The goal of TCGP is to assist tribal governments with managing and reducing systemic cyber risk.
Accomplishment of this goal can be achieved by implementing or revising Cybersecurity Plans, priorities, projects and addressing TCGP objectives.
Tribal applicants must address how the following
credit:
program objective will be met in their applications for FY 2023:
Objective 1:
Develop and establish appropriate governance structures, including by implementing or revising Cybersecurity Plans, to improve capabilities to respond to cybersecurity incidents and ensure continuity of operations.
In addition to Objective 1, the following objectives are eligible, but not required, for FY 2023 applications:
Objective 2:
Understand their current cybersecurity posture and areas for improvement based on continuous testing, evaluation, and structured assessments.
Objective 3:
Implement security protections commensurate with risk.
Objective 4:
Ensure organization personnel are appropriately trained in cybersecurity, commensurate with responsibility.The Homeland Security Act of 2002, as amended by the BIL, requires TCGP grant recipients to develop a Cybersecurity Plan, establish a Cybersecurity Planning Committee to support development of the Cybersecurity Plan, and identify projects to implement using TCGP funding.
To support these efforts, recipients must prioritize the following activities using 2023 TCGP funds, all of which are statutorily required as a condition of receiving a grant:
1. Establish a Cybersecurity Planning Committee*; andImplement or revise a Cybersecurity Plan, unless the recipient already has a Cybersecurity Plan and plans to revise it