Washington finally set up the rules and money for state and local cybersecurity — now the real risk is waiting too long to actually use them.

CSO Online offers insights into cybersecurity, risk management, and IT leadership, providing articles, reports, and expert analysis to help security professionals navigate the evolving threat landscape and protect their organizations from cyber attacks. By exploring CSO Online's curated content, CISOs, security managers, and IT executives can learn about threat intelligence, security frameworks, and incident response strategies for building resilient cybersecurity programs. Whether you're defending against ransomware, phishing attacks, or insider threats, CSO Online offers resources to strengthen your security posture and safeguard your digital assets.

CSO Online

The March 2025 Executive Order and State and Local Cybersecurity Grant Program (SLCGP) provide a framework for state and local governments to address cybersecurity threats, with $1 billion authorized over four years and 80% passed through to local jurisdictions. The PILLAR Act seeks to extend SLCGP for 10 years and expand its scope to AI and operational technology. Despite a temporary funding pause, the program's January 30 authorization extension offers an opportunity to fully implement this critical infrastructure protection, especially given threats from state-sponsored actors like Salt Typhoon and AI-enabled attacks. States have already demonstrated effective use of initial grants, funding 839 cybersecurity projects across 33 states and territories.

Cybersecurity at the state and local level: Washington has the framework, it’s time to act