WASHINGTON, DC – Legislation authored by U.S. Senator Gary Peters (MI), Chairman of the Homeland Security and Governmental Affairs Committee, to promote stronger cybersecurity coordination between the Department of Homeland Security (DHS) and state and local governments has passed the Senate. The bipartisan State and Local Government Cybersecurity Act would encourage federal cybersecurity experts to share information regarding cybersecurity threats, vulnerabilities, and breaches, as well as resources to prevent and recover from cyber-attacks, with states and localities who are increasingly targeted by bad actors. The bill now heads to the House of Representatives for consideration.

“Cybercriminals continue attacking state, local, tribal, and territorial government networks. The federal government needs to step in and take action to help these local communities – which often lack the resources to defend themselves – to quickly identify threats and seal up vulnerabilities in their information technology systems,” said Senator Peters. “This bipartisan legislation will help local governments provide critical services to residents even in the event of a cyber-attack, and I’ll continue to fight for its swift passage into law.”

State and local governments increasingly find themselves targeted by high-profile cyber-attacks, costing taxpayers millions of dollars and threatening the data privacy of millions of Americans. A cyber-attack that hit the city of Tulsa in May exposed residents’ Social Security numbers. Last year, the city of Knoxville paid hackers to unlock city computer systems, and a ransomware attack cost the city of New Orleans millions of dollars. In 2019, the Board of Commissioners from Genesee County in Michigan reported similar attacks on their network, after hackers locked their system and demanded payment for its release.

The State and Local Government Cybersecurity Act would facilitate coordination between DHS and state and local governments in several key areas. The legislation would permit the National Cybersecurity and Communications Integration Center (NCCIC) to provide state and local actors with access to improved security tools, policies and procedures, while also encouraging collaboration for the effective implementation of those resources, including joint cybersecurity exercises. The legislation would also build on previous efforts by the Multi-State Information Sharing and Analysis Center (MS-ISAC) to prevent, protect, and respond to future cybersecurity incidents. These changes would also ensure that government officials and their staffs have access to the hardware and software products needed to bolster their cyber defenses.

As Chairman of the Homeland Security and Governmental Affairs Committee, Peters has led efforts to increase our nation’s cybersecurity defenses. His bill to enhance cybersecurity assistance to K-12 educational institutions across the country was signed into law. Peters secured several provisions in the bipartisan infrastructure law to bolster cybersecurity – including $1 billion to help state, local, tribal, and territorial governments deter attacks from malicious cyber actors and modernize systems to protect sensitive data, information, and public critical infrastructure. Peters’ bills to bolster federal cybersecurity and require critical infrastructure owners and operators to report to CISA if they experience a cyber-attack, and other organizations to notify the federal government if they make a ransom payment have advanced in the Senate.

###