FY26 IBSGP NOFO_Final_.pdf

Notice of Funding Opportunity

Application due: July 24, 2026

Fiscal Year 2026 Intercity Bus

Security Grant Program

Assistance Listing Number: 97.057 Funding Opportunity Number: DHS-26-GPD-057-00-97

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Contents Before you begin 2

Step 1: Review the Opportunity 3

Basic information 4

Eligibility 4

Program Description 9

Step 2: Get Ready to Apply 24

Submission Requirements and Application Deadlines 25

Step 3: Write Your Application 28

Application Contents and Format 29

Step 4: Learn About the Award Review Process 32

Application Review Information 33

Intergovernmental Review 37

Step 5: Learn What Happens After Award 38

Award Notices 39

Post-Award Requirements and Administration 39

Other Information 49

Contacts and AppendicesError! Bookmark not defined.

Contacts 55

Appendices 57

Before you begin

If you believe you are a good candidate for this funding opportunity, secure your System for

Award Management (SAM.gov) and Grants.gov registrations now. If you are already registered, make sure your registration is active and up-to-date.

SAM.gov registration (this can take several weeks)

You must have an active account with SAM.gov. This includes having a Unique Entity Identifier (UEI).

See Step 2: Get Ready to Apply

Grants.gov registration (this can take several days)

You must have an active Grants.gov registration. Doing so requires a Login.gov registration as well.

See Step 2: Get Ready to Apply

Fraud, waste, abuse, mismanagement and other criminal or noncriminal misconduct related to this program may be reported to the Office of Inspector General (OIG) Hotline. The toll-free numbers to call are (800) 323-8603 and TTY (844) 889-4357.

To help you find what you need, this NOFO uses internal links. In Adobe Reader, you can go back to where you were before clicking an internal link by pressing Alt + Left Arrow (Windows) or Command + Left Arrow (Mac) on your keyboard.

https://sam.gov/ https://grants.gov/ https://login.gov/

Step 1: Review the Opportunity

In this step

Basic information 4

Eligibility 4

Program description 9

Jump to a step

Basic Information A. Award Facts

Agency Name: U.S. Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA), Resilience, Grant Programs Directorate, Preparedness Grants Division, Transportation Infrastructure Security Branch Ap plication End Date: July

Assistance Listing Number: 97.057

Notice of Funding Opportunity (NOFO) Title: Fiscal Year (FY) 2026

Intercity Bus Security Grant (IBSGP)

Funding Opportunity Number: DHS-26-GPD-057-00-97

Announcement Type: Initial

Expected Award Range: $20,000 – $1,900,000

Expected Total Funding: $1,900,000

Anticipated Number of Awards: 18

B. Executive Summary The FY 2026 IBSGP provides funds to intercity bus companies to protect critical surface transportation infrastructure and the traveling public from acts of terrorism.

Eligibility A. Eligible Entities

Applicant Eligibility

Private operators providing intercity over-the-road bus transportation that have also completed a vulnerability assessment and developed a security plan, which the Secretary of Homeland Security has approved as described in Section 1531 of the Implementing Recommendations of the 9/11 Commission

Act of 2007 (9/11 Act) (Pub. L. No. 110-53) (6 U.S.C. § 1181). Private operators are non-governmental entities that may include, but are not limited to, sole proprietorships, affiliates, parent companies, and subsidiaries.

Applicant Eligibility Criteria

Eligibility for funding is further limited to applicants that meet one or both of the following criteria:

• Operate fixed-route intercity bus transportation providing services to one or more

Key Dates

Projected Application Start Date: June 24, 2026

Projected Application End

Date: July 24, 2026

Anticipated Funding Selection

Date: September 30, 2026

Anticipated Award Date:

September 30, 2026

Projected Period of

Performance Start Date:

September 1, 2026

Projected Period of

Performance End Date: August 31, 2029

Budget Period: September 1, 2026 – August 31, 2029

Have questions? See Contacts and Support historically eligible Urban Area Security Initiative (UASI) urban areas as indicated below;

and/or

• Operate a charter bus service using over-the-road buses and provide a minimum of 50 trips annually to one or more historically eligible UASI urban areas as indicated below.

The following definitions are applicable for the purpose of meeting FY 2026 IBSGP eligibility requirements:

• Charter bus service is defined as a bus service that operates neither over fixed routes nor on regular schedules. Note: A charter bus service is characterized by the rental of a bus and the services of a driver to a person or group where all passengers embark and disembark at the same point. A charter bus service must use over-the-road buses.

• Fixed-route intercity bus service is defined as passenger transportation service provided to the general public for compensation over specified, predetermined, and published routes between cities or terminals using over-the-road-buses.

• An over-the-road bus is defined as a vehicle designated for long-distance transportation of passengers, characterized by integral construction with an elevated passenger deck located over a baggage compartment and at least 35 feet in length, with a capacity of more than 30 passengers. Only over-the-road buses are eligible for vehicle security enhancements through this program. Limousines, mini-coaches, school buses, or any other vehicle that does not fit the definition of an over-the-road bus are not eligible.

• A trip is defined as a single bus journey from an embarkation point to the furthest destination in that journey. For example, a trip from New York City to Denver to San Francisco would be considered a single trip. A trip is made to an historically eligible UASI urban area if at any point in the trip the bus stops in a historically eligible UASI urban area and embarks or disembarks passengers. For example, a trip from Newburgh, New York to New York City to Charleston, West

Virginia is a trip to an historically eligible UASI urban area if passengers embark or disembark in

New York City.

• An historically eligible UASI urban area is a high-risk urban area that has received UASI funding in the past. See Appendix 2 for additional information.

Subapplicants

Subapplicants and subawards are not allowed.

B. Project Type Eligibility Allowable Project Types

Costs generally need to fit within one of the categories listed below to be allowable under this program.

Specific investments made in support of the NOFO funding priorities generally fall into one of the following allowable cost categories:

• Planning;

• Operational Activities;

• Equipment and Capital Projects;

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

• Training and Awareness Campaigns; and

• Exercises.

Please see Appendix 3 for more information on allowable costs.

Unallowable Project Types

See Section - Program Description - “Program-Specific Unallowable Costs” for more information on unallowable project types.

C. Requirements for Personnel, Partners, and Other Parties An application submitted by an otherwise eligible non-federal entity (i.e., the applicant) may be deemed ineligible when the person that submitted the application is not: 1) a current employee, personnel, official, staff, or leadership of the non-federal entity; and 2) duly authorized to apply for an award on behalf of the non-federal entity at the time of application.

Further, the Authorized Organization Representative (AOR) and Signatory Authority (SA) must be a duly authorized current employee, personnel, official, staff or leadership of the recipient and provide an email address unique to the recipient at the time of application and upon any change in assignment during the period of performance (POP). Consultants or contractors of the recipient are not permitted to be the AOR or SA of the recipient. It is the sole responsibility of the recipient to keep their points of contact for the organization up-to-date and accurate in all federal systems.

Applicant’s failure to meet an eligibility criterion by the time of an application deadline will result in the

Federal awarding agency returning the application without review or, even though an application may be reviewed, will preclude the Federal awarding agency from making a federal award.

D. Maximum Number of Applications The maximum number of applications that can be submitted is one per eligible applicant.

E. Additional Restrictions

a. Application Limitations

• Eligible applicants may only submit one application; and

• Each application may include two Investment Justifications (IJs).

b. Vulnerability Assessment and Security Plans

To be eligible for the FY 2026 IBSGP, operators must have developed or updated their organization’s

Vulnerability Assessment and Security Plan (VASP) that must be based on a security assessment, such as the Baseline Assessment for Security Enhancement (BASE) performed by Transportation Security Inspectors-Surface from the Transportation Security Administration (TSA). Private operators providing transportation with an over-the-road bus system must have completed or updated their VASP within the past three years before the opening of the FY 2026 IBSGP application period. Additionally, a copy of the VASP certification must be submitted along with the application in order to be considered eligible.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Failure to include this certification will result in the application being deemed ineligible. All operators must have completed or updated a VASP as required by Section 1531 of the 9/11 Act (6 U.S.C. § 1181) as follows:

• Assessments and security plans should include, as appropriate:

o Identification and evaluation of critical assets and infrastructure, including buses, platforms, stations, terminals, and information systems;

o Identification of vulnerabilities to those assets and infrastructure; and, o Identification of gaps in physical security; passenger and cargo security; the security of programmable electronic devices, computers, or other automated systems that are used in providing over-the-road bus transportation; alarms, cameras and other communications systems and utilities needed for over-the-road bus security purposes, including dispatching systems; emergency response planning; and employee training.

• Security plans should also include, as appropriate:

o Identifying a security coordinator having authority to implement security actions, coordinate security improvements, and receive communications from appropriate federal officials regarding over-the-road bus security;

o A list of needed capital and operational improvements;

o Procedures to be implemented or used by the operator in response to a terrorist attack, including evacuation and passenger communication plans that include individuals with access and functional needs;

o Identifying steps taken with state and local law enforcement agencies, emergency responders, and federal officials to coordinate security measures and plans for response to a terrorist attack;

o A strategy and timeline for conducting training to prepare frontline employees for potential security threats and conditions;

o Enhanced security measures to be taken by the operator when the Secretary of Homeland Security declares a period of heightened security risk; and, o Plans for providing redundant and backup systems required to ensure the continued operation of critical elements of the operator’s system in the event of a terrorist attack.

For additional information on the above requirements, please contact TSA at TSA-Surface@tsa.dhs.gov.

Project requests will not be considered until bus operators develop and certify vulnerability assessments and security plans. See below for a template VASP certification statement.

d. Vulnerability Assessment and Security Plan Certification Statement

Applicants must certify that they have had a vulnerability assessment completed and a security evaluation preparedness plan developed or updated within the past three years. Failure to submit this certification or modifying the language in this certification will result in an application not being considered for funding. Applicants are also required to submit their vulnerability assessments and security plans to the Department of Homeland Security (DHS)/FEMA upon request.

Please see Appendix 1: Vulnerability Assessment signature box.

mailto:TSA-Surface@tsa.dhs.gov

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Recipients/subrecipients, and if applicable, applicants/subapplicants, are required to certify their compliance with federal statues, DHS directives, policies, and procedures.

F. References to Other Eligibility Factors Please see the following references provided below:

1. “Threshold Review Criteria” subsection;

2. “Financial Integrity Criteria” subsection;

3. “Supplemental Financial Integrity Criteria and Review” subsection; and,

4. FEMA may request financial information such as the Employer Identification Number (EIN) and bank information as part of the potential award selection. This will apply to everyone who benefits from the award, including subrecipients.

G. Cost Share Requirements Applicants selected for this award must commit to an acceptable cost share agreement. Otherwise, they will not be funded.

H. Cost Share Description, Type, and Restrictions The FY 2026 IBSGP has a cost-share requirement. The only acceptable form of cost sharing is a hard match, meaning cash, by the recipient. In-kind contributions, also known as soft matches, are not acceptable for the recipient’s cost-share requirement.

Eligible IBSGP applicants shall agree to make available non-federal funds to carry out an IBSGP award in an amount equal to, and not less than, 50% of the total project cost as submitted in the application and approved in the award. If the total project cost is ultimately higher than anticipated and submitted at the time of application, the recipient is responsible for all additional costs. If the total project cost is less than the amount anticipated at the time of award, the recipient must ensure that it matches the federal funds expended with an amount equal to, and not less than, 50% in non-federal funds. The recipient’s contribution should be specifically identified for each proposed project. The non-federal contribution has the same eligibility requirements as the federal share and must be justified as part of the project within the

IJ.

I. Cost Share Example For example, if the federal award requires a 50% cost share and the total project cost is $100,000, then:

• Federal share is 50% of $100,000 = $50,000

• Recipient cost share is 50% of $100,000 = $50,000

With this example, if the total project cost ends up being $120,000, the federal share would remain at

50% of the original project cost of $100,000 (i.e., $50,000).

Conversely, if the total project cost ends up being $80,000, then federal share would be $40,000 rather than $50,000. In that case, the recipient would owe FEMA this $10,000 as the difference between the 50% cost share under the original project cost versus the decreased actual project cost.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

These cash, hard-match contributions must consist of eligible costs and must be identified as part of the submitted application. A cash match includes cash spent for project-related costs. The cost match requirement for the IBSGP award may not be met by funds from another federal grant or assistance program or funds used to meet matching requirements for another federal grant or assistance program, unless otherwise permitted by federal statute.

Additionally, normal routine operational costs cannot be used as a cost match unless a completely new capability is being awarded. Please see 2 C.F.R. § 200.306, as applicable, for additional guidance regarding cost matching.

J. Required Information for Verifying Cost Share

Applicants should submit the following cost share (or match) document:

• Budget Detail Worksheet

Please see the “Application Format and Contents” section for more details.

Maintenance of Effort

Not Applicable

Program Description A. Program Purpose

The IBSGP is one of four grant programs that constitute DHS/FEMA’s focus on transportation infrastructure security activities. These grant programs are part of a comprehensive set of measures authorized by Congress and implemented by DHS to help strengthen the nation’s critical infrastructure against potential terrorist attacks. The IBSGP provides funds to intercity bus companies to protect critical surface transportation infrastructure and the traveling public from acts of terrorism. Past examples of funded projects include those for cameras that allow for live monitoring, fencing to secure property(ies), and Global Positioning System (GPS) technologies that allow for remote disabling of the bus fleet.

DHS is focused on the criticality of information sharing and collaboration in building a national mindset of preparedness and protecting against terrorism and other threats to our national security.

DHS and its homeland security mission were born from the “failures among federal agencies and between the federal agencies and state and local authorities to share critical information related to the threat of terrorism” prior to the September 11, 2001, attacks. However, the threat profile has changed in the past two decades. We now face continuous cyberattacks by sophisticated actors, as well as ongoing threats to soft targets and crowded places, such as rolling stock, passenger terminals, and similar infrastructure. The IBSGP reflects DHS’s commitment to risk-informed investment, collaboration, and resilience. To ensure that priorities reflect the current threat environment, FEMA’s Preparedness Grant Programs are guided by annually designated National

Priority Areas (NPAs). The FY 2026 NPAs are:

https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/section-200.306

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

1. Enhancing the protection of soft targets and crowded places,

• This includes faith-based organizations and election sites;

2. Supporting Homeland Security Task Forces and fusion centers;

3. Enhancing and integrating cybersecurity resiliency;

4. Enhancing election security; and

5. Supporting Border Crisis Response and Enforcement.

• Example activities under border crisis response and enforcement may include:

o Participation in the Department of Homeland Security/Immigration and Customs

Enforcement 287(g) training program;

o Cooperation with Immigration and Customs Enforcement detainers; and o Other jurisdictional responsibilities to support the enforcement of United States immigration law.

For FY 2026, the Administration encourages applicants to propose innovative solutions that support the broader homeland security mission reflected in the NPAs, as applicable. Applicants must clearly demonstrate how their proposed projects address an NPA and how they align with the stated purpose and objectives of this NOFO. Projects that do so will have their final review scores increased by a multiplier of 20%.

For FY 2025, 28 applications were received and 21 approved for funding.

B. Goals and Objectives Goals: Strengthen the nation’s critical transportation infrastructure against risks associated with potential terrorist attacks.

Objectives: The IBSGP achieves this through the following objectives:

1. Building and sustaining core capabilities (identified in the National Preparedness Goal

(NPG)) relevant to transit security and the annual NPAs (see priorities below);

2. Addressing and closing gaps identified in agency vulnerability assessments and security plans; and,

3. Continuously engaging in a process of emergency related planning, exercising, and training. Using this cycle to test plans, validate capabilities, identify gaps, inform investments, and continuously update plans to reflect organizational changes, as well as findings from exercises and real-world events.

Priorities: Given the evolving threat landscape, DHS/FEMA must continuously evaluate the national risk profile and set priorities that help ensure appropriate allocation of scarce security dollars. The

FY 2026 NPAs reflect FEMA’s broader mission across all preparedness efforts. Applicants should be familiar with these NPAs, as they represent DHS’s current focus areas and may shape future guidance:

• Enhancing Protection of Soft Targets/Crowded Places;

• Supporting Homeland Security Task Forces and Fusion Centers;

https://www.fema.gov/emergency-managers/national-preparedness/goal

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

• Enhancing Cybersecurity;

• Enhancing Election Security; and,

• Supporting Border Crisis Response and Enforcement.

Enduring needs include:

• Effective planning;

• Training and awareness campaigns;

• Equipment and capital projects; and,

• Exercises.

The tables below provide a breakdown of the NPAs and the enduring needs, the core capabilities impacted, and examples of eligible intercity bus security project types for each area. More information on allowable investments can be found in the Funding Restrictions and Allowable Costs section below. As discussed in Section B – Application Criteria, projects that sufficiently address one or more of the NPAs will have their final review scores increased by a multiplier of 20%.

FY 2026 IBSGP Funding Priorities

All priorities in the tables concern the Safety and Security and Transportation Lifelines.

National Priority Areas:

Priority Areas Core Capabilities Example Project Types

Enhancing the

Protection of

Soft Targets and Crowded

Places

• Operational coordination

• Public information and warning

• Intelligence and

Information Sharing

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Risk management for protection programs and activities

• Physical security enhancements at bus stations located in historically eligible

Urban Area Security Initiative (UASI) urban areas (See Appendix 2 for the list).

• Security cameras (closed circuit television)

• Security screening equipment and technology for people and baggage

• Access controls o Fencing, barriers, gates, etc.

• Remote disabling technology for over-the-road bus fleets

• Automatic vehicle location technology

• Global positioning software

Supporting

Homeland Security Task

Forces and

Fusion Centers

• Intelligence and information sharing

• Interdiction and disruption

• Public information and warning

• Establishing or enhancing multi-agency Homeland Security Task

Forces (HSTFs), including operational coordination centers

• Enhancing capabilities and integration with local fusion centers

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

• Operational coordination

• Risk management for protection programs and activities

• Procurement of technology or equipment to support surveillance, communications, and data analysis

• Development of standard operating procedures for information sharing, joint operations, and immigration enforcement coordination

• Personnel training, credentialing, and certification to improve interoperability and mission alignment

• Intelligence analysis, reporting, and suspicious activity monitoring

• Exercises and simulations focused on joint operations, intelligence sharing, or interdiction/disruption of criminal or smuggling networks

• Community engagement efforts to foster trust and encourage threat reporting

• Information sharing with all DHS components; fusion centers; other operational, investigative, and analytic entities; and other federal law enforcement and intelligence entities

• Cooperation with DHS and other entities in intelligence, threat recognition, assessment, analysis, and mitigation

• Identification, assessment, and reporting of threats of violence

• Intelligence analysis training, planning, and exercises

• Coordinating the intake, triage, analysis, and reporting of tips/ leads and suspicious activity, to include coordination with the Nationwide

Suspicious Activity Reporting (SAR)

Initiative (NSI) https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhancing

Cybersecurity

• Cybersecurity

• Intelligence and information sharing

• Planning

• Public information and warning

• Operational coordination

• Screening, search, and detection

• Access control and identity verification

• Supply chain integrity and security

• Risk management for protection programs and activities

• Long-term vulnerability reduction

• Situational assessment

• Infrastructure systems

• Operational communications

• Cybersecurity risk assessments

• Projects that address vulnerabilities identified in cybersecurity risk assessments o Improving cybersecurity of critical infrastructure to meet minimum levels identified by the Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology Cybersecurity Framework (Version 1.1) o Adoption of cybersecurity performance goals (CISA's Cross- Sector Cybersecurity Performance Goals)

• Cybersecurity training and planning

Enhancing

Election Security

• Cybersecurity

• Intelligence and information sharing

• Planning

• Long-term vulnerability reduction

• Situational assessment

• Infrastructure systems

• Operational coordination

• Community resilience

• Prioritize compliance with the VVSG

2.0 established by the U.S. Election

Assistance Commission

• Complete testing through a VSTL accredited by the U.S. Election

Assistance Commission

• Physical security planning and exercise support

• Physical/site security measures – e.g., locks, shatter proof glass, alarms, access controls, etc.

• General election security navigator support

• Cyber and general election security navigator support

• Cybersecurity risk assessments, training, and planning

• Projects that address vulnerabilities identified in cybersecurity risk assessments

• Iterative backups, encrypted backups, network segmentation, software to monitor/scan, and endpoint protection

• Distributed Denial of Service protection

• Migrating online services to the “.gov”

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts internet domain

• Public awareness/preparedness campaigns discussing election security and integrity measures

• Long-term vulnerability reduction and community resilience

Supporting

Border Crisis Response and

Enforcement

• Training and awareness

• Community resilience

• Operational coordination

• Risk management for protection programs and activities

• Staffing support to expand 287(g) screening operations within correctional facilities

• Operational overtime costs directly tied to 287(g) screening, processing, and enforcement activities

• Training programs for state and local law enforcement officers in immigration law, civil rights protections, and 287(g) procedures

• Development or enhancement of information-sharing platforms between ICE and local agencies

• Procurement of screening, detection, and communications technology to support immigration enforcement activities

• Establishing secure and dedicated communication networks with ICE Field

Offices

• Conducting joint training exercises with ICE and local law enforcement to test operational coordination

• Support for facilities upgrades, such as creating dedicated interview rooms and secure processing spaces

• Community engagement and public briefings to promote transparency and understanding of 287(g) operations and

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts protections

Enduring Needs:

Planning • Planning

• Risk management for protection programs and activities

• Risk and disaster resilience assessment

• Threats and hazards identification

• Operational coordination

• Community resilience

• Development of: System-wide

Security Risk Management Plans o Continuity of Operations Plans

Response Plans/Station Action Plans System-wide and/or o asset-specific vulnerability assessments o Efforts to strengthen governance integration between/among regional partners

Training and

Awareness

• Long-term vulnerability reduction

• Public information and warning

• Operational coordination

• Situational assessment

• Community resilience

• Security training for employees, to include:

o Basic security awareness o Active shooter/attacker, including integrating the needs of persons with disabilities

• Public awareness/preparedness campaigns

Equipment and Capital

Projects

• Long-term vulnerability reduction

• Infrastructure systems

• Operational communications

• Interdiction and disruption

• Screening, search, and detection

• Access control and identity verification

• Physical protective measures

• Supply chain integrity and security

• Threats and hazards identification

• Infrastructure systems

• Intelligence and information sharing

• Top Transit Asset List (TTAL) risk remediation

• Protection of other high-risk, high-consequence areas or systems that

• have been identified through systemwide

• risk assessments

• Chemical, Biological, Radiological, Nuclear, and Explosive detection, prevention, response, and recovery equipment

• Security screening equipment and technology for people and baggage Unmanned Aircraft Systems and detection technologies

Exercises • Long-term vulnerability reduction

• Operational coordination

• Operational communications

• Community resilience

• Response exercises

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Priority Investments

FY 2026 IBSGP aligns with the Administration’s priorities by directing resources toward the most urgent threats facing the Nation. IBSGP supports the development and sustainment of core capabilities essential to achieving the NPG: “A secure and resilient Nation.”

To ensure strategic focus, DHS has identified five NPAs that reflect the evolving risk landscape and national policy objectives. These priorities serve as a framework for targeting investments that build capability, reduce risk, and promote cross-sector coordination.

The FY 2026 NPAs are:

• Enhancing Protection of Soft Targets/Crowded Places;

• Supporting Homeland Security Task Forces and Fusion Centers;

• Enhancing Cybersecurity;

• Enhancing Election Security; and,

• Supporting Border Crisis Response and Enforcement.

These NPAs are rooted in the core mission areas of the NPG—prevention, protection, mitigation, response, and recovery—and reflect a whole-of-government approach to homeland security.

Applicants should use these priorities to guide planning, investment, and implementation to drive measurable outcomes and long-term resilience.

Additional Information

1. Enhanced Protection of Soft Targets/Crowded Places

Soft targets and crowded places are increasingly appealing to terrorists and other violent extremist actors because of their relative accessibility and the large number of potential targets. This challenge is complicated by the prevalent use of simple tactics and less sophisticated attacks.

Segments of our society are inherently open to the general public, and by nature of their purpose do not incorporate strict security measures. Given the increased emphasis by terrorists and other violent extremist actors to leverage less sophisticated methods to inflict harm in public areas, it is vital that the public and private sectors collaborate to enhance security of locations such as rolling stock, transportation centers, passenger stations, and similar infrastructure.

Additional resources and information regarding securing soft targets and crowded places are available through CISA.

2. Supporting Homeland Security Task Forces and Fusion Centers

This priority supports the Administration’s direction under Executive Order 14159, Protecting the

American People Against Invasion, which calls for the establishment of Homeland Security Task

Forces (HSTFs) nationwide. These multi-agency teams—composed of federal and local law enforcement partners—are tasked with disrupting and dismantling transnational criminal organizations, targeting cross-border human smuggling and trafficking networks (especially those

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts involving children), and using all appropriate law enforcement tools to support lawful immigration enforcement.

Activities under this NPA also enhance broader national efforts in:

• Counterterrorism;

• Cybersecurity;

• Border security;

• Immigration enforcement;

• Transnational organized crime; and,

• Protection of economic and critical infrastructure.

3. Enhancing Cybersecurity

Cybersecurity investments must support the security and functioning of critical port infrastructure and core capabilities as they relate to achieving target capabilities related to preventing, preparing for, protecting against, or responding to acts of terrorism at maritime infrastructure facilities.

Additional resources and information regarding cybersecurity and cybersecurity performance goals are available through CISA, Cross-Sector Cybersecurity Performance Goals, and the National Institute of Standards and Technology.

4. Enhancing Election Security

In January 2017, DHS designated the infrastructure used to administer the Nation’s elections as critical infrastructure. This designation recognizes that the United States’ election infrastructure is of such vital importance to the American way of life that its incapacitation or destruction would have a devastating effect on the country. Additionally, the Homeland Threat Assessment 2024 indicates that electoral processes remain an attractive target for many adversaries.

Securing election infrastructure, ensuring its continued operation in the face of threats and harassment, advancing the safety of election officials, and protecting against foreign interference are national security priorities. Because threats to election systems are constantly evolving, defending these systems requires constant vigilance, innovation, and adaptation. By integrating the directives of Executive Order 14248, Preserving and Protecting the Integrity of American Elections, into the

Election Security NPA, recipients can ensure that their efforts contribute to a secure, transparent, and resilient electoral process, thereby reinforcing public trust and the integrity of democratic institutions.

5. Supporting Border Crisis Response and Enforcement

State and local law enforcement agencies are essential partners in safeguarding national security and public safety. Pursuant to Executive Order 14159, Protecting the American People Against

Invasion, it is the policy of the United States to enforce immigration laws against all inadmissible and removable aliens—particularly those who threaten the safety or security of the American people.

This includes the efficient execution of these laws through lawful in incentives and enhanced detention capabilities.

https://www.cisa.gov/cpg https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework https://www.nist.gov/cyberframework https://www.federalregister.gov/documents/2025/01/29/2025-02006/protecting-the-american-people-against-invasion https://www.federalregister.gov/documents/2025/01/29/2025-02006/protecting-the-american-people-against-invasion

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

This NPA supports efforts that align with this policy and promote cooperation between local and federal partners. Projects may include, but are not limited to:

• Participating in the DHS/ICE 287(g) program, allowing trained local officers to support ICE with immigration enforcement;

• Cooperating with ICE detainers and other jurisdictional responsibilities related to immigration enforcement; and,

• Supportive activities such as officer training, technology, and information sharing, operational support, and community engagement.

C. Performance Measures and Targets The stated goals, objectives, and priorities of IBSGP support Section 1532 of the Implementing

Recommendations of the 9/11 Commission Act of 2007 (Pub. L. No. 110-53) (6 U.S.C. § 1182) by strengthening the nation’s critical transportation infrastructure against risks associated with potential terrorist attacks.

Performance metrics for this program are as follows (Targets vary on a case by case basis):

1. Performance Measure Name 1: Cybersecurity vulnerabilities reduced at IBSGP funded Bus

Organizations (Target: >1 Cybersecurity vulnerability reduced);

2. Performance Measure Name 2: Number of Facility Security Enhancements at funded IBSGP Bus

Organizations (Target: >10 Facility Enhancements);

3. Performance Measure Name 3: Number of Vehicle Security Enhancements at funded IBSGP Bus Organizations (Target: >10 Vehicle Security Enhancements);

4. Performance Measure Name 4: Number of security related Trainings conducted (Target: >5 security related trainings conducted);

5. Performance Measure Name 5: Number of security related Exercises conducted (Target: >5

Exercises conducted); and,

6. Performance Measure Name 6: Number of security related Public Awareness Campaigns conducted (Target: >5 Public Awareness Campaigns conducted).

D. Federal Assistance Type Grant

E. Program-Specific Unallowable Costs Specific Unallowable Costs Include:

• General-use facility expenditures, to include, but not limited to ordinary facility maintenance, contracts for maintenance, and specifically backup or emergency generators;

• General vehicle maintenance, service contracts, or warranties. This is different from maintenance and sustainment costs that are allowable, but only for projects funded under a grant award. For projects or equipment not funded by the grant award, general maintenance, service contracts, and warranties are not allowable;

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

• Expenditures for items such as general-use software (word processing, spreadsheet, graphics, etc.), general-use computers and related equipment (other than for allowable Management &

Administration (M&A) activities, or otherwise associated preparedness or response functions), general-use vehicles, licensing fees, recurring operating costs (e.g., cell phone services, maintenance contracts);

• Organizational operating expenses;

• Personnel costs, to include, but not limited to, overtime and backfill (except as detailed above);

• Activities unrelated to the completion and implementation of the IBSGP;

• Other indirect costs (meaning property purchase, depreciation, or amortization expenses);

• Initiatives in which federal agencies are the beneficiary or that enhance federal property;

• Initiatives which study technology development;

• Proof-of-concept initiatives;

• Initiatives that duplicate capabilities being provided by the Federal Government; and,

• Pre-award costs are not allowable and will not be approved, with the exception of costs resulting from pre-award grant writing services provided by an independent contractor that shall not exceed $1,500, as detailed in the “Pre-Award Costs” section above.

Note: The above may not be exhaustive. Please consult the applicable terms and conditions and with FEMA for more information.

F. General Funding Requirements Costs charged to federal awards (including federal and non-federal cost share funds) must comply with applicable statutes, rules and regulations, policies, this NOFO, and the terms and conditions of the federal award. This includes, among other requirements, that costs must be incurred, and products and services must be delivered within the budget period (see 2 C.F.R. § 200.403(h)).

Recipients may not use federal funds or any cost share funds for the following activities:

1. Matching or cost sharing requirements for other federal grants and cooperative agreements (see

2 C.F.R. § 200.306);

2. Lobbying or other prohibited activities under 18 U.S.C. § 1913 or 2 C.F.R. § 200.450; and

3. Prosecuting claims against the federal government or any other government entity (see 2 C.F.R. §

200.435).

G. Prohibition on Covered Equipment or Services FEMA provides additional resources regarding the prohibition on covered telecommunications equipment and services in its policy titled Prohibitions on Expending FEMA Award Funds for Covered Telecommunications Equipment or Services (FEMA Policy #405-143-1). This policy outlines specific requirements related to the prohibition. Additionally, FEMA's Contract Provisions Guide offers sample language for the required contract provisions.

https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRea20080eff2ea53/section-200.403 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/section-200.306 https://uscode.house.gov/view.xhtml?req=(title:18%20section:1913%20edition:prelim)%20OR%20(granuleid:USC-prelim-title18-section1913)&f=treesort&edition=prelim&num=0&jumpTo=true https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.450 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.435 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.435 https://www.fema.gov/sites/default/files/documents/fema_policy-405-143-1-prohibition-covered-services-equipment-gpd.pdf https://www.fema.gov/sites/default/files/documents/fema_policy-405-143-1-prohibition-covered-services-equipment-gpd.pdf https://www.fema.gov/sites/default/files/documents/fema_contract-provisions-guide_fy24.pdf

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Recipients, subrecipients, and their contractors or subcontractors must comply with the prohibitions set forth in Section 889 of the John S. McCain National Defense Authorization Act for Fiscal Year 2019, which restrict the purchase of covered telecommunications and surveillance equipment and services. See 2

C.F.R. §§ 200.216, 200.327, 200.471, and Appendix II to 2 C.F.R. Part 200 for more information.

Prohibition on Covered Foreign Unmanned Aircraft Systems (UAS)

Recipients, subrecipients, and their contractors or subcontractors must also comply with Section 1825 of the American Security Drone Act of 2023, enacted as part of the National Defense Authorization Act for

Fiscal Year 2024 (Pub. L. No. 118-31 §§ 1821-33, 41 U.S.C. 3901 note prec.). This provision mandates that, beginning December 22, 2026, no federal funds awarded through a contract, grant, or cooperative agreement, or otherwise made available may be used to procure a covered unmanned aircraft system

(UAS) that is manufactured or assembled by a covered foreign entity. Significantly, no funds may be used in connection with the operation of such a drone or UAS. For more information, refer to Public Law 118-31 and OMB Memorandum M-26-02, Ensuring Government Use of Secure Unmanned Aircraft Systems and

Supporting United States Producers.

H. Beneficiary and Participant Eligibility Beneficiary

There are no program requirements. This NOFO and any subsequent federal awards create no rights or causes of action for any beneficiary.

Participant

There are no program requirements. This NOFO and any subsequent federal awards create no rights or causes of action for any participant.

This NOFO and any subsequent federal awards create no rights or causes of action for any beneficiary or participant. Please consult the DHS Standard Terms and Conditions, your awarding agency’s terms and conditions, and your awarding documents for more details.

I. Indirect Costs Indirect costs (IDC) are allowed for recipients.

IDC are costs incurred for a common or joint purpose benefiting more than one cost objective and not readily assignable to specific cost objectives without disproportionate effort. Applicants with a current negotiated IDC rate agreement who desire to charge indirect costs to a federal award must provide a copy of their IDC rate agreement with their applications. Not all applicants are required to have a current negotiated IDC rate agreement. Applicants that are not required to have a negotiated IDC rate agreement, but are required to develop an IDC rate proposal, must provide a copy of their proposal with their applications. Applicants without a current negotiated IDC rate agreement (including a provisional rate) and wish to charge the de minimis rate must reach out to FEMA for further instructions. Applicants who wish to use a cost allocation plan in lieu of an IDC rate proposal must reach out to FEMA for further instructions. As it relates to the IDC for subrecipients, a recipient must follow the requirements of 2 C.F.R.

§§ 200.332 and 200.414 in approving the IDC rate for subawards.

https://www.govinfo.gov/link/plaw/115/public/232 https://www.ecfr.gov/current/title-2/section-200.216 https://www.ecfr.gov/current/title-2/section-200.216 https://www.ecfr.gov/current/title-2/section-200.327 https://www.ecfr.gov/current/title-2/section-200.471 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/appendix-Appendix%20II%20to%20Part%20200 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.whitehouse.gov/wp-content/uploads/2025/11/M-26-02-Ensuring-Government-Use-of-Secure-Unmanned-Aircraft-Systems-and-Supporting-United-States-Producers.pdf https://www.whitehouse.gov/wp-content/uploads/2025/11/M-26-02-Ensuring-Government-Use-of-Secure-Unmanned-Aircraft-Systems-and-Supporting-United-States-Producers.pdf https://www.ecfr.gov/current/title-2/section-200.332 https://www.ecfr.gov/current/title-2/section-200.332 https://www.ecfr.gov/current/title-2/section-200.414

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

J. Budget Period There will be only a single budget period with the same start and end dates as the period of performance.

K. Pre-Award Costs Authorized Use of Contractual Grant Writers and/or Grant Managers

A grant applicant may procure the services of a contractor to provide support and assistance for pre-award grant development services (grant writing) or post-award grant management and administrative services

(grant management). As with all federal grant-funded procurements, grant writer or grant management services must be procured in accordance with the federal procurement standards at 2 C.F.R. §§ 200.317 –

200.327. See the Preparedness Grants Manual section regarding procurement integrity, particularly the sections applicable to non-state entities that discuss organizational conflicts of interest under 2 C.F.R. §

200.319(b) and traditional conflicts of interest under 2 C.F.R. § 200.318(c)(1). States must follow the same policies and procedures they use for procurements of its non-federal funds, pursuant to 2 C.F.R. § 200.317, which also applies 2 C.F.R. §§ 200.321, 200.322, 200.323, and 200.327.

As applicable to non-state entities, DHS/FEMA considers a contracted grant writer to be an agent of the recipient for any subsequent contracts the recipient procures under the same federal award in which the grant writer provided grant writing services. Federal funds and funds applied to the award’s cost share generally cannot be used to pay a contractor to carry out the work if that contractor also worked on the development of such specifications unless the original contract was properly procured and included both grant writing and grant management services in the solicitation’s scope of work.

As applicable to all non-federal entities, regardless of whether an applicant or recipient uses grant writing and/or grant management services, the recipient is solely responsible for the fiscal and programmatic integrity of the grant and its authorized activities and expenditures. The recipient must ensure adequate internal controls, including separation of duties, to safeguard grant assets, processes, and documentation, in keeping with the terms and conditions of its award, including this NOFO, and 2 C.F.R. Part 200.

Grant Writers

Grant writing contractors may assist the applicant in a variety of ways, including preparing, writing, and finalizing grant application materials and assisting the applicant with handling online application and submission requirements in FEMA GO. Ultimately, however, the applicant that receives an award is solely responsible for all grant award and administrative responsibilities.

By submitting the application, applicants certify that all of the information contained therein is true and an accurate reflection of the organization, and that regardless of the applicant’s intent, the submission of information that is false or misleading may result in actions by DHS/FEMA. These actions include, but are not limited to, the submitted application not being considered for award, temporary withholding of funding under the existing award pending investigation, or referral to the DHS Office of the Inspector

General.

To assist applicants with the cost of grant writing services, DHS/FEMA is permitting a one-time pre-award cost of no more than $1,500 per applicant per year for contractual grant writing services as part of the https://www.ecfr.gov/current/title-2/part-200/subject-group-ECFR45ddd4419ad436d https://www.ecfr.gov/current/title-2/part-200/subject-group-ECFR45ddd4419ad436d https://www.ecfr.gov/current/title-2/part-200/subpart-D#p-200.319(b) https://www.ecfr.gov/current/title-2/part-200/subpart-D#p-200.319(b) https://www.ecfr.gov/current/title-2/part-200/subpart-D#p-200.318(c)(1) https://www.ecfr.gov/current/title-2/section-200.317 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR45ddd4419ad436d/section-200.321 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR45ddd4419ad436d/section-200.322 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR45ddd4419ad436d/section-200.323 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/subject-group-ECFR45ddd4419ad436d/section-200.327…