State Local Tribal and Territorial (SLTT) Reporting and Threat Information Sharing Pilot | DHS 20 CISA 128 SLT002

Opportunity Information: Apply for DHS 20 CISA 128 SLT002

The State, Local, Tribal, and Territorial (SLTT) Reporting and Threat Information Sharing Pilot is a Department of Homeland Security (DHS) cooperative agreement, administered through CISA, aimed at improving how SLTT governments report cyber incidents and share threat information. Rather than launching a brand-new competition, this notice extends the period of performance for a previously selected recipient under the earlier award (DHS-19-CISA-128-SLT002). The central idea is to strengthen nationwide SLTT cyber incident response by creating a more consistent, standardized way to report incidents and by exploring how to connect those reports to actionable support and law enforcement pathways.

A major focus of the project is designing and prototyping a cyber incident reporting network that can operate at a national level while still serving SLTT needs. The opportunity specifically calls for leveraging "Nationwide 9-1-1" or similar infrastructure as a foundation, which signals an intent to adapt familiar, widely deployed public-safety reporting concepts to cyber incidents. Another key element is ensuring the reporting approach has a nexus to law enforcement, meaning the pilot should consider how cyber incident reports can be routed, handled, and potentially investigated in coordination with appropriate law enforcement partners, without implying that every incident automatically becomes a criminal case.

The work under the agreement is structured around several deliverables and learning goals. The recipient is expected to develop formal documentation for what could become a national cyber incident reporting program, including system design materials, policies and procedures, a concept of operations (CONOPS), and operations manual(s). These documents would define the scope of what types of cyber incidents the reporting program would cover, helping clarify what should be reported, how information should be categorized, and what minimum data elements are needed so reports are consistent and useful across jurisdictions.

The project also includes an operational pilot component, where the standardized reporting structure and mechanism are tested with a select number of SLTT entities. This real-world trial is intended to validate whether the proposed reporting model is workable for different types and sizes of governments and to identify practical barriers such as staffing, training, legal constraints, privacy considerations, technology integration challenges, and interoperability with existing SLTT reporting or IT service processes.

In addition to reporting standardization, the cooperative agreement emphasizes victim support through the concept of a national resource list. The recipient is tasked with studying the feasibility of building and maintaining a standardized, location- and incident-type-based catalog of cybersecurity resources that SLTT entities could provide to victims. In practical terms, this means exploring whether it is realistic to keep an up-to-date directory of assistance options (for example, incident response support, technical remediation resources, legal or regulatory guidance, and other services) that can be matched to where the victim is located and what kind of incident occurred.

Finally, the opportunity requires an assessment of the broader feasibility of scaling the pilot into a national-level program. This includes documenting lessons learned and the level of effort required, which helps DHS/CISA understand costs, staffing needs, governance models, and sustainability considerations before committing to a larger rollout. The notice identifies this as a discretionary cooperative agreement within a science and technology or other R&D category (CFDA 97.128), with an expected single award and an award ceiling of $625,000. The funding opportunity is listed as DHS 20 CISA 128 SLT002, created July 20, 2020, with an original closing date of August 10, 2020, and eligibility described as "Others" with additional details referenced in the full eligibility section.

• The Department of Homeland Security, Office of Procurement Operations - Grants Division in the science and technology and other research and development sector is offering a public funding opportunity titled "State Local Tribal and Territorial (SLTT) Reporting and Threat Information Sharing Pilot" and is now available to receive applicants.
• Interested and eligible applicants and submit their applications by referencing the CFDA number(s): 97.128.
• This funding opportunity was created on Jul 20, 2020.
• Applicants must submit their applications by Aug 10, 2020. (Agency may still review applications by suitable applicants for the remaining/unused allocated funding in 2026.)
• Each selected applicant is eligible to receive up to $625,000.00 in funding.
• The number of recipients for this funding is limited to 1 candidate(s).
• Eligible applicants include: Others (see text field entitled Additional Information on Eligibility for clarification).

Apply for DHS 20 CISA 128 SLT002

[Watch] Creating a grant proposal using the step-by-step wizard inside the applicant portal: