Insights Gleaned from the 2025 Cyber Defense Summit for Civil Protection
In the ever-evolving world of cybersecurity, state and local governments are grappling with the impact of reduced federal funding and the end of cooperative agreements with key organizations. This shift, under the Trump Administration, has put pressure on these entities, with about 80% of federal cybersecurity dollars traditionally flowing to local governments.
The State and Local Cybersecurity Grant Program (SLCGP) has been a crucial source of funding, but its final tranche might be the last, with little expectation of reauthorization or expansion under the current administration. This has left many local governments scrambling to fill the gaps, with some states, like Nevada, focusing on top-down cybersecurity strengthening through governors and state CIOs, emphasizing strategic investments and policies.
However, the lack of resources hampers immediate compensation for federal cutbacks. Counties, in particular, rely heavily on the services provided by the Multi-State Information Sharing and Analysis Center (MS-ISAC), which offers free or low-cost threat intelligence and monitoring. The end of federal support for MS-ISAC has left smaller and mid-sized counties worried about affording commercial cybersecurity tools.
Several state and local government associations have formally requested Congress to restore MS-ISAC funding, warning that its elimination would jeopardize the protection of critical infrastructure such as schools, hospitals, utilities, and law enforcement. Experts and officials caution that shifting cybersecurity responsibility to states without adequate resources risks leaving critical infrastructure vulnerable.
Private companies can play a greater role in cybersecurity by embracing secure-by-design principles. One such company, Signal, is committed to data minimization and upholding user privacy. Signal has implemented digital rights management technology to prevent AI-enabled features from taking screenshots and has introduced a username feature to decouple private communications from phone numbers.
The Environmental Protection Agency offers free cybersecurity assistance and assessments for water and wastewater utilities, demonstrating that private companies can contribute to the cybersecurity of essential public service providers that lack the budget to hire cybersecurity talent or purchase necessary tools.
The Cyber Civil Defense Summit 2026, with the theme "Collaborative Advantage: Uniting Forces to Achieve More," aims to bring together cyber civil defenders to explore how they can work together to continue advancing their vital work, with or without aid from the federal government. The Summit, which will have sponsorship opportunities available, will focus on addressing questions around the cybersecurity of essential public service providers and raising awareness about the free cybersecurity resources available to under-resourced public agencies.
References:
[1] CyberScoop. (2019, March 27). State and local governments brace for loss of federal cybersecurity funding. Retrieved from https://www.cyberscoop.com/state-local-governments-brace-for-loss-of-federal-cybersecurity-funding/
[2] Governing. (2019, March 28). Trump's Cybersecurity Cuts Put States and Cities in a Bind. Retrieved from https://www.governing.com/topics/public-justice/gov-trump-cybersecurity-cuts-states-cities-bind.html
[3] NPR. (2019, March 27). Trump's Cybersecurity Cuts Could Leave States And Cities Vulnerable. Retrieved from https://www.npr.org/2019/03/27/706431563/trumps-cybersecurity-cuts-could-leave-states-and-cities-vulnerable
[4] The Hill. (2019, March 27). Trump's cybersecurity cuts could leave states vulnerable. Retrieved from https://thehill.com/policy/cybersecurity/436575-trumps-cybersecurity-cuts-could-leave-states-vulnerable
[5] StateScoop. (2019, March 27). State and local gov leaders ask Congress to restore MS-ISAC funding. Retrieved from https://statescoop.com/state-and-local-gov-leaders-ask-congress-to-restore-ms-isac-funding/
- Local governments are under pressure due to reduced federal funding and the end of cooperative agreements, with little expectation of reauthorization or expansion in the current administration.
- The State and Local Cybersecurity Grant Program has been a significant source of funding, but its final tranche might be the last.
- Some states, like Nevada, are focusing on top-down cybersecurity strengthening through governors and state CIOs, emphasizing strategic investments and policies.
- Lack of resources hampers immediate compensation for federal cutbacks, with counties particularly relying on the services provided by the Multi-State Information Sharing and Analysis Center.
- The elimination of MS-ISAC funding risks jeopardizing the protection of critical infrastructure, including schools, hospitals, utilities, and law enforcement.
- Private companies can contribute to cybersecurity by implementing secure-by-design principles, such as Signal, which focuses on data minimization and user privacy.
- The Environmental Protection Agency provides free cybersecurity assistance and assessments for water and wastewater utilities, demonstrating the role of private companies in supporting essential public service providers.
- The Cyber Civil Defense Summit 2026 aims to bring together cyber civil defenders to explore collaboration, with a focus on the cybersecurity of essential public service providers and raising awareness about free cybersecurity resources available to under-resourced public agencies.
- Several state and local government associations have formally requested Congress to restore MS-ISAC funding, as the elimination of this service leaves smaller and mid-sized counties worried about affording commercial cybersecurity tools.
- Experts and officials warn that shifting cybersecurity responsibility to states without adequate resources risks leaving critical infrastructure vulnerable.
- The impacts of Trump's cybersecurity cuts have garnered attention in policy-and-legislation, politics, and general news outlets nationwide.