybersecurity posture.

Additional information on the TCGP program objectives can be found in Appendix A of the funding opportunity.

13 CYBERSECURITY PLAN ELEMENTS

13 Cybersecurity Plan Elements

Applicants are required to briefly describe how their tribal government will meet the 13 cybersecurity plan elements outlined in the funding opportunity.

The Cybersecurity Plan must describe how the tribal government plans to address the 13 elements.

□ For tribal governments with existing cybersecurity plans that meet the 13 required elements, references to those plans may be used in place of describing the entire plan in this section.

Tribal entities are strongly encouraged to expand their Cybersecurity Plans beyond the required elements.

□ An example may include a focus on specific critical infrastructure.

CYBERSECURITY PLANNING COMMITTEE

Cybersecurity Planning Committee

The Cybersecurity Planning Committee must include:

□ The tribal government applicant;

□ CIO, CISO, or equivalent official to the CIO or

CISO; and

□ Grants administrative office.

□ Additional tribal members are encouraged, but not required.

Eligible entities must submit the list of Cybersecurity Planning Committee members at the time of application as an attachment in ND Grants.

Additional information on the Cybersecurity Planning Committee can be found in Appendix B of the funding opportunity.

Federal Emergency Management Agency

TCGP Grant Program Contact Information and Resources

Lisa Nine, Senior Program Analyst and Team Lead: 202-706-3176, Lisa.Nine@fema.dhs.gov: R10

Amanda Carver, Preparedness Officer: 202-368-8197, Amanda.Carver@fema.dhs.gov: R6, R7, R8

Amanda Lemminga, Preparedness Officer: 202-924-3436, Amanda.Lemminga@fema.dhs.gov: R2, R3,R4

Jennifer Havas Joy, Preparedness Officer: 771-217-7053, Jennifer.Havasjoy@fema.dhs.gov: R1, R5, R9

TCGP Mailbox: FEMA-TCGP@fema.dhs.gov

Please reference the Tribal Cybersecurity Grant Program web page on FEMA.gov mailto:Lisa.Nine@fema.dhs.gov mailto:Amanda.Carver@fema.dhs.gov mailto:Amanda.Lemminga@fema.dhs.gov mailto:Jennifer.Havasjoy@fema.dhs.gov https://www.fema.gov/grants/preparedness

Thank you!