National Cyber Security Awareness | DHS 19 CISA 128 SLT 002

Opportunity Information: Apply for DHS 19 CISA 128 SLT 002

The National Cyber Security Awareness grant opportunity (Funding Opportunity Number DHS 19 CISA 128 SLT 002) is a Department of Homeland Security cooperative agreement aimed at building and testing a more uniform, nationwide way for state, local, tribal, and territorial (SLTT) governments to report cyber incidents and share threat information. At its core, the program is designed to strengthen how SLTT entities respond to cyber events by creating a standardized reporting structure and a consistent mechanism for getting incidents routed to the right partners, including a clear connection to law enforcement. In practical terms, the opportunity focuses on taking the kind of simple, familiar model people associate with calling "911" and exploring how a similar concept or infrastructure could be adapted into a prototype cyber incident reporting network that works across jurisdictions.

A major part of the work involves designing the framework for a national-level cyber incident reporting program. This includes developing detailed documentation that spells out how the system should function and how it should be operated day to day. Expected deliverables include design documentation, policies and procedures, a concept of operations (ConOps), and one or more operations manuals. The documentation is also expected to define the scope of the program, meaning applicants would need to clarify what types of cyber incidents the reporting network would cover, how incidents would be categorized, what information would be collected, and how reports would be handled, escalated, and shared in a responsible way.

The opportunity is not limited to planning on paper; it specifically calls for piloting the proposed reporting structure with a select number of SLTT participants. That pilot component is meant to test whether the reporting approach is workable in real-world conditions, how well it supports incident response, and whether it improves consistency in how incidents are captured and communicated. The pilot is also a way to identify operational challenges early, such as differences in SLTT capabilities, staffing constraints, data handling requirements, coordination with law enforcement, and the practical realities of integrating with existing cybersecurity and emergency management processes.

Another key emphasis is victim support and resource coordination. The cooperative agreement includes a feasibility study on whether it is realistic to build and maintain a national list of cybersecurity resources that can be offered to victims, organized in a way that is actually usable during an incident. The idea is to explore a standardized inventory of resources based on factors like geographic location and incident type so that SLTT entities can quickly identify what help is available, where, and for whom. This could include technical assistance options, recovery services, reporting and investigative contacts, and other forms of support that victims typically need when responding to ransomware, network intrusions, data breaches, or other cyber events.

The program also requires a broader feasibility assessment about standing up a full national-level capability beyond the pilot. That means examining what it would take to scale the prototype into something sustainable, including staffing, funding, governance, data standards, legal and privacy considerations, technology requirements, and long-term operational ownership. Finally, the awardee is expected to document lessons learned and levels of effort, capturing what worked, what did not, and what resources were required to carry out the pilot and associated studies. This documentation is intended to inform future decisions about whether and how DHS and partners could implement a nationwide cyber incident reporting and threat information sharing program.

From the published opportunity details, this is a discretionary cooperative agreement under the Science and Technology and other Research and Development category (CFDA 97.128). The eligible applicants listed include for-profit organizations other than small businesses. The opportunity was created on August 12, 2019, with an original closing date of August 28, 2019. The award ceiling was $1,000,000, and the posting anticipated up to 20 awards.

• The Department of Homeland Security, Office of Procurement Operations - Grants Division in the science and technology and other research and development sector is offering a public funding opportunity titled "National Cyber Security Awareness" and is now available to receive applicants.
• Interested and eligible applicants and submit their applications by referencing the CFDA number(s): 97.128.
• This funding opportunity was created on Aug 12, 2019.
• Applicants must submit their applications by Aug 28, 2019. (Agency may still review applications by suitable applicants for the remaining/unused allocated funding in 2026.)
• Each selected applicant is eligible to receive up to $1,000,000.00 in funding.
• The number of recipients for this funding is limited to 20 candidate(s).
• Eligible applicants include: For profit organizations other than small businesses.

Apply for DHS 19 CISA 128 SLT 002

[Watch] Creating a grant proposal using the step-by-step wizard inside the applicant portal: