FY_2025_IBSGP_NOFO_08-12_508.pdf

1 | P a g e FEMA Version 25-02

The Department of Homeland Security (DHS)

Notice of Funding Opportunity (NOFO)

Fiscal Year (FY) 2025 Intercity Bus Security Grant Program (IBSGP)

Fraud, waste, abuse, mismanagement, and other criminal or noncriminal misconduct related to this program may be reported to the Office of Inspector General (OIG) Hotline. The toll-free numbers to call are 1 (800) 323-8603 and TTY 1 (844) 889-4357.

Contents

1. Basic Information A. Agency Name B. NOFO Title C. Announcement Type D. Funding Opportunity Number E. Assistance Listing Number F. Expected Total Funding G. Anticipated Number of Awards H. Expected Award Range I. Projected Application Start Date J. Projected Application End Date K. Anticipated Funding Selection Date L. Anticipated Award Date M. Projected Period of Performance Start Date N. Projected Period of Performance End Date O. Executive Summary P. Agency Contact

2. Eligibility A. Eligible Entities/Entity Types B. Project Type Eligibility C. Requirements for Personnel, Partners, and Other Parties D. Maximum Number of Applications E. Additional Restrictions F. References for Eligibility Factors within the NOFO G. Cost Sharing Requirement H. Cost Share Description, Type and Restrictions I. Cost Sharing Calculation Example J. Required information for verifying Cost Share

3. Program Description A. Background, Program Purpose, and Program History B. Goals, Objectives, and Priorities C. Program Rationale D. Federal Assistance Type E. Performance Measures and Targets

2 | P a g e FEMA Version 25-02

F. Program-Specific Unallowable Costs G. General Funding Requirements H. Indirect Costs (Facilities and Administrative Costs) I. Management and Administration (M&A) Costs J. Pre-Award Costs K. Beneficiary Eligibility L. Participant Eligibility M. Authorizing Authority N. Appropriation Authority O. Budget Period P. Prohibition on Covered Equipment or Services

4. Application Contents and Format A. Pre-Application, Letter of Intent, and Whitepapers B. Application Content and Format C. Application Components D. Program-Specific Required Documents and Information E. Post-Application Requirements for Successful Applicants

5. Submission Requirements and Deadlines A. Address to Request Application Package B. Application Deadline C. Pre-Application Requirements Deadline D. Post-Application Requirements Deadline E. Effects of Missing the Deadline

6. Intergovernmental Review A. Requirement Description and State Single Point of Contact

7. Application Review Information A. Threshold Criteria B. Application Criteria C. Financial Integrity Criteria D. Supplemental Financial Integrity Criteria and Review E. Reviewers and Reviewer Selection F. Merit Review Process G. Final Selection

8. Award Notices A. Notice of Award B. Pass-Through Requirements C. Note Regarding Pre-Award Costs D. Obligation of Funds E. Notification to Unsuccessful Applicants

9. Post-Award Requirements and Administration A. Administrative and National Policy Requirements ................... Error! Bookmark not defined.

B. DHS Standard Terms and Conditions C. Financial Reporting Requirements D. Programmatic Performance Reporting Requirements E. Closeout Reporting Requirements

3 | P a g e FEMA Version 25-02

F. Disclosing Information per 2 C.F.R. § 180.335 G. Reporting of Matters Related to Recipient Integrity and Performance H. Single Audit Report I. Monitoring and Oversight J. Program Evaluation K. Additional Performance Reporting Requirements L. Termination of the Federal Award M. Best Practices N. Payment Information

10. Other Information A. Period of Performance Extension B. Other Information

11. Appendix A: Vulnerability Assessment

12. Appendix B: Applicant Eligibility Criteria

13. Appendix C: Allowable Costs A. Planning B. Operational Activities C. Equipment and Capital Projects D. Training and Awareness Campaigns E. Exercises F. Construction and Renovation G. Backfill, Overtime, and Hiring H. Travel I. Maintenance and Sustainment J. Authorized Use of Contractual Grant Writers and/or Grant Managers K. Excess Funds L. Other Allowable Costs

4 | P a g e FEMA Version 25-02

1. Basic Information A. Agency Name

U.S. Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA)

B. NOFO Title Fiscal Year 2025 Intercity Bus Security Grant Program C. Announcement Type

Initial

D. Funding Opportunity Number

DHS-25-GPD-057-00-97

E. Assistance Listing Number

97.057

F. Expected Total Funding

$1,800,000

G. Anticipated Number of Awards

14 awards

H. Expected Award Range

$20,000– $1,800,000

I. Projected Application Start Date

08/01/2025 12:00 p.m. Eastern Time (ET)

J. Projected Application End Date

08/15/2025 5:00 p.m. Eastern Time (ET)

K. Anticipated Funding Selection Date

08/23/2025

L. Anticipated Award Date

No Later Than 09/30/2025

M. Projected Period of Performance Start Date

09/01/2025

N. Projected Period of Performance End Date

08/31/2027

O. Executive Summary

The IBSGP provides funds to intercity bus companies to protect critical surface transportation infrastructure and the traveling public from acts of terrorism.

P. Agency Contact

a. Program Office Contact FEMA has assigned region-specific Preparedness Officers for the IBSGP. If you do not know your Preparedness Officer, please contact FEMA Grants News by phone at (800) 368-6498 or by email at fema-grants-news@fema.dhs.gov, Monday through Friday, 9 a.m. – 5 p.m.

ET.

b. FEMA Grants News mailto:fema-grants-news@fema.dhs.gov

5 | P a g e FEMA Version 25-02

This channel provides general information on all FEMA grant programs and maintains a comprehensive database containing key personnel contact information at the federal, state, and local levels.

FEMA Grants News Team is reachable at fema-grants-news@fema.dhs.gov. OR (800) 368-6498, Monday through Friday, 9:00 AM – 5:00 PM ET.

c. Grant Programs Directorate Award Administration Division

(AAD)

GPD’s Award Administration Division provides support regarding financial matters and budgetary technical assistance. AAD can be contacted at ASK-GMD@fema.dhs.gov.

d. FEMA Regional Offices FEMA Regional Offices also may provide fiscal support, including pre- and post-award administration and technical assistance. FEMA Regional Office contact information is available at https://www.fema.gov/fema-regional-contacts.

e. Civil Rights Consistent with Executive Order 14173, Ending Illegal Discrimination & Restoring Merit-Based Opportunity, the FEMA Office of Civil Rights is responsible for ensuring compliance with and enforcement of federal civil rights obligations in connection with programs and services conducted by FEMA. They are reachable at FEMA-CivilRightsOffice@fema.dhs.gov.

f. Environmental Planning and Historic Preservation The FEMA Office of Environmental Planning and Historic Preservation (OEHP) provides guidance and information about the EHP review process to FEMA programs and recipients and subrecipients. Send any inquiries regarding compliance for FEMA grant projects under this NOFO to FEMA-OEHP- NOFOQuestions@fema.dhs.gov.

g. FEMA Grants Outcomes (GO) For technical assistance with the FEMA GO system, please contact the FEMA GO Helpdesk at femago@fema.dhs.gov. or (877) 585-3242, Monday through Friday, 9:00 AM – 6:00 PM ET.

h. Preparedness Grants Manual (PGM) Recipients seeking guidance on policies and procedures for managing preparedness grants should reference the Preparedness Grants Manual at Preparedness Grants Manual.

mailto:ASK-GMD@fema.dhs.gov mailto:ASK-GMD@fema.dhs.gov https://www.fema.gov/fema-regional-contacts mailto:FEMA-CivilRightsOffice@fema.dhs.gov mailto:FEMA-OEHP-NOFOQuestions@fema.dhs.gov mailto:FEMA-OEHP-NOFOQuestions@fema.dhs.gov mailto:femago@fema.dhs.gov https://www.fema.gov/media-library/assets/documents/178291

6 | P a g e FEMA Version 25-02

2. Eligibility A. Eligible Entities/Entity Types

Only the following entities or entity types are eligible to apply:

a. Applicants

1. Eligible Applicants

Private operators providing intercity over-the-road bus transportation that have also completed a vulnerability assessment and developed a security plan, which the Secretary of Homeland Security has approved as described in Section 1531 of the Implementing Recommendations of the 9/11 Commission Act of 2007 (9/11 Act) (Pub. L. No. 110-53) (6 U.S.C. § 1181). Private operators are non-governmental entities that may include, but are not limited to, sole proprietorships, affiliates, parent companies, and subsidiaries.

2. Applicant Eligibility Criteria

Eligibility for funding is further limited to applicants that meet one or both of the following criteria:

• Operate fixed-route intercity bus transportation providing services to one or more historically eligible Urban Area Security Initiative (UASI) urban areas as indicated below.

• Operate a charter bus service using over-the-road buses and provide a minimum of 50 trips annually to one or more historically eligible UASI urban areas as indicated below.

The following definitions are applicable for the purpose of meeting FY 2025 IBSGP eligibility requirements:

• Charter bus service is defined as a bus service that operates neither over fixed routes nor on regular schedules. Note: A charter bus service is characterized by the rental of a bus and the services of a driver to a person or group where all passengers embark and disembark at the same point. A charter bus service must use over-the-road buses.

• Fixed-route intercity bus service is defined as passenger transportation service provided to the general public for compensation over specified, predetermined, and published routes between cities or terminals using over-the-road-buses.

• An over-the-road bus is defined as a vehicle designated for long-distance transportation of passengers, characterized by integral construction with an elevated passenger deck located over a baggage compartment and at least 35 feet in length, with a capacity of more than 30 passengers. Only over-the-road buses are eligible for vehicle security enhancements through this program. Limousines, mini-coaches, school buses, 7 | P a g e FEMA Version 25-02 or any other vehicle that does not fit the definition of an over-the-road bus are not eligible.

• A trip is defined as a single bus journey from an embarkation point to the furthest destination in that journey. For example, a trip from New York City to Denver to San Francisco would be considered a single trip. A trip is made to an historically eligible UASI urban area if at any point in the trip the bus stops in an historically eligible UASI urban area and embarks or disembarks passengers. For example, a trip from Newburgh, New York to New York City to Charleston, West Virginia is a trip to an historically eligible UASI urban area if passengers embark or disembark in New York City.

• An historically eligible UASI urban area is a high-risk urban area that has received UASI funding in the past. See Appendix B for additional information.

b. Subapplicants Subapplicants and subawards are not allowed.

B. Project Type Eligibility

a. Unallowable Project Types See Section 3.F “Program-Specific Unallowable Costs” for more information on unallowable project types.

b. Allowable Project Types Costs generally need to fit within one of the categories listed below to be allowable under this program.

Specific investments made in support of the NOFO funding priorities generally fall into one of the following allowable cost categories:

• Planning

• Operational Activities

• Equipment and Capital Projects

• Training and Awareness Campaigns

• Exercises

Please see Appendix C for more information on allowable costs.

Applicants who have questions about whether a cost is allowable under this program should contact their Preparedness Officer.

C. Requirements for Personnel, Partners, and Other Parties

An application submitted by an otherwise eligible non-federal entity (i.e., the applicant) may be deemed ineligible when the person that submitted the application is not: 1) a current employee, personnel, official, staff, or leadership of the non-federal entity; and 2) duly

8 | P a g e FEMA Version 25-02 authorized to apply for an award on behalf of the non-federal entity at the time of application.

Further, the Authorized Organization Representative (AOR) and Signatory Authority (SA) must be a duly authorized current employee, personnel, official, staff or leadership of the recipient and provide an email address unique to the recipient at the time of application and upon any change in assignment during the period of performance.

Consultants or contractors of the recipient are not permitted to be the AOR or SA of the recipient. It is the sole responsibility of the recipient to keep their points of contact for the organization up-to-date and accurate in all federal systems.

Applicant’s failure to meet an eligibility criterion by the time of an application deadline will result in the Federal awarding agency returning the application without review or, even though an application may be reviewed, will preclude the Federal awarding agency from making a federal award.

D. Maximum Number of Applications

The maximum number of applications that can be submitted is:

1. 1 per eligible applicant

E. Additional Restrictions

Applicants/subapplicants or recipients/subrecipients are required to certify their compliance with federal statues, DHS directives, polices, and procedures.

a. National Incident Management System (NIMS) Implementation Prior to allocation of any federal preparedness awards, recipients must ensure and maintain adoption and implementation of NIMS. The list of objectives used for progress and achievement reporting is on FEMA’s website at https://www.fema.gov/emergency-managers/nims/implementation-training.

Please see the Preparedness Grants Manual for more information on

NIMS.

b. Application Limitations

• Eligible applicants may only submit one application; and

• Each application may include two Investment Justifications

(IJs).

c. Vulnerability Assessment and Security Plans To be eligible for the FY 2025 IBSGP, operators must have developed or updated their organization’s Vulnerability Assessment and Security Plan (VASP) that must be based on a security assessment, such as the Baseline Assessment for Security Enhancement (BASE) performed by Transportation Security Inspectors-Surface from the Transportation https://www.fema.gov/emergency-managers/nims/implementation-training https://www.fema.gov/emergency-managers/nims/implementation-training

9 | P a g e FEMA Version 25-02

Security Administration (TSA). Private operators providing transportation with an over-the-road bus system must have completed or updated their VASP within the past three years before the opening of the FY 2025 IBSGP application period. Additionally, a copy of the VASP certification must be submitted along with the application in order to be considered eligible. Failure to include this certification will result in the application being deemed ineligible. All operators must have completed or updated a VASP as required by Section 1531 of the 9/11 Act (6 U.S.C. § 1181) as follows:

• Assessments and security plans should include, as appropriate:

o Identification and evaluation of critical assets and infrastructure, including buses, platforms, stations, terminals, and information systems;

o Identification of vulnerabilities to those assets and infrastructure; and o Identification of gaps in physical security; passenger and cargo security; the security of programmable electronic devices, computers, or other automated systems that are used in providing over-the-road bus transportation; alarms, cameras and other communications systems and utilities needed for over-the-road bus security purposes, including dispatching systems; emergency response planning; and employee training.

• Security plans should also include, as appropriate:

o The identification of a security coordinator having authority to implement security actions, coordinate security improvements, and receive communications from appropriate federal officials regarding over-the-road bus security;

o A list of needed capital and operational improvements;

o Procedures to be implemented or used by the operator in response to a terrorist attack, including evacuation and passenger communication plans that include individuals with access and functional needs;

o The identification of steps taken with state and local law enforcement agencies, emergency responders, and federal officials to coordinate security measures and plans for response to a terrorist attack;

o A strategy and timeline for conducting training to prepare frontline employees for potential security threats and conditions;

o Enhanced security measures to be taken by the operator when the Secretary of Homeland Security declares a period of heightened security risk; and

10 | P a g e FEMA Version 25-02 o Plans for providing redundant and backup systems required to ensure the continued operation of critical elements of the operator’s system in the event of a terrorist attack.

For additional information on the above requirements, please contact TSA at TSA-Surface@tsa.dhs.gov. Project requests will not be considered until bus operators develop and certify vulnerability assessments and security plans. See below for a template VASP certification statement.

d. Vulnerability Assessment and Security Plan Certification Statement Applicants must certify that they have had a vulnerability assessment completed and a security evaluation preparedness plan developed or updated within the past three years. Failure to submit this certification or modifying the language in this certification will result in an application not being considered for funding. Applicants are also required to submit their vulnerability assessments and security plans to DHS/FEMA upon request.

Please see Appendix A: Vulnerability Assessment for a Vulnerability Assessment signature box.

F. References for Eligibility Factors within the NOFO

Please see the following references provided below:

1. “Programmatic Review Criteria” subsection

2. “Financial Integrity Criteria” subsection

3. “Supplemental Financial Integrity Criteria and Review” subsection

4. FEMA may/will request financial information such as

Employer Identification Number (EIN) and bank information as part of the potential award selection. This will apply to everyone prospered, including subrecipients.

G. Cost Sharing Requirement

Applicants selected for this award must commit to an acceptable cost share agreement. Otherwise, they will not be funded.

H. Cost Share Description, Type and Restrictions

The FY 2025 IBSGP has a cost-share requirement. The only acceptable form of cost sharing is a hard match, meaning cash, by the recipient. In-kind contributions, also known as soft matches, are not acceptable for the recipient’s cost-share requirement.

Eligible IBSGP applicants shall agree to make available non-federal funds to carry out an IBSGP award in an amount equal to, and not less than, 50% of the total project cost as submitted in the application and approved in the award. If the total project cost is ultimately higher mailto:TSA-Surface@tsa.dhs.gov

11 | P a g e FEMA Version 25-02 than anticipated and submitted at the time of application, the recipient is responsible for all additional costs. If the total project cost is less than the amount anticipated at the time of award, the recipient must ensure that it matches the federal funds expended with an amount equal to, and not less than, 50% in non-federal funds. The recipient’s contribution should be specifically identified for each proposed project. The non-federal contribution has the same eligibility requirements as the federal share and must be justified as part of the project within the IJ.

I. Cost Sharing Calculation Example

For example, if the federal award requires a 50% cost share and the total project cost is $100,000, then:

• Federal share is 50% of $100,000 = $50,000

• Recipient cost share is 50% of $100,000 = $50,000

With this example, if the total project cost ends up being $120,000, the federal share would remain at 50% of the original project cost of $100,000 (i.e., $50,000). Conversely, if the total project cost ends up being $80,000, then federal share would be $40,000 rather than $50,000. In that case, the recipient would owe FEMA this $10,000 as the difference between the 50% cost share under the original project cost versus the decreased actual project cost.

These cash, hard-match contributions must consist of eligible costs and must be identified as part of the submitted application. A cash match includes cash spent for project-related costs. The cost match requirement for the IBSGP award may not be met by funds from another federal grant or assistance program or funds used to meet matching requirements for another federal grant or assistance program, unless otherwise permitted by federal statute. Additionally, normal routine operational costs cannot be used as a cost match unless a completely new capability is being awarded. Please see 2 C.F.R. § 200.306, as applicable, for additional guidance regarding cost matching.

J. Required information for verifying Cost Share

Applicants should submit the following cost share (or match) documents:

1. Budget Detail Worksheet

Please see the “Application Format and Contents” section for more details

3. Program Description

A. Background, Program Purpose, and Program History

12 | P a g e FEMA Version 25-02

The Intercity Bus Security Grant Program (IBSGP) is one of four grant programs that constitute the Department of Homeland Security (DHS)/Federal Emergency Management Agency’s focus on transportation infrastructure security activities. These grant programs are part of a comprehensive set of measures authorized by Congress and implemented by DHS to help strengthen the nation’s critical infrastructure against potential terrorist attacks. The IBSGP provides funds to intercity bus companies to protect critical surface transportation infrastructure and the traveling public from acts of terrorism. Past examples of funded projects include those for cameras that allow for live monitoring, fencing to secure property(ies), and GPS technologies that allow for remote disabling of the bus fleet.

DHS is focused on the criticality of information sharing and collaboration in building a national mindset of preparedness and protecting against terrorism and other threats to our national security. DHS and its homeland security mission were born from the “failures among federal agencies and between the federal agencies and state and local authorities to share critical information related to the threat of terrorism” prior to the September 11, 2001, attacks. However, the threat profile has changed in the past two decades. We now face continuous cyberattacks by sophisticated actors, as well as ongoing threats to soft targets and crowded places, such as rolling stock, passenger terminals, and similar infrastructure. The IBSGP reflects DHS’s commitment to risk-informed investment, collaboration, and resilience. To ensure that priorities reflect the current threat environment, FEMA’s Preparedness Grant Programs are guided by annually designated National Priority Areas (NPAs). The FY 2025 NPAs are:

1. Enhancing the protection of soft targets and crowded places,

a. This includes faith-based organizations and election sites;

2. Supporting Homeland Security Task Forces and fusion centers;

3. Enhancing and integrating cybersecurity resiliency;

4. Enhancing election security; and

5. Supporting Border Crisis Response and Enforcement.

a. Example activities under border crisis response and enforcement may include:

i. Participation in the Department of Homeland Security/Immigration and

Customs Enforcement 287(g) training program;

ii. Cooperation with Immigration and Customs Enforcement detainers; and

iii. Other jurisdictional responsibilities to support the enforcement of United States immigration law.

For FY 2025, the Administration encourages applicants to propose innovative solutions that support the broader homeland security mission reflected in the NPAs, as applicable.

Applicants must clearly demonstrate how their proposed projects address an NPA and how they align with the stated purpose and objectives of this NOFO. Projects that do so will have their final review scores increased by a multiplier of 20%.

For FY 2024, 19 applications were received and 14 approved for funding. For a full list of recipients, please refer to Information Bulletin (IB) 517a.

https://www.fema.gov/sites/default/files/documents/fema_gpd_ib-517a.pdf

13 | P a g e FEMA Version 25-02

B. Goals, Objectives, and Priorities Goals: Strengthen the nation’s critical transportation infrastructure against risks associated with potential terrorist attacks.

Objectives: The IBSGP achieves this through the following objectives:

1. Building and sustaining core capabilities (identified in the National Preparedness Goal) relevant to transit security and the annual NPAs (see priorities below);

2. Addressing and closing gaps identified in agency vulnerability assessments and security plans; and

3. Continuously engaging in a process of emergency related planning, exercising, and training. Using this cycle to test plans, validate capabilities, identify gaps, inform investments, and continuously update plans to reflect organizational changes, as well as findings from exercises and real-world events.

Priorities: Given the evolving threat landscape, it is incumbent upon DHS/FEMA to continuously evaluate the national risk profile and set priorities that help ensure appropriate allocation of scarce security dollars. The FY 2025 NPAs reflect FEMA’s broader mission across all preparedness efforts. Applicants should be familiar with these NPAs, as they represent DHS’s current focus areas and may shape future guidance:

• Enhancing Protection of Soft Targets/Crowded Places

• Supporting Homeland Security Task Forces and Fusion Centers

• Enhancing Cybersecurity

• Enhancing Election Security

• Supporting Border Crisis Response and Enforcement

Enduring needs include:

• Effective planning

• Training and awareness campaigns

• Equipment and capital projects

• Exercises

The table below provides a breakdown of the NPAs and core capabilities impacted, as well as examples of eligible intercity bus security project types for each area. More information on allowable investments can be found in the Funding Restrictions and Allowable Costs section below. As discussed in Section E, projects that sufficiently address one or more of the NPAs will have their final review scores increased by a multiplier of 20%.

FY 2025 IBSGP Funding Priorities All priorities in this table concern the Safety and Security and Transportation Lifelines.

Priority Areas Core Capabilities Example Project Types National Priorities https://www.fema.gov/emergency-managers/national-preparedness/goal

14 | P a g e FEMA Version 25-02

Priority Areas Core Capabilities Example Project Types Enhancing the Protection of Soft Targets and Crowded Places

• Operational coordination

• Public information and warning

• Intelligence and Information

Sharing

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Risk management for protection programs and activities

• Physical security enhancements at bus stations located in historically eligible Urban Area Security Initiative (UASI) urban areas

• Security cameras (closed circuit television)

• Security screening equipment and technology for people and baggage

• Access controls o Fencing, barriers, gates, etc.

• Remote disabling technology forover-the-road bus fleets

• Automatic vehicle location technology

• Global positioning software

Supporting Homeland Security Task Forces and Fusion Centers

• Intelligence and information sharing

• Interdiction and disruption

• Public information and warning

• Operational coordination

• Risk management for protection programs and activities

• Establishing or enhancing multi-agency Homeland Security Task Forces (HSTFs), including operational coordination centers

• Enhancing capabilities and integration with local fusion centers

• Procurement of technology or equipment to support surveillance, communications, and data analysis

• Development of standard operating procedures for information sharing, joint operations, and immigration enforcement coordination

• Personnel training, credentialing, and certification to improve interoperability and mission alignment

• Intelligence analysis, reporting, and suspicious activity monitoring

• Exercises and simulations focused on joint operations, intelligence sharing, or interdiction/disruption of criminal or smuggling networks

• Community engagement efforts to foster trust and encourage threat reporting

• Information sharing with all DHS components;

fusion centers; other operational, investigative, and analytic entities; and other federal law enforcement and intelligence entities

• Cooperation with DHS and other entities in intelligence, threat recognition, assessment, analysis, and mitigation

• Identification, assessment, and reporting of threats of violence

• Intelligence analysis training, planning, and exercises

• Coordinating the intake, triage, analysis, and reporting of tips/ leads and suspicious activity, to include coordination with the Nationwide Suspicious Activity Reporting (SAR) Initiative

(NSI)

https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi

15 | P a g e FEMA Version 25-02

Enhancing Cybersecurity

• Cybersecurity

• Intelligence and information sharing

• Planning

• Public information and warning

• Operational coordination

• Screening, search, and detection

• Access control and identity verification

• Supply chain integrity and security

• Risk management for protection programs and activities

• Long-term vulnerability reduction

• Situational assessment

• Infrastructure systems

• Operational communications

• Cybersecurity risk assessments

• Projects that address vulnerabilities identified in cybersecurity risk assessments o Improving cybersecurity of critical infrastructure to mee minimum levels identified by the Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology Cybersecurity Framework (Version 1.1) o Adoption of cybersecurity performance goals (CISA's Cross- Sector Cybersecurity Performance Goals)

• Cybersecurity training and planning

Enhancing Election Security

• Cybersecurity

• Intelligence and information sharing

• Planning

• Long-term vulnerability reduction

• Situational assessment

• Infrastructure systems

• Operational coordination

• Community resilience

• Prioritize compliance with the VVSG 2.0 established by the U.S. Election Assistance Commission

• Complete testing through a VSTL accredited by the U.S. Election Assistance Commission

• Physical security planning and exercise support

• Physical/site security measures – e.g., locks, shatter proof glass, alarms, access controls, etc.

• General election security navigator support

• Cyber and general election security navigator support

• Cybersecurity risk assessments, training, and planning

• Projects that address vulnerabilities identified in cybersecurity risk assessments

• Iterative backups, encrypted backups, network segmentation, software to monitor/scan, and endpoint protection

• Distributed Denial of Service protection

• Migrating online services to the “.gov” internet domain

• Online harassment and targeting prevention services

• Public awareness/preparedness campaigns discussing election security and integrity measures

• Long-term vulnerability reduction and community resilience

Supporting Border Crisis Response and Enforcement

• Training and awareness

• Community resilience

• Operational coordination

• Risk management for protection programs and activities

• Staffing support to expand 287(g) screening operations within correctional facilities

• Operational overtime costs directly tied to 287(g) screening, processing, and enforcement activities

16 | P a g e FEMA Version 25-02

• Training programs for state and local law enforcement officers in immigration law, civil rights protections, and 287(g) procedures

• Development or enhancement of information-sharing platforms between ICE and local agencies

• Procurement of screening, detection, and communications technology to support immigration enforcement activities

• Establishing secure and dedicated communication networks with ICE Field Offices

• Conducting joint training exercises with ICE and local law enforcement to test operational coordination

• Support for facilities upgrades, such as creating dedicated interview rooms and secure processing spaces

• Community engagement and public briefings to promote transparency and understanding of 287(g) operations and protections

Enduring Needs Planning • Planning

• Risk management for protection programs and activities

• Risk and disaster resilience assessment

• Threats and hazards identification

• Operational coordination

• Community resilience

• Development of: System-wide Security Risk Management Plans o Continuity of Operations Plans Response Plans/Station Action Plans System-wide and/or o asset-specific vulnerability assessments o Efforts to strengthen governance integration between/among regional partners

Training and Awareness

• Long-term vulnerability reduction

• Public information and warning

• Operational coordination

• Situational assessment

• Community resilience

• Security training for employees, to include:

o Basic security awareness o Active shooter/attacker, including integrating the needs of persons with disabilities

• Public awareness/preparedness campaigns

Equipment and Capital Projects

• Long-term vulnerability reduction

• Infrastructure systems

• Operational communications

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Supply chain integrity and security

• Threats and hazards identification

• Infrastructure systems

• Top Transit Asset List (TTAL) risk remediation

• Protection of other high-risk, high-consequence areas or systems that

• have been identified through systemwide

• risk assessments

• Chemical, Biological, Radiological, Nuclear, and

Explosive detection, prevention, response, and recovery equipment

• Security screening equipment and technology for people and baggage Unmanned Aircraft Systems and detection technologies

17 | P a g e FEMA Version 25-02

• Intelligence and information sharing Exercises • Long-term vulnerability reduction

• Operational coordination

• Operational communications

• Community resilience

• Response exercises

a. Priority Investments FY 2025 IBSGP aligns with the Administration’s priorities by directing resources toward the most urgent threats facing the Nation. IBSGP supports the development and sustainment of core capabilities essential to achieving the National Preparedness Goal (NPG): “A secure and resilient Nation.”

To ensure strategic focus, DHS has identified five NPAs that reflect the evolving risk landscape and national policy objectives. These priorities serve as a framework for targeting investments that build capability, reduce risk, and promote cross-sector coordination.

The FY 2025 NPAs are:

• Enhancing Protection of Soft Targets/Crowded Places

• Supporting Homeland Security Task Forces and Fusion Centers

• Enhancing Cybersecurity

• Enhancing Election Security

• Supporting Border Crisis Response and Enforcement

These NPAs are rooted in the core mission areas of the NPG—prevention, protection, mitigation, response, and recovery—and reflect a whole-of-government approach to homeland security.

Applicants should use these priorities to guide planning, investment, and implementation to drive measurable outcomes and long-term resilience.

b. Additional Information

1. Enhanced Protection of Soft Targets/Crowded Places

Soft targets and crowded places are increasingly appealing to terrorists and other violent extremist actors because of their relative accessibility and the large number of potential targets.

This challenge is complicated by the prevalent use of simple tactics and less sophisticated attacks. Segments of our society are inherently open to the general public, and by nature of their purpose do not incorporate strict security measures. Given the increased emphasis by terrorists and other violent extremist actors to leverage less sophisticated methods to inflict harm in public areas, it is vital that the public and private sectors collaborate to enhance security of locations such as rolling stock, transportation centers, passenger stations, and similar infrastructure.

Additional resources and information regarding securing soft targets and crowded places are available through the Cybersecurity and Infrastructure Security Agency.

2. Supporting Homeland Security Task Forces and Fusion Centers

18 | P a g e FEMA Version 25-02

This priority supports the Administration’s direction under Executive Order 14159, Protecting the American People Against Invasion, which calls for the establishment of Homeland Security Task Forces (HSTFs) nationwide. These multi-agency teams—composed of federal and local law enforcement partners—are tasked with disrupting and dismantling transnational criminal organizations, targeting cross-border human smuggling and trafficking networks (especially those involving children), and using all appropriate law enforcement tools to support lawful immigration enforcement.

Activities under this NPA also enhance broader national efforts in:

• Counterterrorism

• Cybersecurity

• Border security

• Immigration enforcement

• Transnational organized crime

• Protection of economic and critical infrastructure

3. Enhancing Cybersecurity

Cybersecurity investments must support the security and functioning of critical port infrastructure and core capabilities as they relate to achieving target capabilities related to preventing, preparing for, protecting against, or responding to acts of terrorism at maritime infrastructure facilities. Additional resources and information regarding cybersecurity and cybersecurity performance goals are available through the Cybersecurity and Infrastructure Security Agency, Cross-Sector Cybersecurity Performance Goals, and the National Institute of Standards and Technology.

4. Enhancing Election Security

In January 2017, DHS designated the infrastructure used to administer the Nation’s elections as critical infrastructure. This designation recognizes that the United States’ election infrastructure is of such vital importance to the American way of life that its incapacitation or destruction would have a devastating effect on the country. Additionally, the Homeland Threat Assessment 2024 indicates that electoral processes remain an attractive target for many adversaries.

Securing election infrastructure, ensuring its continued operation in the face of threats and harassment, advancing the safety of election officials, and protecting against foreign interference are national security priorities. Because threats to election systems are constantly evolving, defending these systems requires constant vigilance, innovation, and adaptation. By integrating the directives of Executive Order 14248, Preserving and Protecting the Integrity of American Elections, into the Election Security NPA, recipients can ensure that their efforts contribute to a secure, transparent, and resilient electoral process, thereby reinforcing public trust and the integrity of democratic institutions.

5. Supporting Border Crisis Response and Enforcement https://www.cisa.gov/cybersecurity https://www.cisa.gov/cybersecurity https://www.cisa.gov/cpg https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework

19 | P a g e FEMA Version 25-02

State and local law enforcement agencies are essential partners in safeguarding national security and public safety. Pursuant to Executive Order 14159, Protecting the American People Against Invasion, it is the policy of the United States to enforce immigration laws against all inadmissible and removable aliens—particularly those who threaten the safety or security of the American people. This includes the efficient execution of these laws through lawful in incentives and enhanced detention capabilities.

This NPA supports efforts that align with this policy and promote cooperation between local and federal partners. Projects may include, but are not limited to:

• Participation in the DHS/ICE 287(g) program, allowing trained local officers to support

ICE with immigration enforcement;

• Cooperation with ICE detainers and other jurisdictional responsibilities related to immigration enforcement; and

• Supportive activities such as officer training, technology, and information sharing, operational support, and community engagement.

C. Program Rationale The stated goals, objectives, and priorities of IBSGP support Section 1532 of the Implementing Recommendations of the 9/11 Commission Act of 2007 (Pub. L. No. 110-53) (6 U.S.C. § 1182) by strengthening the nation’s critical transportation infrastructure against risks associated with potential terrorist attacks.

D. Federal Assistance Type Grant

E. Performance Measures and Targets Performance metrics for this program are as follows:

• Performance Measure Name 1: Cybersecurity vulnerabilities reduced at IBSGP funded Bus Organizations (1 reduced vulnerability)

• Performance Measure Name 2: Number of Facility Security Enhancements at funded IBSGP Bus Organizations (10 enhancements)

• Performance Measure Name 3: Number of Vehicle Security Enhancements at funded IBSGP Bus Organizations (10 enhancements)

• Performance Measure Name 4: Number of Security related Trainings conducted (5 trainings)

• Performance Measure Name 5: Number of related Exercises conducted (5 exercises)

• Performance Measure Name 6: Number of Public Awareness Campaigns conducted (5 campaigns)

F. Program-Specific Unallowable Costs Specific unallowable costs include:

20 | P a g e FEMA Version 25-02

• General-use facility expenditures, to include, but not limited to ordinary facility maintenance, contracts for maintenance, and specifically backup or emergency generators;

• General vehicle maintenance, service contracts, or warranties. This is different from maintenance and sustainment costs that are allowable, but only for projects funded under a grant award. For projects or equipment not funded by the grant award, general maintenance, service contracts, and warranties are not allowable;

• Expenditures for items such as general-use software (word processing, spreadsheet, graphics, etc.), general-use computers and related equipment (other than for allowable Management & Administration (M&A) activities, or otherwise associated preparedness or response functions), general-use vehicles, licensing fees, recurring operating costs (e.g., cell phone services, maintenance contracts);

• Organizational operating expenses;

• Personnel costs, to include, but not limited to, overtime and backfill (except as detailed above);

• Activities unrelated to the completion and implementation of the IBSGP;

• Other indirect costs (meaning property purchase, depreciation, or amortization expenses);

• Initiatives in which federal agencies are the beneficiary or that enhance federal property;

• Initiatives which study technology development;

• Proof-of-concept initiatives;

• Initiatives that duplicate capabilities being provided by the Federal Government; and

• Pre-award costs are not allowable and will not be approved, with the exception of costs resulting from pre-award grant writing services provided by an independent contractor that shall not exceed $1,500, as detailed in the “Pre-Award Costs” section above.

G. General Funding Requirements Costs charged to federal awards (including federal and non-federal cost share funds) must comply with applicable statutes, rules and regulations, policies, this NOFO, the Preparedness Grants Manual, and the terms and conditions of the federal award. This includes, among other requirements, that costs must be incurred, and products and services must be delivered within the budget period. 2 C.F.R. § 200.403(h).

Recipients may not use federal funds or any cost share funds for the following activities:

1. Matching or cost sharing requirements for other federal grants and cooperative agreements (see 2 C.F.R. § 200.306).

2. Lobbying or other prohibited activities under 18 U.S.C. § 1913 or 2 C.F.R. § 200.450.

3. Prosecuting claims against the federal government or any other government entity (see 2

C.F.R. § 200.435).

See the Preparedness Grants Manual for more information on funding restrictions and allowable costs.

https://www.fema.gov/media-library/assets/documents/178291 https://www.fema.gov/media-library/assets/documents/178291 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRea20080eff2ea53/section-200.403 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/section-200.306 https://uscode.house.gov/view.xhtml?req=granuleid:USC-1999-title18-section1913&num=0&edition=1999 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.450 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.435

21 | P a g e FEMA Version 25-02

H. Indirect Costs (Facilities and Administrative Costs) Indirect costs are allowed for recipients.

Indirect costs (IDC) are costs incurred for a common or joint purpose benefitting more than one cost objective and not readily assignable to specific cost objectives without disproportionate effort. Applicants with a current negotiated IDC rate agreement who desire to charge indirect costs to a federal award must provide a copy of their IDC rate agreement with their applications.

Not all applicants are required to have a current negotiated IDC rate agreement. Applicants that are not required to have a negotiated IDC rate agreement, but are required to develop an IDC rate proposal, must provide a copy of their proposal with their applications. Applicants without a current negotiated IDC rate agreement (including a provisional rate) and wish to charge the de minimis rate must reach out to FEMA for further instructions. Applicants who wish to use a cost allocation plan in lieu of an IDC rate proposal must reach out to FEMA for further instructions.

As it relates to the IDC for subrecipients, a recipient must follow the requirements of 2 C.F.R. §§

200.332 and 200.414 in approving the IDC rate for subawards. See the Preparedness Grants Manual for information on establishing indirect cost rates.

I. Management and Administration (M&A) Costs M&A costs are allowed by the Full-Year Continuing Appropriations and Extensions Act, 2025, Pub. L. No. 119-2. Recipients may use up to 5% of the amount of the award for their M&A.

M&A activities are those defined as directly relating to the management and administration of IBSGP funds, such as financial management and monitoring. M&A expenses must be based on actual expenses or known contractual costs. Requests that are simple percentages of the award, without supporting justification, will not be allowed, or considered for reimbursement.

M&A costs are not overhead costs but are necessary costs incurred in direct support of the federal award or as a consequence of it, such as travel, meeting-related expenses, and salaries of full/part-time staff in direct support of the program. As such, M&A costs can be itemized in financial reports. Other M&A cost examples include preparing and submitting required programmatic and financial reports, establishing and/or maintaining equipment inventory, documenting operational and equipment expenditures for financial accounting purposes;

responding to official informational requests from state and federal oversight authorities; and grant performance measurement or evaluation activities. If an applicant uses an outside consultant or contractor to provide pre-award grant writing services or post-award grant management services, additional considerations and restrictions shall apply as detailed in Appendix C.

J. Pre-Award Costs Pre-award costs are not allowable and will not be approved, with the exception of costs resulting from pre-award grant writing services provided by an independent contractor that shall not exceed $1,500 per applicant per year.

K. Beneficiary Eligibility There are no program requirements. NOFO and any subsequent federal awards create no rights or causes of action for any beneficiary.

https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR031321e29ac5bbd/section-200.332 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR031321e29ac5bbd/section-200.332 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRd93f2a98b1f6455/section-200.414

22 | P a g e FEMA Version 25-02

L. Participant Eligibility There are no program requirements. This NOFO and any subsequent federal awards create no rights or causes of action for any participant.

M. Authorizing Authority Section 1532 of the Implementing Recommendations of the 9/11 Commission Act of 2007 (Pub.

L. No. 110-53) (6 U.S.C. § 1182)

N. Appropriation Authority Full-Year Continuing Appropriations and Extensions Act, 2025, Pub. L. No. 119-2.

O. Budget Period There will be only a single budget period with the same start and end dates as the period of performance.

P. Prohibition on Covered Equipment or Services See the Preparedness Grants Manual for information on prohibitions on expending funds on covered telecommunications and surveillance equipment and services.

4. Application Contents and Format Q. Pre-Application, Letter of Intent, and Whitepapers Not Applicable.

R. Application Content and Format Not Applicable.

S. Application Components The following forms or information are required to be submitted via FEMA GO. Applicants can complete these forms directly in FEMA GO without needing to upload PDF versions of the forms.