City of Sacramento
City Council - 5PM Report
915 I Street Sacramento, CA 95814
www.cityofsacramento.org
File ID: 2025-00752 3/25/2025 Consent Item 15.
Agreement: Accept a State & Local Cybersecurity Grant Award File ID: 2025-00752
Location: Citywide
Recommendation: Adopt a Resolution authorizing the Interim City Manager or designee to: 1) accept the State & Local Cybersecurity Grant Program for an amount of $250,000 from the California Office Emergency Services (Cal OES) to develop and expand cybersecurity framework, strategic and planning; 2) execute the required documents necessary to accept the State & Local Cybersecurity Grant Program from the Cal OES; and 3) establish an operating grant G07000300 (Cybersecurity Grant Program), Fund 2702 (Operating Grants) including revenue and expenditure budgets in the amount of $250,000.
Contact: Darin Arcolino, Chief Information Officer, (916) 808-0403, [email protected]; Manuel Martinez, IT Manager, (916) 808-8785, [email protected]; Paolo Tandoc, IT Supervisor, (916) 808-7796, [email protected]; Cassy Vaioleti, Program Specialist, (916) 808-8047, [email protected], Information Technology Department Presenter: None
Attachments:
1-Description/Analysis
2-Resolution
3-Award Letter
Description/Analysis
Issue Detail: In 2021, Congress established the State and Local Cybersecurity Improvement Act through the Infrastructure Investment and Jobs Act (IIJA), which established the State and Local Cybersecurity Grant Program (SLCGP), appropriating $1 billion nationwide to be awarded over four years. In FY 2022, $183.5 million was made available nationwide under the SLCGP, with varying funding amounts allocated over four years from IIJA. The grant program is jointly administered by the Federal Emergency Management Agency (FEMA) and the federal Cybersecurity and Infrastructure Security Agency (CISA).
File ID: 2025-00752 3/25/2025 Consent Item 15.
The California Office of Emergency Services (Cal OES) was selected as the State Administrative Agency to administer the funds pursuant to California’s SLCGP allocation. The IIJA required the funds to be allocated according to a state cybersecurity plan developed by a cybersecurity planning committee. In late 2022, the California Cybersecurity Integration Center (Cal-CSIC) formed a subcommittee of the California Cybersecurity Task Force called the Cybersecurity Investment Planning Subcommittee for this purpose (CCTF-CIPS). Cal OES built the California Cybersecurity Task Force (CCTF) to be the preeminent cybersecurity advisory body for California. The subcommittees are comprised of subject matter experts and executive representatives from Federal, State, local, and tribal government, private industry, academia, and law enforcement in California.
California’s Cybersecurity Plan was approved by FEMA and CISA at the end of September 2023; disbursement of SLCGP funds was awaiting approval of individual projects named in the plan, and funds will be released to California per-project as those projects are approved by FEMA and CISA.
State-level projects identified in the Cybersecurity Plan encompass all sub-recipient applications that will subsequently align to those.
An announcement came from CalOES on July 31, 2024, that the SLCGP application window was open for State and Local entities in California. The deadline for application submission was Friday, Sep. 27th, 2024. The City of Sacramento submitted its application during this open period and subsequently on December 24, 2024, Cal OES Grants Management awarded the grant of $250,000 to the City of Sacramento. This subaward is subject to requirements in Title 2 Code of Federal Regulations, Part 200, including the Notice of Funding Opportunity (NOFO), the Preparedness Grants Manual, the California Supplement to the NOFO, reporting requirements, all policies and provisions set forth in the FY 2024 SL CFO, and all applicable federal, state, and local requirements.
All activities funded with this subaward must be completed within the subaward period of performance. Any funds received in excess of current needs, approved amounts, or those found owed as a result of a final review or audit, must be refunded to Cal OES.
The City of Sacramento’s cybersecurity training program for all City staff has been successful, but the rapid evolution of technology and cyber threats necessitates continuous updates. This grant funding provided a timely opportunity to revamp and enhance the City of Sacramento’s training initiatives to ensure all City employees receive the cybersecurity training they need to understand their role in securing the City’s networks and infrastructure.
Policy Considerations: This initiative aligns with the Information Technology Department’s Digital Strategy Update 2024-2025 document that includes cybersecurity strategic planning.
Economic Impacts: Investment in cybersecurity planning will strategically prepare the City for security data, ongoing adaptation to economic challenges and development.
Environmental Considerations: The report does not constitute a “project” as the activity will have
File ID: 2025-00752 3/25/2025 Consent Item 15.
no significant effect on the environment and is a continuing administrative activity. It is therefore exempt from the California Environmental Quality Act (CEQA) (CEQA Guidelines Sections 15061(b) (3);15378(b)(2)).
Sustainability: Not applicable.
Commission/Committee Action: Not applicable.
Rationale for Recommendation: City Council approval is required to receive the grant funds.
Modernizing the City staff’s cybersecurity training program, ensures that its workforce remains well- prepared and resilient against the ever-changing cyber threat landscape. This enhanced training will equip our employees with relevant, actionable knowledge, enabling them to better protect our critical infrastructure and sensitive data. The investment in our cybersecurity training will not only strengthen our current defenses but also build a foundation for ongoing adaptation to future challenges.
Financial Considerations: Not applicable. No City funding will be required. The Interim City Manager or designee is authorized to increase the revenue and expense budgets in the G07000300 (Cybersecurity Grant Program), Fund 2702 (Operating Grants) including revenue and expenditure budgets in the amount of $250,000.
Local Business Enterprise (LBE): Not applicable.
RESOLUTION NO. 2025-
Adopted by the Sacramento City Council
State & Local Cybersecurity Grant
Date: _____________________
BACKGROUND
A. In 2021, Congress established the State and Local Cybersecurity Improvement Act through the Infrastructure Investment and Jobs Act (IIJA), which established the State and Local Cybersecurity Grant Program (SLCGP), appropriating $1 billion nationwide to be awarded over four years. In FY 2022, $183.5 million was made available nationwide under the SLCGP, with varying funding amounts allocated over four years from IIJA. The grant program is jointly administered by the Federal Emergency Management Agency (FEMA) and the federal Cybersecurity and Infrastructure Security Agency (CISA).
B. California’s Cybersecurity Plan was approved by FEMA and CISA at the end of September 2023; disbursement of SLCGP funds was awaiting approval of individual projects named in the plan, and funds will be released to California per- project as those projects are approved by FEMA and CISA. State-level projects identified in the Cybersecurity Plan encompass all sub-recipient applications that will subsequently align to those.
C. December 24, 2024, Cal OES Grants Management awarded the grant of $250,000 to the City of Sacramento.
BASED ON THE FACTS SET FORTH IN THE BACKGROUND AND STAFF REPORT, THE CITY COUNCIL RESOLVES AS FOLLOWS:
Section 1. The Interim City Manager or designee is authorized to accept the State & Local Cybersecurity Grant for an amount of $250,000 from Cal OES to develop and expand the cybersecurity framework, strategic planning for the City.
Section 2. The Interim City Manager or designee is authorized to establish an operating grant G07000300 (Cybersecurity Grant Program) revenue and expenditure budget, Fund 2702 (Operating Grants) in the amount of $250,000.
Section 3. The Interim City Manager or designee is authorized to execute the required documents necessary to accept the State & Local Cybersecurity Grant, subject to the City Attorney’s approval as to form.
GAVIN NEWSOM
GOVERNOR
N
ANCY WARD
DIRECTOR
3650 SCHRIEVER AVENUE, MATHER, CA 95655
(916) 845-8506 TELEPHONE (916) 845-8511 FAX
www.CalOES.ca.gov
December 24, 2024
DELIVERED VIA EMAIL: [email protected]
Darin Arcolino
Chief Information Officer
City of Sacramento
915 I Street, Room 3000
Sacramento, CA 95814
SUBJECT: NOTIFICATION OF SUBRECIPIENT ALLOCATION
Fiscal Year (FY) 2024 State & Local Cybersecurity Grants for Local & Tribal Governments (SL) Program
Grant Subaward Performance Period: December 1, 2024, to December 31, 2026
Dear Darin Arcolino:
We are pleased to announce that your proposal has been selected to receive funding through the FY 2024 SL Program of the California Governor’s Office of Emergency Services (Cal OES). As outlined in the SL Program Competitive Funding Opportunity (CFO) section E,
3. Notification Process, Applicants not selected for funding may appeal Cal OES’s decision pursuant to the Cal OES Appeal Guidelines for Competitive Funding. If any appeal is successful, this may affect your requested funding amount. Provided there are no successful appeals, your organization will be awarded the amount of $250,000.
This subaward is subject to requirements in Title 2 Code of Federal Regulations, Part 200, including the Notice of Funding Opportunity (NOFO), the Preparedness Grants Manual, the California Supplement to the NOFO, reporting requirements, all policies and provisions set forth in the FY 2024 SL CFO, and all applicable federal, state, and local requirements. All activities funded with this subaward must be completed within the subaward period of performance. Any funds received in excess of current needs, approved amounts, or those found owed as a result of a final review or audit, must be refunded to Cal OES.
Subrecipients must obtain written approval prior to incurring costs for activities such as aviation, watercraft, allowability request logs, noncompetitive procurement, City of Sacramento
December 24, 2024
__________________________________ __________________ Darin Arcolino Date
City of Sacramento
and projects requiring Environmental Planning and Historic Preservation review.
Your organization will be required to prepare and submit performance reports annually for the duration of the subaward period of performance or until all activities are completed and the subaward is formally closed. Failure to submit required reports could result in subaward reduction, suspension, or termination. Throughout the subaward cycle, project status and milestones from the performance reports will be used as indicators of project feasibility, performance, and grant management capacity. This information may also be used in assessing proposals for future grant opportunities.
Next Steps:
Your signature is required on this letter. Please sign and return this letter via email to your Cal OES Grants Analyst (GA) within 20 calendar days of receipt and keep a copy for your records.
If you have not already, please visit the Grants Central System (GCS) webpage to register your organization.
You will be notified to complete your application as soon as it is available in GCS – we anticipate mid-January 2025.
Once the completed application is submitted and approved in GCS, you will be able to request reimbursement of eligible subaward expenditures in the system.
Please contact your GA if you have questions or need further assistance.
Sincerely,
NANCY WARD
Director
12/26/2024