Guaranteeing Universal Access to Cybersecurity Act

Key Points

• The bill restores federal funding for the Multi-State Information Sharing and Analysis Center (MS-ISAC), which provides cybersecurity services to state, local, tribal, and territorial (SLTT) governments. It appropriates $50 million per year starting in fiscal year 2027, with the money available until spent.
• The bill requires CISA to enter a cooperative agreement with MS-ISAC to provide free membership and core cybersecurity services to all state and local governments that apply. This includes cyber threat intelligence, real-time indicator feeds, and incident response support at no cost.
• The legislation specifically targets outreach to under-resourced local governments that lack dedicated cybersecurity staff, operate on limited budgets, or have been identified as covered critical infrastructure entities.
• Within 60 days of enactment, CISA must develop a plan to re-enroll local governments that dropped out of MS-ISAC after it moved to a fee-based model, retain current members, and recruit new ones facing elevated cyber risk. A progress report is due to Congress within one year.