OMB APPROVED FY23 CETAP NOFO.pdf

The Department of Homeland Security (DHS) Notice of Funding Opportunity (NOFO)

Cybersecurity Education and Training Assistance Program (CETAP)

Contents

A. Program Description

1. Issued By

2. Assistance Listings Number

3. Assistance Listings Title

4. Funding Opportunity Title

5. Funding Opportunity Number

6. Authorizing Authority for Program

7. Appropriation Authority for Program

8. Announcement Type

9. Program Overview, Objectives, Priorities, and Allowable Activities

10. Performance Measures

B. Federal Award Information

1. Available Funding for the NOFO:

2. Projected Number of Federal Awards:

3. Period of Performance:

4. Projected Period of Performance Start Date(s):

5. Projected Period of Performance End Date(s):

6. Budget Period

7. Funding Instrument Type:

C. Eligibility Information

1. Eligible Applicants

2. Applicant Eligibility Criteria

3. Other Eligibility Criteria

4. Cost Share or Match

D. Application and Submission Information

1. Key Dates and Times

2. Agreeing to Terms and Conditions of the Award

3. Address to Request Application Package

4. Unique entity identifier and System for Award Management (SAM)

5. Steps Required to Submit an Application, Unique Entity Identifier, and System for Award Management (SAM)

6. Electronic Delivery

7. How to Register to Apply through Grants.gov

8. How to submit an Application to DHS via Grants.gov

9. Timely Receipt Requirements and Proof of Timely Submission

10. Content and Form of Application Submission

11. Other Submission Requirements

12. Intergovernmental Review

13. Funding Restrictions

14. Allowable Costs

E. Application Review Information

1. Application Evaluation Criteria

2. Review and Selection Process

F. Federal Award Administration Information

1. Notice of Award

2. Administrative and National Policy Requirements

3. Reporting

G. DHS Awarding Agency Contact Information

Contact and Resource Information

H. Other Information

Period of Performance Extensions

I. Appendices

APPENDIX A: WORK PLAN TEMPLATE

APPENDIX B: PERFORMANCE MEASURES

All entities wishing to do business with the federal government must have a unique entity identifier (UEI). The UEI number is issued by the SAM system. Information about requesting a UEI can be found at: https://sam.gov/content/entity-registration.

Grants.gov registration information can be found at:

https://www.grants.gov/web/grants/register.html.

1. Planned UEI Updates in Grant Application Forms

On April 4, 2022, the Data Universal Numbering System (DUNS) Number was replaced by a new, non-proprietary identifier requested in, and assigned by, the System for Award Management (SAM.gov). This new identifier is the Unique Entity Identifier (UEI).

Additional Information can be found on Grants.gov:

https://www.grants.gov/web/grants/forms/planned-uei-updates.html

A. Program Description

1. Issued By U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA)

2. Assistance Listings Number 97.127

3. Assistance Listings Title

Cybersecurity Education and Training

4. Funding Opportunity Title

5. Funding Opportunity Number

DHS-23-CISA-127-CDET-0001

6. Authorizing Authority for Program Homeland Security Act of 2002, Pub. L. No. 107-296, § 2220 (codified as amended at 6 U.S.C. § 665f)

7. Appropriation Authority for Program Consolidated Appropriations Act, 2023, Pub. L. No. 117-328, Division F – Department of Homeland Security Appropriations Act, 2023, Title III – Protection, Preparedness Response, and Recovery, Cybersecurity and Infrastructure Security Agency

8. Announcement Type Initial, Year 1 of 5 https://sam.gov/content/entity-registration https://www.grants.gov/web/grants/register.html https://www.grants.gov/web/grants/forms/planned-uei-updates.html

9. Program Overview, Objectives, Priorities, and Allowable Activities

a. Program Overview

The nature of the cybersecurity threat to America is growing and our nation’s cyber adversaries move with speed and stealth. In alignment with the Department of Homeland Security’s Strategic Plan for Fiscal Years 2020-2024, it is imperative to not only secure cyberspace and critical infrastructure (Goal 3), but also strengthen the security and resilience of critical infrastructure (Objective 3.2). We must, therefore, support the educational development of cybersecurity talent needed to participate as members of the security community working to ensure a safe and secure nation.

Section 2220 of the Homeland Security Act of 2002 (codified as amended at 6 U.S.C. § 665f) establishes a Cybersecurity Education and Training Assistance Program within CISA. The purpose of the CETAP is to support the Cybersecurity and Infrastructure Security Agency’s (CISA) efforts in building and strengthening a national cybersecurity workforce pipeline capacity through enabling elementary and secondary cybersecurity education, including by providing foundational cybersecurity awareness and literacy, encouraging cybersecurity career exploration, and supporting the teaching of cybersecurity skills at the elementary and secondary education levels. To fund these cybersecurity and infrastructure security education and training programs and initiatives, Section 2220 authorizes CISA to award financial assistance in the form of cooperative agreements and grants to carry out the purposes of the CETAP and enhance CETAP to address the national shortfalls of cybersecurity professionals.

To accomplish the stated goals in Section 2220, CISA seeks to provide financial assistance under the FY 2023 CETAP through up to two cooperative agreements for non-federal entities to develop cybersecurity curriculum and professional development opportunities focused on K-12 students and their educators, administrators, and caregivers and engage in outreach efforts to increase cybersecurity awareness within that K-12 community.

b. Program Objectives

The objectives of the FY 2023 CETAP are to:

i. Target K-12 educators, administrators, counselors, and caregivers and promote awareness of national cybersecurity education and workforce training and education opportunities.

ii. Create cyber training pathways for K-12 educators, potential educators, and students by providing an adaptable cybersecurity curricular model that targets K-12 students (with a priority toward K-8) to include hands-on, engaging cybersecurity-integrated curriculum, gamified activities, competitions, and ready-to-use tools.

iii. Develop partnerships and increase stakeholder engagement to maximize outreach efforts and the impact of cybersecurity education across the K-12 community.

https://www.dhs.gov/publication/department-homeland-securitys-strategic-plan-fiscal-years-2020-2024?topics=all https://www.dhs.gov/publication/department-homeland-securitys-strategic-plan-fiscal-years-2020-2024?topics=all

iv. Develop and implement a comprehensive regional engagement strategy to increase awareness of all CETAP tools and resources.

c. Program Priorities

The priorities of the FY 2023 CETAP are to:

i. Increase cybersecurity awareness, knowledge, and skills among K-12 educators, administrators, counselors, and students.

ii. Develop adaptable cybersecurity curriculum and content for K-12 educators and students using innovative strategies, such as pathways to convergence education approach.

iii. Create and promote cybersecurity professional development for K-12 educators, administrators, guidance and career counselors and caregivers.

iv. Create and implement an effective user feedback mechanism (i.e., surveys) on all services.

v. Create partnerships to collaborate and amplify the outreach and delivery of cybersecurity trainings, workshops, and events.

vi. Create a sustainability plan for continuation of training services, professional development offerings, educational materials, and curriculum.

d. Allowable Activities

An applicant must design its approach from: (1) a strategic level by describing the goals, timeline, key stakeholders, resource allocation, programmatic assessments, and milestones; and (2) an operational level by describing how it will implement the proposed strategy, including detailed plans for outreach to increase awareness of cybersecurity in the workplace and classroom, creation of impactful content for educators, stakeholder engagement, and development of K-12 curriculum and professional development opportunities. Applicants must propose a scope of work comprised of the following activities:

i. Draft for CISA’s review and, upon approval, execute a Comprehensive

Engagement and Retention Strategy (CERS) that enables CISA and its regional partners to increase awareness of all CETAP tools and resources and outlines, at a minimum, how the applicant intends to:

1. Achieve all Program Objectives (listed above) including a timeline and associated milestones as well as expected resource allocation and assessment approach to ensure programmatic success and compliance with the terms of the funding opportunity.

2. Ensure all electronic content and services are accessible to persons with disabilities. Develop a new or leverage an existing system for reviewing and collecting data and monitor results to assess the 5-year Period of Performance including educator feedback and projected measurable increases in students pursuing cybersecurity careers.

4. Create a new or leverage existing infrastructure to successfully sustain the program components and partnerships after the life of the cooperative agreement.

ii. Develop effective marketing and outreach efforts in collaboration with stakeholders to increase awareness of cybersecurity in the K-12 community which will include discussing the disparity of cybersecurity professionals in the workforce, outlining the benefits of a cyber-integrated curriculum to mitigate future employment gaps and highlighting cybersecurity career options and the associated educational paths.

iii. Create an engaging, effective, and inclusive cybersecurity curriculum where:

1. Educators in all 50 States, Washington D.C., and the U.S. Territories have universal access to the most current, cyber-integrated K-12 curricula.

2. Students in all 50 States, Washington D.C., and the U.S. Territories will be introduced to cyber-integrated K-12 curricula that will incorporate technology-based and simulation training.

3. Students are introduced to cybersecurity professionals with careers that align to the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework and can discuss sample job roles and responsibilities.

4. Students are educated on how they can pursue a cybersecurity career through academic and non-academic paths.

5. A template, to include the recruitment and logistics details, is developed to enable the cyber-integrated curricula program elements to be adapted and taught elsewhere (adaptable cybersecurity curricular model).

iv. Create engaging, effective, and inclusive professional development opportunities

(virtual-synchronous and asynchronous, in person or a combination), where:

1. Educators are exposed to and familiarized with cybersecurity classroom content and career options that will provide knowledge and techniques to advance their teaching capabilities.

2. Caregivers and students have access to high-quality cybersecurity content that increases awareness and provides hands-on, supplemental learning opportunities outside of the classroom.

10. Performance Measures

a. Number of recipient-developed, universally accessible cyber-integrated of primary, middle, and/or high school (K-12) curricula published.

b. Number of educators utilizing recipient-developed and implemented cyber-integrated curricula in a primary, middle, and/or high school (K-12) classroom, after-school and/or extracurricular setting.

c. Number of K-12 students being taught recipient-developed and implemented cyber-integrated curricula in a classroom setting.

d. Number of recipient-developed and implemented Professional Development courses/workshops.

e. Number of educators participating in recipient-developed and implemented Professional Development.

f. Number of collaborative partnerships with stakeholders.

B. Federal Award Information

1. Available Funding for the NOFO:

$6,800,000 ($3,400,000 two recipients may be selected)

2. Projected Number of Federal Awards:

Up to 2

3. Period of Performance:

60 months

An extension to the Period of Performance is allowable. Refer to Section H. Additional Information, Period of Performance Extensions.

4. Projected Period of Performance Start Date(s):

09/29/2023

5. Projected Period of Performance End Date(s):

09/29/2028

6. Budget Period

a. There will be up to five budget periods for the Federal Award, which are the following: 9/30/2023 to 9/29/2024; 9/30/2024 to 9/29/2025; 9/30/2025 to 9/29/2026;

9/30/2026 to 9/29/2027; and 9/30/2027 to 9/29/2028.

b. The available funding for the NOFO described above is for the initial 12-month budget period from 9/30/2023 to 9/29/2024.

c. Funding for non-competitive continuation awards beyond the initial budget period is conditioned on the availability of funds, satisfactory performance by the recipient, program authority, compliance with the terms and conditions of the Federal Award, and a DHS/CISA determination that continued funding is in the best interests of the federal government.

d. A recipient may only carry forward unobligated balances from one budget period to a subsequent budget period with prior written approval of DHS/CISA.

7. Funding Instrument Type:

Cooperative Agreement

DHS/CISA will exercise substantial programmatic involvement in the Federal Award through collaboration, participation, and other involvement in activities performed by a recipient in carrying out the scope of work. This will include the following:

a. Reviewing and approving the Comprehensive Engagement and Retention Strategy (CERS) before the recipient may implement any subsequent work under the Federal Award.

b. Reviewing and approving the cyber-integrated curricula before a recipient may implement them.

c. Reviewing and approving the professional development courses/workshops before a recipient may implement them.

C. Eligibility Information

1. Eligible Applicants

a. Nonprofit organizations, other than institutions of higher education with an effective ruling letter from the U.S. Internal Revenue Service granting tax exemption under Section 501(c)(3) of the Internal Revenue Code of 1986.

b. Nonprofit organizations, other than institutions of higher education, without an effective ruling letter from the U.S. Internal Revenue Service granting tax exemption under Section 501(c)(3) of the Internal Revenue Code of 1986.

2. Applicant Eligibility Criteria

a. Cybersecurity Curriculum. An applicant must have experience and a satisfactory record of past performance in (K-12) cybersecurity education required to successfully manage and implement fundamental cybersecurity curriculum. An applicant must provide in its application a summary of the cybersecurity curriculum for both students and educators that it has previously provided, to include course offerings, degree requirements, pre and post assessments, labs, etc.

b. Target Community. K-12 educators, administrators, guidance counselors, students, and their caregivers.,. An applicant must provide in its application a summary of their strategic approach on how they target and market services directly to different audiences/communities/stakeholders.

c. Professional Development. An applicant must have experience in delivering K-12 cybersecurity related professional development. An applicant must provide in its application a summary of their strategic approach on how they execute K-12 cybersecurity professional development, what audiences the professional development services are created for, as well as how they capture feedback on their services/programs.

3. Other Eligibility Criteria

a. Required Partners Applicants should forge robust partnerships to implement the cooperative agreement goals and priorities and to sustain activities beyond the Period of Performance. To ensure that the applicant has strong and sustained partnerships, applicants are required to partner with at least two established organizations/clubs/non-profit entities within the educational community (i.e., after-school programs, curriculum sharing among schools, etc.) whose mission is to create/maintain/support cybersecurity curriculum development and K-12 classroom implementation.

Applicants must also have established partnerships or a plan to establish a partnership with school districts/organizations/entities that support and/or can facilitate the inclusion of cybersecurity education in the curriculum in at least two CISA Regions in each budget period.

4. Cost Share or Match

There is no non-federal cost-share requirement under the CETAP cooperative agreement.

An applicant may pledge voluntarily committed cost-sharing in its proposed budget for the application, although voluntary cost-sharing will play no role in DHS/CISA’s selection process. If DHS/CISA accepts the voluntary cost-sharing when issuing the Federal Award, the voluntary cost-share becomes a binding obligation.

D. Application and Submission Information

1. Key Dates and Times

a. Application Start Date:

05/23/2023(Open 60 days)

b. Application Submission Deadline:

07/25/2023 23:59 (GMT - 05:00) Eastern Time (US & Canada) All applications must be received by the established deadline.

c. Anticipated Funding Selection Date:

No later than 09/29/2023

d. Anticipated Award Date:

No later than 09/29/2023

e. Other Key Dates

2. Agreeing to Terms and Conditions of the Award

By submitting an application, applicants agree to comply with the requirements of this NOFO and the terms and conditions of the Federal Award.

3. Address to Request Application Package Application forms and instructions are available at Grants.gov. To access these materials, go to http://www.grants.gov, select “Applicants” then “Apply for Grants.” To obtain the application package, select “Download a Grant Application Package.” Enter the

Event Suggested Deadline for Completion Initial Registration at SAM.gov (includes UEI issuance) Four weeks before actual submission deadline

Obtaining a valid EIN Four weeks before actual submission deadline Updating SAM registration Four weeks before actual submission deadline Starting application in Grants.gov Two weeks before actual submission deadline http://www.grants.gov/

Assistance Listing number and/or the funding opportunity number located above, select “Download Package,” and then follow the prompts to download the application package.

For a hardcopy of the full NOFO, please contact the Grants Officer by:

Email: sean.lilly@hq.dhs.gov Phone: 202-601-9303

In addition, the following Telephone Device for the Deaf (TDD) and/or Federal Information Relay Service (FIRS) number available for this Notice is: 1-800-518-4726 (Grants.gov Help Desk).

DHS/CISA will process applications electronically through the Grants.gov portal.

4. Unique entity identifier and System for Award Management (SAM) Each applicant, unless they have a valid exception under 2 C.F.R. § 25.110, must:

a. Be registered in SAM.gov before application submission.

b. Provide a valid unique entity identifier in its application.

c. Continue to always maintain an active SAM registration with current information during the Federal Award process.

5. Steps Required to Submit an Application, Unique Entity Identifier, and System for Award Management (SAM) To apply for an award under this program, all applicants must:

a. Have an account with https://login.gov/

b. Register for, update, or verify their SAM account and ensure the account is active and

Employer ID Number (EIN) before submitting the application.

c. Create a Grants.gov account.

d. Add a profile to a Grants.gov account.

e. Establish an Authorized Organizational Representative (AOR) in Grants.gov.

f. Submit an initial application in Grants.gov.

g. Continue to maintain an active SAM registration with current information, including information on a recipient’s immediate and highest-level owner and subsidiaries, as well on all predecessors that have been awarded a federal contract, grant, or cooperative agreement within the last 3 years, if applicable, at all times during which it has an active federal award or an application or plan under consideration by a federal awarding agency.

Applicants are advised that DHS/CISA may not make a federal award until the applicant has complied with all applicable SAM requirements. Therefore, an applicant’s SAM registration must be active not only at the time of application, but also during the application review period and when DHS/CISA is ready to make a federal award.

Further, as noted above, an applicant’s or recipient’s SAM registration must remain active for the duration of an active federal award. If an applicant’s SAM registration is expired at the time of application, expires during application review, or expires any other time before award, DHS/CISA may determine that the applicant is not qualified to mailto:sean.lilly@hq.dhs.gov receive a federal award and use that determination as a basis for terminating a federal award and/or making a federal award to another applicant.

6. Electronic Delivery

DHS is participating in the Grants.gov initiative to provide the grant community with a single site to find and apply for grant funding opportunities. DHS encourages or requires applicants to submit their applications online through Grants.gov, depending on the funding opportunity. For this funding opportunity, DHS requires applicants to submit applications through Grants.gov.

7. How to Register to Apply through Grants.gov

a. Instructions: Registering in Grants.gov is a multi-step process. Read the instructions below about registering to apply for DHS funds. Applicants should read the registration instructions carefully and prepare the information requested before beginning the registration process. Reviewing and assembling the required information before beginning the registration process will alleviate last-minute searches for required information.

The registration process can take up to four weeks to complete. Therefore, registration should be done in sufficient time to ensure it does not impact your ability to meet required application submission deadlines.

Organizations must have a Unique Entity Identifier (UEI) Number with an active System for Award Management (SAM) registration and Grants.gov account to apply for grants and cooperative agreements. If individual applicants are eligible to apply for this cooperative agreement funding opportunity, then you may begin with step 3, Create a Grants.gov account, listed below.

Creating a Grants.gov account can be completed online in minutes, but SAM registration may take several weeks. Therefore, an organization's registration should be done in sufficient time to ensure it does not impact the organization’s ability to meet required application submission deadlines. Complete organization instructions can be found on Grants.gov here:

https://www.grants.gov/web/grants/applicants/organization-registration.html.

1) Register with SAM: All organizations applying online through Grants.gov must register with the System for Award Management (SAM). Failure to register with SAM will prevent an organization from applying through Grants.gov. SAM registration must be renewed annually. Organizations will be issued a UEI number with the completed SAM registration.

For more detailed instructions for registering with SAM, refer to:

https://www.grants.gov/web/grants/applicants/organization-registration/step-2-register-with-sam.html.

https://www.grants.gov/web/grants/applicants/organization-registration.html https://www.grants.gov/web/grants/applicants/organization-registration/step-2-register-with-sam.html https://www.grants.gov/web/grants/applicants/organization-registration/step-2-register-with-sam.html

2) Create a Grants.gov Account: The next step is to register an account with Grants.gov. Follow the on-screen instructions or refer to the detailed instructions here: https://www.grants.gov/web/grants/applicants/registration.html.

3) Add a Profile to a Grants.gov Account: A profile in Grants.gov corresponds to a single applicant organization the user represents (i.e., an applicant) or an individual applicant. If you work for or consult with multiple organizations and have a profile for each, you may log in to one Grants.gov account to access all of your grant applications. To add an organizational profile to your Grants.gov account, enter the UEI Number for the organization in the UEI field while adding a profile.

For more detailed instructions about creating a profile on Grants.gov, refer to:

https://www.grants.gov/web/grants/applicants/registration/add-profile.html.

4) EBiz POC Authorized Profile Roles: After you register with Grants.gov and create an Organization Applicant Profile, the organization applicant's request for Grants.gov roles and access is sent to the EBiz POC. The EBiz POC will then log into Grants.gov and authorize the appropriate roles, which may include the AOR role, thereby giving you permission to complete and submit applications on behalf of the organization. You will be able to submit your application online any time after you have been assigned the AOR role.

For more detailed instructions about creating a profile on Grants.gov, refer to:

https://www.grants.gov/web/grants/applicants/registration/authorize-roles.html.

5) Track Role Status: To track your role request, refer to:

https://www.grants.gov/web/grants/applicants/registration/track-role-status.html.

6) Electronic Signature: When applications are submitted through Grants.gov, the name of the organization applicant with the AOR role that submitted the application is inserted into the signature line of the application, serving as the electronic signature. The EBiz POC must authorize people who are able to make legally binding commitments on behalf of the organization as a user with the AOR role; this step is often missed, and it is crucial for valid and timely submissions.

8. How to submit an Application to DHS via Grants.gov Grants.gov applicants can apply online using Workspace. Workspace is a shared, online environment where members of a grant team may simultaneously access and edit different webforms within an application. For each NOFO, you can create individual instances of a workspace.

Below is an overview of applying on Grants.gov. For access to complete instructions on how to apply for opportunities using Workspace, refer to:

https://www.grants.gov/web/grants/applicants/workspace-overview.html.

https://www.grants.gov/web/grants/applicants/registration.html https://www.grants.gov/web/grants/applicants/registration/add-profile.html https://www.grants.gov/web/grants/applicants/registration/authorize-roles.html https://www.grants.gov/web/grants/applicants/registration/track-role-status.html https://www.grants.gov/web/grants/applicants/workspace-overview.html

i. Create a Workspace: Creating a workspace allows you to complete it online and route it through your organization for review before submitting.

ii. Complete a Workspace: Add participants to the workspace to work on the application together, complete all the required forms online or by downloading PDF versions, and check for errors before submission. The Workspace progress bar will display the state of your application process as you apply. As you apply using Workspace, you may click the blue question mark icon near the upper-right corner of each page to access context-sensitive help.

iii. Adobe Reader: If you decide not to apply by filling out webforms you can download individual PDF forms in Workspace. The individual PDF forms can be downloaded and saved to your local device storage, network drive(s), or external drives, then accessed through Adobe Reader.

NOTE: Visit the Adobe Software Compatibility page on Grants.gov to download the appropriate version of the software at:

https://www.grants.gov/web/grants/applicants/adobe-software-compatibility.html.

iv. Mandatory Fields in Forms: In the forms, you will note fields marked with an asterisk and a different background color. These fields are mandatory fields that must be completed to successfully submit your application.

v. Complete SF-424 Fields First: The forms are designed to fill in common required fields across other forms, such as the applicant’s name, address, and UEI number. To trigger this feature, an applicant must complete the SF-424 information first. Once it is completed, the information will transfer to the other forms.

vi. Submit a Workspace: An application may be submitted through workspace by clicking the Sign and Submit button on the Manage Workspace page, under the Forms tab. Grants.gov recommends submitting your application package at least 24- 48 hours prior to the close date to provide you with time to correct any potential technical issues that may disrupt the application submission.

vii. Track a Workspace Submission: After successfully submitting a workspace application, a Grants.gov Tracking Number (GRANTXXXXXXXX) is automatically assigned to the application. The number will be listed on the Confirmation page that is generated after submission. Using the tracking number, access the Track My Application page under the Applicants tab or the Details tab in the submitted workspace.

For additional training resources, including video tutorials, refer to:

https://www.grants.gov/web/grants/applicants/applicant-training.html.

Applicant Support: Grants.gov provides applicants 24/7 support via the toll-free number 1-800-518-4726 and email at support@grants.gov. For questions related to the specific grant opportunity, contact the number listed in the application package of the grant to which you are applying.

If you are experiencing difficulties with your submission, it is best to call the Grants.gov Support Center and get a ticket number. The Support Center ticket number will assist DHS with tracking your issue and understanding background information on the issue.

https://www.grants.gov/web/grants/applicants/adobe-software-compatibility.html https://www.grants.gov/web/grants/applicants/applicant-training.html mailto:support@grants.gov

9. Timely Receipt Requirements and Proof of Timely Submission

a. Online Submission. All applications must be received by Eastern time on the due date. Proof of timely submission is automatically recorded by Grants.gov. An electronic date/time stamp is generated within the system when the application is successfully received by Grants.gov. The applicant with the AOR role who submitted the application will receive an acknowledgement of receipt and a tracking number (GRANTXXXXXXXX) from Grants.gov with the successful transmission of their application. This applicant with the AOR role will also receive the official date/time stamp and Grants.gov Tracking number in an email serving as proof of their timely submission.

When DHS successfully retrieves the application from Grants.gov, and acknowledges the download of submissions, Grants.gov will provide an electronic acknowledgment of receipt of the application to the email address of the applicant with the AOR role who submitted the application. Again, proof of timely submission will be the official date and time that Grants.gov receives your application. Applications received by Grants.gov after the established due date for the program will be considered late and will not be considered for funding by DHS.

Applicants using slow internet, such as dial-up connections, should be aware that transmission can take some time before Grants.gov receives your application. Again, Grants.gov will provide either an error or a successfully received transmission in the form of an email sent to the applicant with the AOR role attempting to submit the application. The Grants.gov Support Center reports that some applicants end the transmission because they think that nothing is occurring during the transmission process. Please be patient and give the system time to process the application.

10. Content and Form of Application Submission All applicants must submit all required forms and required documents outlined in this NOFO. Applications missing any of the required forms or documents may not be considered for review. The Project Narrative is limited to 25 double-spaced single-sided

8.5 x 11-inch pages with Times New Roman 12-point text font and 1-inch margins. An applicant must number the Project Narrative beginning with page number 1. DHS/CISA will not read or consider any materials beyond the specified page limit in the application review process. The Budget and Budget Narrative do not count against the page limit requirements for the Project Narrative.

The following instructions provide all the information needed to complete the Budget, Budget Narrative, and Project Narrative. Carefully read and consider each section and include all required information in your submission. DHS/CISA will evaluate the Budget, Budget Narrative, and Project Narrative using the evaluation criteria identified in Section E.1. You must use the same section headers identified below for each section of the Budget Narrative and Project Narrative. The maximum possible score is 100 points.

a. REQUIRED FORMS

i. Form SF-424 – Application for Federal Assistance

Complete the SF-424 application form. This form may be completed on the Grants.gov website or it can be completed offline in its entirety.

NOTE: Applications submitted through Grants.gov must use the SF-424 provided by Grants.gov. The SF-424 application forms can only be viewed and downloaded once Adobe Reader has been installed. The SF-424 application form on Grants.gov is formatted so applicants are only required to complete fields which are indicated with an asterisk (*) and color coded. Once the application is complete, close the document (you will then be prompted to save changes or not).

ii. Form SF-424A – Budget Complete the budget in its entirety. Provide budget amounts by object class (salaries, fringe benefits, equipment, supplies, travel, contractual (which includes subawards), other, and indirect). Funds may be requested if the item and amount are necessary to perform the proposed work and are not precluded by the cost principles or program funding restrictions. Additional guidance on how to complete the Form SF-424A can be found at: http://www.grants.gov/web/grants/forms.html.

b. REQUIRED DOCUMENTS

i. Budget Narrative (Maximum of 10 points) The Budget Narrative must provide a description of costs associated with each line item on the SF-424A. The Budget Narrative should also include a section describing any leveraged resources provided (as applicable) to support cooperative agreement activities. Leveraged resources are all resources, both cash and in-kind, exceeding the total costs in the Budget. Applicants are encouraged to leverage resources to increase stakeholder investment in the project and broaden the impact of the project itself. Each category should include the total cost for the period of performance. Use the following guidance for preparing the Budget Narrative.

The Budget Narrative must address how the funds allocated to each eligible program/activity/task/initiative will be spent and how costs were determined for the following cost purposes:

1) Planning Costs (2 points) The Budget Narrative must identify the planning activities on which proposed costs will be spent for each Budget Period.

Provide detail on proposed activities.

2) Personnel and Contractual Costs (2 points) The Budget Narrative must include any personnel costs of staff who support the development and implementation of the training program, including employee personnel costs, fringe benefit costs, travel costs, and supplies costs. Additional items, such as contractual costs for good and services, must also be included.

http://www.grants.gov/web/grants/forms.html

3) Delivery Costs (4 points) The Budget Narrative must provide detail on proposed numbers of students to benefit from the cybersecurity curriculum, number of education hours, anticipated location of training, and outputs expected.

4) Equipment Purchase Costs (2 points) Each activity that proposes equipment purchase must provide a line-item cost breakout of equipment, including equipment description, unit cost, and quantity proposed for purchase. All equipment purchases will be reviewed by the DHS/CISA Program Office.

ii. Program Narrative (Maximum of 90 points)

The Program Narrative must demonstrate an applicant’s capability to implement the objectives of the cooperative agreement in accordance with the provisions of this NOFO. It provides a comprehensive framework and description of all aspects of the proposed program. It must be succinct, self-explanatory, and well-organized so that reviewers can understand the proposed approach. The application must include a Program Narrative that provides a detailed overview description of the proposed efforts and thoroughly addresses the objectives.

Provide or describe the following:

1) Organizational Information (6 points)

Organization’s name, mission, organizational structure, and the capacity to support the project by leading the development of K-12 education and training services and materials within at least one local/regional area. (2 points)

• A summary introduction/overview of the project’s goals. (3 points)

• Contact information, to include the name, title, address, email, and phone number of the primary contact and his/her back up. (1 point)

• Applicants must provide information confirming its status as a nonprofit organization, other than institutions of higher education, described under section 501(c)(3) of the Internal Revenue Code of 1986 and exempt from tax under section 501(a) of such code, or nonprofit organizations, other than institutions of higher education, that are not described under section 501(c)(3) of the Internal Revenue Code of 1986 and exempt from tax under section 501(a) of such code. Any of the following is acceptable evidence of nonprofit status: (a) a reference to the applicant organization’s listing in the Internal Revenue Service’s (IRS) most recent list of tax-exempt organizations described in section 501(c)(3) of the IRS Code; (b) a copy of a currently valid IRS tax exemption certificate; (c) a statement from a State taxing body, State Attorney General, or other appropriate State Official certifying that the applicant organization has a nonprofit status and that none of the net earnings accrue to any private shareholders or individuals; (d) a certified copy of the organization’s certificate of incorporation or similar document that clearly establishes nonprofit status; (e) any of the above proof for a State or national parent organization and a statement signed by the parent organization that the applicant organization is a local nonprofit affiliate.

2) Communities Served (4 points) Applicants must provide a clear identification and description of the specific target communities that will be served, as identified in Section C.2.b. Target Community.

3) Jurisdictional and Geographic Area(s) (2 points) Applicants must provide the county or other equivalent jurisdiction in which the program is located and any other counties or jurisdictions that will benefit.

4) Past Performance and Cybersecurity Curriculum Development

Experience (12 points) Full description of the applicant’s proven past performance in designing and implementing K-12 curriculum, creating professional development courses/workshops, and leading the development and engagement of partnerships within at least one local/regional area. This could include evidence of the applicant managing federally and/or non-federally funded assistance agreements leading engagement strategies, or other activities similar in size, scope, and relevance to the proposed project within the last five years, as of the closing date of the application period. (3 points)

• Demonstration that applicants have experience in developing and implementing cybersecurity curriculum and educational programs for educators and students K-12. Further suitability details listed in Section C.2 Applicant Eligibility Criteria (4 points)

• Applicants must submit, as part of their past performance, the total grant/cooperative agreement amount, and the percentage of funds spent during the period of performance for their most recently completed grant or cooperative agreement, where applicable. Applicants will receive points for their spending rate. (4 points) o Applicants that expended at least 98% of the award funds for their most recently completed grant/cooperative agreement will receive.

(4 points) o Applicants that expended at least 80% but less than 98% of the award funds for their most recently completed grant will receive.

(2 points) o Applicants that expended less than 80% of the award funds for their most recently completed grant will receive. (0 points)

• Applicants must provide past performance data related to outputs and associated outcomes that were achieved in past related initiatives. (1 point) NOTE: Past performance documentation must include:

o Grantor name and contact information o Project/program information o Grant objectives o Performance goals o Spending rate analysis o Overall objectives of the grant o Community served o Funding amount o Total number of educators who completed professional development.

o Total number of educators who use cyber curriculum and materials in the classroom to provide students with cybersecurity training.

5) Proposed Design (46 points)

Scoring is based on the measurable standards below which assess a proposed design and implementation plan. For the purpose of scoring, applicants must describe a clear, realistic plan to include development and implementation of cyber-integrated curricula for K-12 classrooms and professional development opportunities for educational professionals, stakeholder engagement and proposed outreach aligned with the Allowable Activities in Section A.9.d. in a narrative format and include the following requirements:

• Comprehensive Engagement and Retention Strategy (16 points) o Thorough description of how the proposed outreach efforts, curriculum implementation and professional development will meet the needs of K-12 educators and students and support the achievement of the proposed outreach and cybersecurity education related outputs/outcomes. (2 points) o Thorough description of the engagement efforts used to maximize the number of educators and students using the cyber-integrated curriculum and professional development courses/workshops. (2 points) o Thorough description of the feedback and assessment processes used to determine the needs and satisfaction of those who utilize the cyber-integrated curriculum and professional development courses/workshops. (2 points) o Thorough and convincing description of how the proposed outreach, professional development and curriculum are appropriate for the target communities to be served, as described in Section C.2. Applicant Eligibility Criteria, and how the strategies will address skills, training gaps, and other needs of participants identified. (2 points) o Clear description of how feedback and output measures can be collected. (2 points) o Outline any anticipated challenges to conducting outreach and developing and implementing cybersecurity curriculum and professional development including proposed resolutions to ensure effective delivery and continuity of the effort. (1 point) o Clear description of any additional measures (if identified) that support program success (cybersecurity curriculum, professional development, K-12 training, career strategies, and regional engagement). (1 point) o Clear description of how the proposal can generate best practices and lessons learned for other communities and school districts with similar needs. (2 points) o Detailed explanation of how the outreach efforts, cyber-integrated curriculum and professional development opportunities will be sustained beyond the federally funded performance period. (2 points)

• Professional Network (6 points) o A clear description of the applicant’s existing professional cybersecurity network, including the entity’s name and length of the working relationship. For full points, applicants must clearly demonstrate the active involvement of the required partnership with entities by including information on previous, existing or planned activities, any partnership agreements, organizational charters, memorandum of understanding (MOU), letter of intent (LOI), or other types of signed agreements or acknowledgements. (3 points) o Thorough description of how any partner organizations/affiliations identified in Sections C.3 Other Eligibility Criteria/Restrictions (Required Partners and Optional Affiliates) will support the proposed outreach efforts, curriculum implementation and professional development to ensure collaboration between all entities. (3 points)

• Cyber Security Curricular Model Design (20 points) o A clear description of the curriculum’s design, which must align with an adaptable cybersecurity curricular model for educators to use in K-

12. (2 points) o Clear description of how the curricula and training strategies will be updated over time as educators needs change. (2 points) o Clear description of how the proposed curricula will successfully promote cybersecurity trainings and employment opportunities to K- 12 educators and students, including through an online web presence.

(2 points) o A clear description of how the proposed curricular design will be used by K-12 educators to deliver cybersecurity training (covering both national and regional cybersecurity challenges) to students. (2 points) o Thorough explanation of innovative delivery (virtual-asynchronous or synchronous, in person or a hybrid combination of each) of education and training that reflects the use of current technology-enabled strategies and, where appropriate, leverages existing standards and assessments that have proven effectiveness. (2 points) o Clear description of the high-quality training strategies (computer-based and/or hands-on), including the number of courses, that will be used to serve K-12 students. (2 points) o Clear description of how students’ knowledge, skills, and abilities will be measured throughout the training, given the parameters of a virtual or hybrid in-person design. (2 points) o A clear description of how students will be introduced to cybersecurity career options and professionals. (2 points) o Thorough explanation of how the anticipated outputs are reasonable and appropriate numerical targets for the task specifically detailing how the targets were derived. (2 points) o A description of how the proposal will provide sharable versions of the Cybersecurity Curricular Model used for this program. (2 points)

• Professional Development (4 points) o Thorough description of how the program will meet the needs of

K-12 educators, administrators, counselors, caregivers and students using cyber-integrated Professional Development courses and workshops. (2 points) o Clear outline of the proposed Professional Development trainings and materials including format (virtual-synchronous and asynchronous, in person or a combination), target audience, and subject matter. (2 points)

6) Management Strategy (15 points)

Describe the organization’s ability to effectively comply with the requirements of the cooperative agreement and manage all aspects of the Federal Award in the following areas:

• Project Oversight (10 Points) o Qualifications and capabilities of the Program Manager(s) assigned to the activity/task. (1 point) o Qualifications and capabilities of the identified key personnel (at a minimum a Communications/Marketing Lead, a Curriculum Developer and a State/Regional Coordinator who will manage and/or implement the proposed program. (3 points) o The extent to which the Program Manager and identified key personnel have direct experience with management and oversight of Federally funded projects. (4 points) o The extent to which the applicant has experience overseeing and monitoring the progress of Federally funded projects. (2 points)

• Data Collection and Reporting Systems (3 Points) Comprehensive description of the existing or planned systems and processes that the applicant will use to provide timely and accurate performance reporting including the process for tracking participant-level data (related to curriculum and professional development participation, student demographics, and feedback captured), professional network/placement pipeline development and alignment of the training hub to the work roles outlined in the NICE Framework. (CISA encourages applicants to use existing systems).

• Financial Tracking and Reporting Systems (2 Points) Comprehensive description of the existing or planned accounting systems and processes that the applicant will use to monitor the financial status of the project relative to the implementation timeline and provide timely and accurate financial reports including an expense breakdown by program/activity/task/initiative in their quarterly report.

7) Work Plan (5 points) In conjunction with the program narrative, an applicant must use the Work Plan template found in Appendix A to outline the organizations strategy for achieving the objectives of the program over the five-year period of performance. The proposed efforts should directly relate to the Allowable Activities in Section A.9.d. and be supported by individual tasks that are necessary to complete those Activities as well as anticipated completion date and output targets. The table should include, at a minimum:

• the proposed task to accomplish the Allowable Activity (1 point)

• lead personnel responsible for completion of the task (program manager, project officer, communications director, etc.). If a subrecipient or contractor will be utilized to assist in accomplishing an activity/task, provide the name of the non-federal entity or company/individual (if known) (1 point)

• total budget (1 point)

• estimated completion date (1 point)

• anticipated output(s) (1…