FY_2024_IBSGP_NOFO_04-10-24_Final_508AB.pdf

FY 2024 IBSGP NOFO

The U. S. Department of Homeland Security (DHS)

Notice of Funding Opportunity (NOFO)

Fiscal Year 2024 Intercity Bus Security Grant Program

All entities wishing to do business with the federal government must have a unique entity identifier (UEI). The UEI number is issued by the system. Requesting a UEI using System for Award Management (SAM.gov) can be found at: https://sam.gov/content/entity-registration.

Updates in Grant Application Forms:

The Data Universal Numbering System (DUNS) Number was replaced by a new, non-proprietary identifier requested in, and assigned by SAM.gov. This new identifier is the Unique

Entity Identifier.

Additional Information can be found on Grants.gov: https://www.grants.gov/forms/forms-development/planned-uei-updates https://sam.gov/content/entity-registration https://sam.gov/content/entity-registration https://www.grants.gov/forms/forms-development/planned-uei-updates https://www.grants.gov/forms/forms-development/planned-uei-updates

Table of Contents

Updates in Grant Application Forms:

A. Program Description

1. Issued By

2. Assistance Listings Number

3. Assistance Listings Title

4. Funding Opportunity Title

5. Funding Opportunity Number

6. Authorizing Authority for Program

7. Appropriation Authority for Program

8. Announcement Type

9. Program Category

10. Program Overview, Objectives, and Priorities

11. Performance Measures

B. Federal Award Information

1. Available Funding for the NOFO: $1,800,000

2. Period of Performance: 24 months

3. Projected Period of Performance Start Date(s): 09/01/2024

4. Projected Period of Performance End Date(s): 08/31/2026

5. Projected Budget Period(s)

6. Funding Instrument Type: Grant

C. Eligibility Information

1. Eligible Applicants

2. Applicant Eligibility Criteria

3. Subawards and Beneficiaries

4. Other Eligibility Criteria/Restrictions

a. National Incident Management System (NIMS) Implementation

b. Application Limitations

c. Vulnerability Assessment and Security Plans

d. Ineligible Applicants

5. Cost Share or Match D. Application and Submission Information

1. Key Dates and Times

a. Application Start Date: 04/16/2024

b. Application Submission Deadline: 06/24/2024 at 5 p.m. ET

c. Anticipated Funding Selection Date: No later than August 23, 2024

d. Anticipated Award Date: No later than September 30, 2024

e. Other Key Dates

2. Agreeing to Terms and Conditions of the Award

3. Address to Request Application Package

4. Requirements: Obtain a Unique Entity Identifier (UEI) and Register in the System for

Award Management (SAM.gov)

5. Steps Required to Obtain a Unique Entity Identifier, Register in the System for Award

Management (SAM), and Submit an Application

6. Electronic Delivery

7. How to Register to Apply

a. General Instructions:

b. Obtain an UEI Number:

c. Obtain Employer Identification Number

d. Create a login.gov account:

e. Register with SAM:

f. Register in FEMA GO, Add the Organization to the System, and Establish the AOR:

8. Submitting the Application

9. Timely Receipt Requirements and Proof of Timely Submission

10. Content and Form of Application Submission

a. Standard Required Application Forms and Information

b. Program-Specific Required Forms and Information

11. Intergovernmental Review

12. Funding Restrictions and Allowable Costs

a. Prohibitions on Expending FEMA Award Funds for Covered Telecommunication

Equipment or Services

b. Pre-Award Costs

c. Management and Administration (M&A) Costs

d. Indirect Facilities & Administrative (F&A) Costs

e. Evaluation Costs

f. Other Direct Costs

g. Excess Funds

h. Unallowable Costs

i. Other Allowable Costs

E. Application Review Information

1. Application Evaluation Criteria

a. Programmatic Criteria

b. Financial Integrity Criteria

c. Supplemental Financial Integrity Criteria and Review

2. Review and Selection Process

F. Federal Award Administration Information

1. Notice of Award

2. Administrative and National Policy Requirements

a. DHS Standard Terms and Conditions

b. Ensuring the Protection of Civil Rights

c. Environmental Planning and Historic Preservation (EHP) Compliance

d. National Incident Management System (NIMS) Implementation

e. Mandatory Disclosures

3. Reporting

4. Monitoring and Oversight

G. DHS Awarding Agency Contact Information

1. Contact and Resource Information

a. Program Office Contact

b. FEMA Grants News

c. Grant Programs Directorate (GPD) Award Administration Division

d. Equal Rights

e. Environmental Planning and Historic Preservation

2. Systems Information

a. FEMA GO H. Additional Information

1. Termination Provisions

a. Noncompliance

b. With the Consent of the Recipient

c. Notification by the Recipient

2. Program Evaluation

3. Financial Assistance Programs for Infrastructure

a. Build America, Buy America Act

b. Waivers

c. Definitions

4. Report issues of fraud, waste, abuse

A. Program Description

1. Issued By

U.S. Department of Homeland Security (DHS)/Federal Emergency Management Agency

(FEMA)/Grant Programs Directorate (GPD)

2. Assistance Listings Number

97.057

3. Assistance Listings Title

Intercity Bus Security Grant Program

4. Funding Opportunity Title

Fiscal Year 2024 Intercity Bus Security Grant Program

5. Funding Opportunity Number

DHS-24-GPD-057-00-97

6. Authorizing Authority for Program

Section 1532 of the Implementing Recommendations of the 9/11 Commission Act of 2007

(Pub. L. No. 110-53) (6 U.S.C. § 1182)

7. Appropriation Authority for Program

Department of Homeland Security Appropriations Act, 2024, Pub. L. No. 118-47, Title III, Protection, Preparedness, Response, and Recovery (2024 DHS Appropriations Act)

8. Announcement Type

Initial

9. Program Category

Preparedness: Infrastructure Security

10. Program Overview, Objectives, and Priorities

a. Overview

The Fiscal Year (FY) 2024 Intercity Bus Security Grant Program (IBSGP) is one of four grant programs that constitute the Department of Homeland Security (DHS) DHS/Federal Emergency Management Agency’s (FEMA) focus on transportation infrastructure security activities. These grant programs are part of a comprehensive set of measures authorized by Congress and implemented by DHS to help strengthen the nation’s critical infrastructure against potential terrorist attacks. The IBSGP provides funds to intercity bus companies to protect critical surface transportation infrastructure and the traveling public from acts of terrorism. Past examples of funded projects include those for cameras that allow for live monitoring, fencing to secure property(ies), and GPS technologies that allow for remote disabling of fleet. Among the five basic homeland security missions noted in the DHS Strategic Plan for Fiscal https://www.dhs.gov/publication/department-homeland-securitys-strategic-plan-fiscal-years-2020-2024

Years 2020-2024, the IBSGP supports the goal to Strengthen Preparedness and

Resilience.

For FY 2024, DHS is focused on the criticality of information sharing and collaboration to building a national culture of preparedness and protecting against terrorism and other threats to our national security. DHS and its homeland security mission were born from the “failures among federal agencies and between the federal agencies and state and local authorities to share critical information related to the threat of terrorism” prior to the September 11, 2001, attacks.1 The threat profile has changed in the past two decades; we now face continuous cyber threats by sophisticated actors, threats to soft targets and crowded places, threats to our democratic election process and threats from new and emerging technologies. But information sharing and cooperation among state, local, tribal, and territorial authorities, and federal agencies, including all DHS officials, is just as vital, and perhaps even more vital, today. Therefore, for FY 2024, we have identified two priority areas related to some of the most serious threats that recipients should address with their IBSGP funds. These two priorities areas are enhancing cybersecurity and enhancing the protection of soft targets/crowded places. Also, DHS will continue to forge partnerships to strengthen information sharing and collaboration in each of these priority areas.

For FY 2023, 42 applications were received and 19 approved for funding. For a full list of recipients, please refer to Information Bulletin (IB) 490a.

b. Goals, Objectives, and Priorities

Goals: Strengthen the nation’s critical transportation infrastructure against risks associated with potential terrorist attacks.

Objectives: IBSGP achieves this through the following objectives:

1) Building and sustaining core capabilities (identified in the National

Preparedness Goal) relevant to transit security and annual national priority areas (see priorities below);

2) Addressing and closing gaps identified in agency vulnerability assessments and security plans; and

3) Continuously engaging in a process of emergency related planning, exercising, and training. Using this cycle to test plans; validate capabilities and identify gaps; inform investments; and continuously update plans to reflect organizational changes as well as findings from exercises and real-world events.

Priorities: Given the evolving threat landscape, it is incumbent upon DHS/FEMA to continuously evaluate the national risk profile and set priorities that help ensure

1 Homeland Security Act of 2002: Report Together with Minority and Dissenting Views 222, Select Committee on

Homeland Security: 107th Congress, U.S. House of Representatives (2002) (H. Rpt. 107-609).

https://www.fema.gov/sites/default/files/documents/fema_ib_2023_award_announcement_thgsp_update_signed_508c.pdf https://www.fema.gov/emergency-managers/national-preparedness/goal https://www.fema.gov/emergency-managers/national-preparedness/goal appropriate allocation of scarce security dollars. In assessing the national risk profile for FY 2024, two priority areas pose the most concern:

1) Enhancing cybersecurity; and

2) Enhancing the protection of soft targets/crowded places.

For more information about these priorities, see Section D.10.b.

Additionally, there are several enduring security needs that crosscut the homeland security enterprise. The following are second-tier priorities that help recipients implement a comprehensive approach to securing critical transportation infrastructure:

1) Effective planning;

2) Training and awareness campaigns;

3) Equipment and capital projects; and

4) Exercises.

The table below provides a breakdown of these priority areas for the FY 2024 IBSGP, showing both the core capabilities enhanced and lifelines supported, as well as examples of eligible project types for each area. More information on allowable investments can be found in Section D.12 “Funding Restrictions and Allowable

Costs.” As discussed in Section E of this NOFO, projects that sufficiently address one or both of the two National Priorities (enhancing cybersecurity or enhancing the protection of soft targets/crowded places) will have their final review scores increased by a multiplier of 20%.

FY 2024 IBSGP Funding Priorities

All priorities in this table concern the Safety and Security and Transportation Lifelines.

Priority Areas Core Capabilities Example Project Types

National Priorities

Enhancing

Cybersecurity

• Cybersecurity

• Intelligence and information sharing

• Planning

• Public information and warning

• Operational coordination

• Screening, search, and detection

• Access control and identity verification

• Supply chain integrity and security

• Risk management for protection programs and activities

• Long-term vulnerability reduction

• Situational assessment

• Infrastructure systems

• Operational communications

• Cybersecurity risk assessments

• Projects that address vulnerabilities identified in cybersecurity risk assessments o Improving cybersecurity of critical infrastructure to meet minimum levels identified by the Cybersecurity and

Infrastructure Security Agency and the

National Institute of Standards and

Technology Cybersecurity Framework

(Version 1.1) o Adoption of cybersecurity performance goals

(CISA's Cross-Sector Cybersecurity

Performance Goals)

• Cybersecurity training and planning

Enhancing the

Protection of

Soft

• Operational coordination

• Public information and warning

• Intelligence and information sharing

• Physical security enhancements at bus stations located in historically eligible Urban Area

Security Initiative (UASI) urban areas https://www.cisa.gov/cybersecurity https://www.cisa.gov/cybersecurity https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework https://www.cisa.gov/cpg https://www.cisa.gov/cpg

Priority Areas Core Capabilities Example Project Types

Targets/Crowded

Places

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Risk management for protection programs and activities o Security cameras (closed circuit television) o Security screening equipment and technology for people and baggage o Access controls

• Fencing, barriers, gates, etc.

• Remote disabling technology for over-the-road bus fleets

• Automatic vehicle location technology

• Global positioning software

Enduring Needs

Planning • Planning

• Risk management for protection programs and activities

• Risk and disaster resilience assessment

• Threats and hazards identification

• Operational coordination

• Development of:

o System-wide Security Risk Management

Plans o Continuity of Operations Plans o Response Plans/Station Action Plans o System-wide and/or asset-specific vulnerability assessments

• Efforts to strengthen governance integration between/among regional partners

Training and

Awareness

• Long-term vulnerability reduction

• Public information & warning

• Security training for employees, to include:

o Basic security awareness o Active shooter/attacker, including integrating the needs of persons with disabilities

• Public awareness/preparedness campaigns

Equipment and

Capital Projects

• Long-term vulnerability reduction

• Infrastructure systems

• Operational communications

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Intelligence and Information Sharing

• Top Transit Asset List (TTAL) risk remediation

• Protection of other high-risk, high-consequence areas or systems that have been identified through system-wide risk assessments

• Chemical, Biological, Radiological, Nuclear, and

Explosive detection, prevention, response, and recovery equipment

• Security screening equipment and technology for people and baggage

• Unmanned Aircraft Systems and detection technologies

Exercises

• Long-term vulnerability reduction • Security exercises to enhance prevention, response, and coordination capabilities related to the effects of a terrorist attack scenario

c. Alignment to Program Purpose and the DHS and FEMA Strategic Plan

Among the five basic homeland security missions noted in the DHS Strategic Plan for

Fiscal Years 2020-2024, the IBSGP supports the goal to Strengthen Preparedness and

Resilience.

The 2022-2026 FEMA Strategic Plan outlines three bold, ambitious goals in order to position FEMA to address the increasing range and complexity of disasters, support the diversity of communities we serve, and complement the nation’s growing expectations of the emergency management community. The IBSGP supports Goal 3 to Promote and Sustain a Ready FEMA and Prepared Nation. We invite our stakeholders and partners to also adopt these priorities and join us in building a more prepared and resilient nation.

https://www.dhs.gov/publication/department-homeland-securitys-strategic-plan-fiscal-years-2020-2024 https://www.fema.gov/about/strategic-plan

11. Performance Measures

Performance metrics for this program are as follows:

• Percentage of funding allocated by the recipient to core capabilities to build or sustain the national priorities identified in the section above.

B. Federal Award Information

1. Available Funding for the NOFO: $1,800,000

2. Period of Performance: 24 months

Extensions to the period of performance are allowed. For additional information on period of performance extensions, please refer to the Preparedness Grants Manual (FM-207-23-001).

3. Projected Period of Performance Start Date(s): 09/01/2024

4. Projected Period of Performance End Date(s): 08/31/2026

5. Projected Budget Period(s)

There will be only a single budget period with the same start and end dates as the period of performance.

6. Funding Instrument Type: Grant

C. Eligibility Information

1. Eligible Applicants

Private operators providing intercity over-the-road bus transportation that have also completed a vulnerability assessment and developed a security plan, which the Secretary of

Homeland Security has approved as described in Section 1531 of the Implementing

Recommendations of the 9/11 Commission Act of 2007 (9/11 Act) (Pub. L. No. 110-53) (6

U.S.C. § 1181). Private operators are non-governmental entities that may include, but are not limited to, sole proprietorships, affiliates, parent companies, and subsidiaries.

2. Applicant Eligibility Criteria

Eligibility for funding is further limited to applicants that meet one or both of the following criteria:

• Operate fixed-route intercity bus transportation providing services to one or more historically eligible UASI urban areas as indicated below.

• Operate a charter bus service using over-the-road buses and provide a minimum of 50 trips annually to one or more historically eligible UASI urban areas as indicated below.

The following definitions are applicable for the purpose of meeting FY 2024 IBSGP eligibility requirements:

https://www.fema.gov/grants/preparedness/manual

• Charter bus service is defined as a bus service that operates neither over fixed routes nor on regular schedules. Note: A charter bus service is characterized by the rental of a bus and the services of a driver to a person or group where all passengers embark and disembark at the same point. A charter bus service must use over-the-road buses.

• Fixed-route intercity bus service is defined as passenger transportation service provided to the general public for compensation over specified, predetermined, and published routes between cities or terminals using over-the-road-buses.

• An over-the-road bus is defined as a vehicle designated for long-distance transportation of passengers, characterized by integral construction with an elevated passenger deck located over a baggage compartment and at least 35 feet in length, with a capacity of more than 30 passengers. Only over-the-road buses are eligible for vehicle security enhancements through this program. Limousines, mini-coaches, school buses, or any other vehicle that does not fit the definition of an over-the-road bus are not eligible.

• A trip is defined as a single bus journey from an embarkation point to the furthest destination in that journey. For example, a trip from New York City to Denver to San

Francisco would be considered a single trip. A trip is made to an historically eligible

UASI urban area if at any point in the trip the bus stops in an historically eligible

UASI urban area and embarks or disembarks passengers. For example, a trip from

Newburgh, New York to New York City to Charleston, West Virginia is a trip to an historically eligible UASI urban area if passengers embark or disembark in New York

City.

• An historically eligible UASI urban area is a high-risk urban area that has received

UASI funding in the past.

List of Historically Eligible UASI Urban Areas

State Urban Area

Arizona Phoenix

Tucson

California

Anaheim/Santa Ana

Bakersfield

Bay Area

Fresno

Los Angeles/Long Beach

Oxnard

Riverside

Sacramento

San Diego

Colorado Denver

Connecticut

Bridgeport

New Haven

Hartford

District of Columbia/Maryland/Virginia National Capital Region

Florida

Fort Lauderdale

Jacksonville

Miami

State Urban Area

Orlando

Tampa

Georgia Atlanta

Hawaii Honolulu

Illinois Chicago

Indiana Indianapolis

Kentucky Louisville

Kansas/Missouri Kansas City

Louisiana Baton Rouge

New Orleans

Maryland Baltimore

Massachusetts Boston

Michigan Detroit

Minnesota Twin Cities

Missouri/Illinois St. Louis

Nebraska Omaha

Nevada Las Vegas

New Jersey Jersey City/Newark

New York

Albany

Buffalo

New York City

Rochester

Syracuse

North Carolina Charlotte

Ohio

Cincinnati

Cleveland

Columbus

Toledo

Oklahoma Oklahoma City

Tulsa

Oregon Portland

Pennsylvania Pittsburgh

Philadelphia

Puerto Rico San Juan

Rhode Island Providence

Tennessee Memphis

Nashville

Texas

Austin

Dallas/Fort Worth/Arlington

El Paso

Houston

San Antonio

Utah Salt Lake City

Virginia Norfolk

State Urban Area

Richmond

Washington Seattle

Wisconsin Milwaukee

An application submitted by an otherwise eligible non-federal entity (i.e., the applicant) may be deemed ineligible when the person that submitted the application is not: 1) a current employee, personnel, official, staff, or leadership of the non-federal entity; and 2) duly authorized to apply for an award on behalf of the non-federal entity at the time of application.

Further, the Authorized Organization Representative (AOR) and Signatory Authority (SA) must be a duly authorized current employee, personnel, official, staff or leadership of the recipient and provide an email address unique to the recipient at the time of application and upon any change in assignment during the period of performance. Consultants or contractors of the recipient are not permitted to be the AOR or SA of the recipient. It is the sole responsibility of the recipient to keep their points of contact for the organization up-to-date and accurate in all federal systems.

Applicant’s failure to meet an eligibility criterion by the time of an application deadline will result in the Federal awarding agency returning the application without review or, even though an application may be reviewed, will preclude the Federal awarding agency from making a Federal award.

3. Subawards and Beneficiaries

a. Subaward allowability

Subawards are not allowed under the IBSGP.

b. Beneficiaries or Participants

This NOFO and any subsequent federal awards create no rights or causes of action for any participant or beneficiary.

4. Other Eligibility Criteria/Restrictions

a. National Incident Management System (NIMS) Implementation

Prior to allocation of any federal preparedness awards, recipients must ensure and maintain adoption and implementation of NIMS. The list of objectives used for progress and achievement reporting is on FEMA’s website at https://www.fema.gov/emergency-managers/nims/implementation-training.

Please see the Preparedness Grants Manual for more information on NIMS.

b. Application Limitations

• Eligible applicants may only submit one application; and

• Each application may only include one Investment Justification (IJ).

https://www.fema.gov/emergency-managers/nims/implementation-training https://www.fema.gov/media-library/assets/documents/178291

c. Vulnerability Assessment and Security Plans

To be eligible for the FY 2024 IBSGP, operators must have developed or updated their organization’s Vulnerability Assessment and Security Plan (VASP) that must be based on a security assessment, such as the Baseline Assessment for Security

Enhancement (BASE) performed by Transportation Security Inspectors-Surface from the Transportation Security Administration (TSA). Private operators providing transportation with an over-the-road bus system must have completed or updated their

VASP within the past three years before the opening of the FY 2024 IBSGP application period. Additionally, a copy of the VASP certification must be submitted along with the application in order to be considered eligible. Failure to include this certification will result in the application being deemed ineligible. All operators must have completed or updated a VASP as required by Section 1531 of the 9/11 Act (6

U.S.C. § 1181) as follows:

• Assessments and security plans should include, as appropriate:

o Identification and evaluation of critical assets and infrastructure, including buses, platforms, stations, terminals, and information systems;

o Identification of vulnerabilities to those assets and infrastructure; and o Identification of gaps in physical security; passenger and cargo security; the security of programmable electronic devices, computers, or other automated systems that are used in providing over-the-road bus transportation; alarms, cameras and other communications systems and utilities needed for over-the-road bus security purposes, including dispatching systems; emergency response planning; and employee training.

• Security plans should also include, as appropriate:

o The identification of a security coordinator having authority to implement security actions, coordinate security improvements, and receive communications from appropriate federal officials regarding over-the-road bus security;

o A list of needed capital and operational improvements;

o Procedures to be implemented or used by the operator in response to a terrorist attack, including evacuation and passenger communication plans that include individuals with access and functional needs;

o The identification of steps taken with state and local law enforcement agencies, emergency responders, and federal officials to coordinate security measures and plans for response to a terrorist attack;

o A strategy and timeline for conducting training to prepare frontline employees for potential security threats and conditions;

o Enhanced security measures to be taken by the operator when the Secretary of Homeland Security declares a period of heightened security risk; and o Plans for providing redundant and backup systems required to ensure the continued operation of critical elements of the operator’s system in the event of a terrorist attack.

Note that the information above on the VASP is repeated in the Preparedness Grants

Manual.

For additional information on the above requirements, please contact TSA at TSA-

Surface@tsa.dhs.gov. Project requests will not be considered until bus operators develop and certify vulnerability assessments and security plans. See below for a template VASP certification statement.

Vulnerability Assessment and Security Plan Certification Statement

Applicants must certify that they have had a vulnerability assessment completed and a security evaluation preparedness plan developed or updated within the past three years. Failure to submit this certification or modifying the language in this certification will result in an application not being considered for funding. Applicants are also required to submit their vulnerability assessments and security plans to

DHS/FEMA upon request.

I, [insert name], as [insert title] of [insert name of bus company], certify that a vulnerability assessment has been completed and a security evaluation preparedness plan has been developed or updated for my company within the last three years.

Signature Date

d. Ineligible Applicants

Applicants that do not meet the requirements under “Eligible Applicants” in this

NOFO, and Section 1531 of the 9/11 Act (6 U.S.C. § 1181), are ineligible to apply for

FY 2024 IBSGP funds. Specific ineligible service categories include:

• School buses;

• Fixed-service routes under contract to transit authorities within UASI urban areas;

• Fixed-service routes not stopping in qualifying UASI urban areas;

• Intra-city trolley and/or tour services;

• Bus company owners that are not operators; and

• Intra-city bus service; funding for intra-city bus security is addressed through the

Transit Security Grant Program.

Applications will further be considered ineligible for the following reasons:

• An application submitted by an entity that does not meet the eligibility requirements, as described in this NOFO;

• An application submitted by an eligible entity that is deficient in any of the documentary submission requirements, as described in this NOFO;

• An application submitted by an eligible applicant, when the submitter is not a current employee, personnel, official, staff or leadership of the applicant and duly authorized to apply for an award on behalf of the applicant at the time of application; or

• Regardless of an applicant’s intent, applications for funding that are deemed

“Duplicate Applications” are generally ineligible. As an example, if two mailto:TSA-Surface@tsa.dhs.gov mailto:TSA-Surface@tsa.dhs.gov applications for the same potential recipient are submitted, both applications will be deemed “Duplicate Applications” and both may be ineligible. However, FEMA retains the discretion to fund one of those duplicate applications based on the criteria set forth in this NOFO.

5. Cost Share or Match

The FY 2024 IBSGP has a cost-share requirement. The only acceptable form of cost sharing is a hard match, meaning cash, by the recipient. In-kind contributions, also known as soft matches, are not acceptable for the recipient’s cost-share requirement.

Eligible IBSGP applicants shall agree to make available non-federal funds to carry out an

IBSGP award in an amount equal to, and not less than, 50% of the total project cost as submitted in the application and approved in the award. If the total project cost is ultimately higher than anticipated and submitted at the time of application, the recipient is responsible for all additional costs. If the total project cost is less than the amount anticipated at the time of award, the recipient must ensure that it matches the federal funds expended with an amount equal to, and not less than, 50% in non-federal funds. The recipient’s contribution should be specifically identified for each proposed project. The non-federal contribution has the same eligibility requirements as the federal share and must be justified as part of the project within the IJ.

For example, if the federal award requires a 50% cost share and the total project cost is

$100,000, then:

• Federal share is 50% of $100,000 = $50,000

• Recipient cost share is 50% of $100,000 = $50,000

With this example, if the total project cost ends up being $120,000, the federal share would remain at 50% of the original project cost of $100,000 (i.e., $50,000). Conversely, if the total project cost ends up being $80,000, then federal share would be $40,000 rather than $50,000.

In that case, the recipient would owe FEMA this $10,000 as the difference between the 50% cost share under the original project cost versus the decreased actual project cost.

These cash, hard-match contributions must consist of eligible costs and must be identified as part of the submitted application. A cash match includes cash spent for project-related costs.

The cost match requirement for the IBSGP award may not be met by funds from another federal grant or assistance program or funds used to meet matching requirements for another federal grant or assistance program, unless otherwise permitted by federal statute.

Additionally, normal routine operational costs cannot be used as a cost match unless a completely new capability is being awarded. Please see 2 C.F.R. § 200.306, as applicable, for additional guidance regarding cost matching.

D. Application and Submission Information

1. Key Dates and Times

a. Application Start Date: 04/16/2024

b. Application Submission Deadline: 06/24/2024 at 5 p.m. ET

All applications must be received by the established deadline.

FEMA’s Grants Outcomes System (FEMA GO) automatically records proof of timely submission and the system generates an electronic date/time stamp when FEMA GO successfully receives the application. The individual with the AOR role that submitted the application will also receive the official date/time stamp and a FEMA GO tracking number in an email serving as proof of their timely submission. For additional information on how an applicant will be notified of application receipt, see the subsection titled “Timely Receipt

Requirements and Proof of Timely Submission” in Section D of this NOFO.

FEMA will not review applications that are received after the deadline or consider these late applications for funding. FEMA may, however, extend the application deadline on request for any applicant who can demonstrate that good cause exists to justify extending the deadline. Good cause for an extension may include technical problems outside of the applicant’s control that prevent submission of the application by the deadline, other exigent or emergency circumstances, or statutory requirements for FEMA to make an award.

Applicants experiencing technical problems outside of their control must notify FEMA as soon as possible and before the application deadline. Failure to timely notify FEMA of the issue that prevented the timely filing of the application may preclude consideration of the award. “Timely notification” of FEMA means the following: prior to the application deadline and within 48 hours after the applicant became aware of the issue.

A list of FEMA contacts can be found in Section G of this NOFO, “DHS Awarding Agency

Contact Information.” For technical assistance with the FEMA GO system, please contact the

FEMA GO Helpdesk at femago@fema.dhs.gov or (877) 585-3242, Monday through Friday, 9:00 AM – 6:00 PM Eastern Time (ET). For programmatic or grants management questions, please contact your Preparedness Officer or Grants Management Specialist. If applicants do not know who to contact or if there are programmatic questions or concerns, please contact fema-grants-news@fema.dhs.gov, Monday through Friday, 9:00 AM – 5:00 PM ET.

c. Anticipated Funding Selection Date: No later than August 23, 2024

d. Anticipated Award Date: No later than September 30, 2024

e. Other Key Dates

Event Suggested Deadline for Completion Obtaining Unique Entity Identifier

(UEI) number

Four weeks before actual submission deadline

Obtaining a valid Employer

Identification Number (EIN) Four weeks before actual submission deadline

Creating an account with login.gov Four weeks before actual submission deadline

Registering in SAM or updating SAM registration Four weeks before actual submission deadline mailto:femago@fema.dhs.gov mailto:fema-grants-news@fema.dhs.gov

Event Suggested Deadline for Completion Registering Organization in FEMA

GO

Prior to beginning application

Submitting complete application in

FEMA GO

One week before actual submission deadline

2. Agreeing to Terms and Conditions of the Award

By submitting an application, applicants agree to comply with the requirements of this NOFO and the terms and conditions of the award, should they receive an award.

3. Address to Request Application Package

Applications are processed through the FEMA GO system. To access the system, go to https://go.fema.gov/.

4. Requirements: Obtain a Unique Entity Identifier (UEI) and Register in the System for

Award Management (SAM.gov)

Each applicant, unless they have a valid exception under 2 CFR §25.110, must:

a. Be registered in Sam.Gov before application submission.

b. Provide a valid UEI in its application.

c. Continue to always maintain an active SAM registration with current information during the federal award process. Note: Per 2 C.F.R. § 25.300, subrecipients are NOT required to go through the full SAM registration process. First-tier subrecipients

(meaning entities receiving funds directly from the recipient) are only required to obtain a UEI through SAM, but they are not required to complete the full SAM registration in order to obtain a UEI. Recipients may not make subawards unless the subrecipient has obtained and provided the UEI.

Lower-tier subrecipients (meaning entities receiving funds passed through by a higher-tier subrecipient) are not required to have a UEI and are not required to register in SAM.

Applicants are also not permitted to require subrecipients to complete a full registration in

SAM beyond obtaining the UEI.

5. Steps Required to Obtain a Unique Entity Identifier, Register in the System for Award

Management (SAM), and Submit an Application

Applying for an award under this program is a multi-step process and requires time to complete. Applicants are encouraged to register early as the registration process can take four weeks or more to complete. Therefore, registration should be done in sufficient time to ensure it does not impact your ability to meet required submission deadlines. Please review the table above for estimated deadlines to complete each of the steps listed. Failure of an applicant to comply with any of the required steps before the deadline for submitting an application may disqualify that application from funding.

To apply for an award under this program, all applicants must:

a. Apply for, update, or verify their UEI number and Employer Identification Number

(EIN) from the Internal Revenue Service;

https://go.fema.gov/ https://sam.gov/content/home

b. In the application, provide an UEI number;

c. Have an account with login.gov;

d. Register for, update, or verify their SAM account and ensure the account is active before submitting the application;

e. Register in FEMA GO, add the organization to the system, and establish the AOR.

The organization’s electronic business point of contact (EBiz POC) from the SAM registration may need to be involved in this step. For step-by-step instructions, see https://www.fema.gov/grants/guidance-tools/fema-go/startup;

f. Submit the complete application in FEMA GO; and

g. Continue to maintain an active SAM registration with current information at all times during which it has an active federal award or an application or plan under consideration by a federal awarding agency. As part of this, applicants must also provide information on an applicant’s immediate and highest-level owner and subsidiaries, as well as on all predecessors that have been awarded federal contracts or federal financial assistance within the last three years, if applicable.

Applicants are advised that FEMA may not make a federal award until the applicant has complied with all applicable SAM requirements. Therefore, an applicant’s SAM registration must be active not only at the time of application, but also during the application review period and when FEMA is ready to make a federal award. Further, as noted above, an applicant’s or recipient’s SAM registration must remain active for the duration of an active federal award. If an applicant’s SAM registration is expired at the time of application, expires during application review, or expires any other time before award, FEMA may determine that the applicant is not qualified to receive a federal award and use that determination as a basis for making a federal award to another applicant.

Per 2 C.F.R. § 25.110(c)(2)(iii), if an applicant is experiencing exigent circumstances that prevents it from obtaining an UEI number and completing SAM registration prior to receiving a federal award, the applicant must notify FEMA as soon as possible by contacting fema-grants-news@fema.dhs.gov and providing the details of the circumstances that prevent completion of these requirements. If FEMA determines that there are exigent circumstances and FEMA has decided to make an award, the applicant will be required to obtain an UEI number, if applicable, and complete SAM registration within 30 days of the federal award date.

6. Electronic Delivery

DHS is participating in the Grants.gov initiative to provide the grant community with a single site to find and apply for grant funding opportunities. DHS encourages or requires applicants to submit their applications online through Grants.gov, depending on the funding opportunity.

For this funding opportunity, FEMA requires applicants to submit applications through

FEMA GO.

https://www.login.gov/ https://www.fema.gov/grants/guidance-tools/fema-go/startup mailto:fema-grants-news@fema.dhs.gov

7. How to Register to Apply

a. General Instructions:

Registering and applying for an award under this program is a multi-step process and requires time to complete. Read the instructions below about registering to apply for

FEMA funds. Applicants should read the registration instructions carefully and prepare the information requested before beginning the registration process.

Reviewing and assembling the required information before beginning the registration process will alleviate last-minute searches for required information.

The registration process can take up to four weeks to complete. To ensure an application meets the deadline, applicants are advised to start the required steps well in advance of their submission.

Organizations must have an UEI number, an EIN, and an active SAM registration to apply for a federal award under this funding opportunity.

b. Obtain an UEI Number:

All entities applying for funding, including renewal funding, must have a UEI number. Applicants must enter the UEI number in the applicable data entry field on the SF-424 form.

For more detailed instructions for obtaining a UEI number, refer to: SAM.gov

c. Obtain Employer Identification Number

All entities applying for funding must provide an Employer Identification Number

(EIN). The EIN can be obtained from the IRS by visiting:

https://www.irs.gov/businesses/small-businesses-self-employed/apply-for-an-employer-identification-number-ein-online.

d. Create a login.gov account:

Applicants must have a login.gov account in order to register with SAM or update their SAM registration. Applicants can create a login.gov account here:

https://secure.login.gov/sign_up/enter_email?request_id=34f19fa8-14a2-438c-8323-a62b99571fd3.

Applicants only have to create a login.gov account once. For applicants that are existing SAM users, use the same email address for the login.gov account as with

SAM.gov so that the two accounts can be linked.

For more information on the login.gov requirements for SAM registration, refer to:

https://www.sam.gov/SAM/pages/public/loginFAQ.jsf.

e. Register with SAM:

All applicants applying online through FEMA GO must register with SAM. Failure to register with SAM will prevent an applicant from completing the application in https://sam.gov/content/home https://www.irs.gov/businesses/small-businesses-self-employed/apply-for-an-employer-identification-number-ein-online https://www.irs.gov/businesses/small-businesses-self-employed/apply-for-an-employer-identification-number-ein-online https://secure.login.gov/sign_up/enter_email?request_id=34f19fa8-14a2-438c-8323-a62b99571fd3 https://secure.login.gov/sign_up/enter_email?request_id=34f19fa8-14a2-438c-8323-a62b99571fd3 https://www.sam.gov/SAM/pages/public/loginFAQ.jsf

FEMA GO. SAM registration must be renewed annually. Organizations will be issued a UEI number with the completed SAM registration.

For more detailed instructions for registering with SAM, refer to:

https://apply07.grants.gov/help/html/help/Register/RegisterWithSAM.htm.

Note: Per 2 C.F.R. § 25.200, applicants must also provide the applicant’s immediate and highest-level owner, subsidiaries, and predecessors that have been awarded federal contracts or federal financial assistance within the last three years, if applicable.

I. ADDITIONAL SAM REMINDERS

Existing SAM.gov account holders should check their account to make sure it is

“ACTIVE.” SAM registration should be completed at the very beginning of the application period and should be renewed annually to avoid being “INACTIVE.”

Please allow plenty of time before the grant application submission deadline to obtain an UEI number and then to register in SAM. It may be four weeks or more after an applicant submits the SAM registration before the registration is active in SAM, and then it may be an additional 24 hours before FEMA’s system recognizes the information.

It is imperative that the information applicants provide is correct and current.

Please ensure that your organization’s name, address, and EIN are up to date in

SAM and that the UEI number used in SAM is the same one used to apply for all other FEMA awards. Payment under any FEMA award is contingent on the recipient’s having a current SAM registration.

II. HELP WITH SAM

The SAM quick start guide for new recipient registration and SAM video tutorial for new applicants are tools created by the General Services Administration

(GSA) to assist those registering with SAM. If applicants have questions or concerns about a SAM registration, please contact the Federal Support Desk at https://www.fsd.gov/fsd-gov/home.do or call toll free (866) 606-8220.

f. Register in FEMA GO, Add the Organization to the System, and Establish the

AOR:

Applicants must register in FEMA GO and add their organization to the system. The organization’s electronic business point of contact (EBiz POC) from the SAM registration may need to be involved in this step. For step-by-step instructions, see https://www.fema.gov/grants/guidance-tools/fema-go/startup.

Note: FEMA GO will support only the most recent major release of the following browsers:

• Google Chrome

• Internet Explorer

• Mozilla Firefox https://apply07.grants.gov/help/html/help/Register/RegisterWithSAM.htm https://www.fsd.gov/fsd-gov/home.do https://www.fema.gov/grants/guidance-tools/fema-go/startup

• Apple Safari

• Microsoft Edge

Users who attempt to use tablet type devices or other browsers may encounter issues with using FEMA GO.

8. Submitting the Application

Applicants will be prompted to submit the standard application information and any program-specific information required as described in Section D.10 of this NOFO, “Content and Form of Application Submission.” The Standard Forms (SF) may be accessed in the

Forms tab under the https://grants.gov/forms/forms-repository/sf-424-family. Applicants should review these forms before applying to ensure they have all the information required.

After submitting the final application, FEMA GO will provide either an error message or a successfully received transmission in the form of an email sent to the AOR that submitted the application. Applicants using slow internet connections, such as dial-up connections, should be aware that transmission can take some time before FEMA GO receives your application.

For additional application submission requirements, including program-specific requirements, please refer to the subsection titled “Content and Form of Application

Submission” under Section D of this NOFO.

9. Timely Receipt Requirements and Proof of Timely Submission

All applications must be completed in FEMA GO by the application deadline. FEMA GO automatically records proof of timely submission and the system generates an electronic date/time stamp when FEMA GO successfully receives the application. The individual with the AOR role that submitted the application will also receive the official date/time stamp and a FEMA GO tracking number in an email serving as proof of their timely submission on the date and time that FEMA GO received the application.

Applicants who experience system-related issues will be addressed until 3:00 PM ET on the date applications are due. No new system-related issues will be addressed after this deadline. Applications not received by the application submission deadline will not be accepted.

10. Content and Form of Application Submission

a. Standard Required Application Forms and Information

Generally, applicants have to submit either the non-construction forms (i.e., SF-424A and SF-424B) or construction forms (i.e., SF-424C and SF-424D), meaning that applicants that only have construction work and do not have any non-construction work need only submit the construction forms (i.e., SF-424C and SF-424D) and not the non-construction forms (i.e., SF-424A and SF-424B), and vice versa. However, applicants who have both construction and non-construction work under this program need to submit both the construction and non-construction forms.

https://grants.gov/forms/forms-repository/sf-424-family

The following forms or information are required to be submitted via FEMA GO. The

Standard Forms (SF) are also available at https://grants.gov/forms/forms-repository/sf-424-family.

• SF-424, Application for Federal Assistance

• Grants.gov Lobbying Form, Certification Regarding Lobbying

• SF-424A, Budget Information (Non-Construction) o For construction under an award, submit SF-424C, Budget

Information (Construction), in addition to or instead of SF-424A

• SF-424B, Standard Assurances (Non-Construction) o For construction under an award, submit SF-424D, Standard

Assurances (Construction), in addition to or instead of SF-424B

• SF-LLL, Disclosure of Lobbying Activities

b. Program-Specific Required Forms and Information

The following program-specific forms or information are required to be submitted in

FEMA GO:

• Associated Investment Justification (IJ)

• Associated detailed budget

• VASP certification statement

I. PRIORITY INVESTMENTS

Cybersecurity

Cybersecurity investments must support core capabilities as they relate to achieving target capabilities related to preventing, preparing for, protecting against, or responding to acts of terrorism. Additional resources and information regarding cybersecurity and cybersecurity performance goals are available through the Cybersecurity and Infrastructure Security Agency, Cross-Sector

Cybersecurity Performance Goals, and the National Institute of Standards and

Technology.

Soft Targets and Crowded Places

Soft targets and crowded places are increasingly appealing to terrorists and other violent extremist actors because of their relative accessibility and the large number of potential targets. This challenge is complicated by the prevalent use of simple tactics and less sophisticated attacks. Segments of our society are inherently open to the general public, and by nature of their purpose do not incorporate strict security measures. Given the increased emphasis by terrorists and other violent extremist actors to leverage less sophisticated methods to inflict harm in public areas, it is vital that the public and private sectors collaborate to enhance security of locations such as transportation centers, parks, restaurants, shopping centers, special event venues, and similar facilities. Additional resources and information regarding securing soft targets and crowded places are available through the Cybersecurity and Infrastructure Security Agency.

https://go.fema.gov/ https://www.cisa.gov/cybersecurity https://www.cisa.gov/cpg https://www.cisa.gov/cpg https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework https://www.cisa.gov/securing-public-gatherings

II. INVESTMENT JUSTIFICATION

As part of the…