Fiscal Year 2025 State and Local Cybersecurity Grant Program

Closed Posted

Opportunity number
DHS-25-GPD-137-00-99
Agency
Applications due
Award size
$255,679 to $4,174,163

Opportunity facts

Funding instrument
Grant
Category
  • Other
Eligible applicants
  • State Governments
Points of contact
Full announcement

Opportunity details come from Grants.gov. Updated .

About this opportunity

The Federal Emergency Management Agency (FEMA) is seeking applications for the Fiscal Year 2025 State and Local Cybersecurity Grant Program (SLCGP), designed to assist state and local governments in managing and reducing systemic cyber risks. The grant requires applicants to develop a Cybersecurity Plan and establish a Cybersecurity Planning Committee, with projects focused on four key objectives: developing governance structures, understanding current cybersecurity posture, implementing security protections, and ensuring personnel cybersecurity training. Eligible applicants include all 50 states, the District of Columbia, Puerto Rico, and U.S. territories, with the Governor-designated State Administrative Agency (SAA) as the primary applicant. Evaluation will be based on alignment with the 16 required cybersecurity elements and the ability to address existing cybersecurity gaps and risks. The application period runs from August 1 to August 15, 2025, with an anticipated award date of September 9, 2025.

The total funding available is $91,750,000, with 56 anticipated awards ranging from $255,679 to $4,174,163 per recipient. Recipients must pass through at least 80% of federal funds to local governments, with 25% specifically allocated to rural areas, and are required to provide a non-federal cost share of 40% for single-entity projects (30% for multi-entity projects). The performance period spans from September 1, 2025, to August 31, 2029, providing a four-year window for implementing cybersecurity improvements. Projects can include activities such as vulnerability scanning, risk assessments, multi-factor authentication implementation, and cybersecurity awareness training. Up to 5% of the federal award can be retained for management and administrative purposes.

Synopsis

The Homeland Security Act of 2002, as amended by the Infrastructure Investment and Jobs Act (IIJA) , requires SLCGP grant recipients to develop a Cybersecurity Plan, establish a Cybersecurity Planning Committee to support development of the plan, and identify projects to implement using SLCGP funding. The goal of the SLCGP is to assist SLT governments with managing and reducing systemic cyber risk. This goal can be achieved over the course of the four years of SLCGP funding as applicants focus their Cybersecurity Plans, priorities, projects, and implementation toward addressing SLCGP objectives. FY 2025 is the final year of funding.

Applicants are required to submit applications that address at least one of the following program objectives in their applications:

• Objective 1: Develop and establish appropriate governance structures, including by developing, implementing, or revising Cybersecurity Plans, to improve capabilities to respond to cybersecurity incidents and ensure continuity of operations.

• Objective 2: Understand their current cybersecurity posture and areas for improvement based on continuous testing, evaluation, and structured assessments.

• Objective 3: Implement security protections commensurate with risk.

• Objective 4: Ensure organization personnel are appropriately trained in cybersecurity, commensurate with responsibility.


Applicants can submit applications for this funding opportunity through FEMA Grants Outcomes (GO). Access the system at https://go.fema.gov/

Files

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar grant opportunities
  • Ask GovTribe AI about this opportunity