State, Local, Tribal and Territorial Security Operations Center/Information Sharing and Analysis Center

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) funds Cooperative Agreements under CFDA 97.123 to establish and operate Security Operations Centers and Information Sharing and Analysis Centers serving state, local, tribal, and territorial (SLTT) governments, with the most recent award disbursed on September 30, 2023.

The program funds the design, operation, and enhancement of 24/7 cyber threat information sharing infrastructure and managed security services for the SLTT sector and election subsector. Recent awards support automated bidirectional threat intelligence exchange platforms, cyber managed services including endpoint detection and response, malicious domain blocking, incident response, and cyber awareness training. Recipients operate centralized SOCs and ISACs that foster relationships among critical infrastructure cyber owners and coordinators across SLTT jurisdictions, facilitate integration with federal partners including law enforcement and intelligence agencies, and enable rapid response to cyber threats and incidents.

Three Cooperative Agreements have been awarded since 2010, totaling $249.8 million in combined federal obligations and $296.9 million in total obligated dollars (including non-federal match). CISA accounts for two awards worth $168 million federal dollars, while the Department of Homeland Security proper accounts for one award of $81.7 million federal dollars. Award magnitudes run substantial: the most recent award (2023) obligated $84.6 million, the prior award (2019) obligated $130.6 million, and the earliest award (2010) obligated $81.7 million. Awards are infrequent—one per year in 2010, 2019, and 2023—suggesting a multi-year performance cycle with periodic re-competitions or continuations.

The most recent posted opportunity (DHS-23-CISA-123-ISAC000001, due August 1, 2023) solicited Cooperative Agreements from for-profit and nonprofit organizations, including small businesses and 501(c)(3) entities, to accelerate automated cyber threat information sharing capacity and expand managed security services across the SLTT and elections environment. No currently open opportunities are reported in the source; the most recent solicitation closed in August 2023. Prior opportunities posted in May 2020 and August 2019 also sought Cooperative Agreements with eligibility limited to 501(c)(3) nonprofits or expanded to nonprofits, for-profits, and small businesses.