Review - S 2520 Introduced - State and Local Government Cybersecurity

Last week, Sen Peters (D,MI) introduced S 2520, the State and Local Government Cybersecurity Act of 2021. The bill would add additional responsibilities for CISA with regards to State and local governments. It would also provide additional coordination responsibilities for CISA’s National Cybersecurity and Communications Integration Center (NCCIC). No additional funding is authorized to support these additional responsibilities.

As I mentioned yesterday, this bill will be taken up tomorrow by the Senate Homeland Security and Governmental Affairs Committee in a markup hearing. It is hard to predict whether amendments will be considered, but I do expect to see bipartisan support for the bill. I do not, however, see this bill making its way to the floor of the Senate for consideration. There is not enough legislative meat here for the bill to take up the time to be considered under regular order. There is, however, still time to see this bill added as an amendment to HR 3684 before the final vote later this week.

For a more detailed analysis of the changes that would be made by this bill, including my suggestions for definitional changes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/s-2520-introduced - subscription required.