S. 2520Senate117th Congress (2021-2023)Enacted

State and Local Government Cybersecurity Act of 2021

Introduced July 28, 2021

AI-Generated Summary

Updated February 8, 2026 at 5:47 AM UTC

The State and Local Government Cybersecurity Act of 2021 amends the Homeland Security Act to expand the Department of Homeland Security’s role in helping state, local, tribal, and territorial governments (called SLTT entities) improve their cybersecurity. It directs DHS to provide training, exercises, real‑time threat sharing, technical assistance, and resources—including support for election officials—and requires periodic reporting to Congress.

Key Provisions

  • Adds a definition of “SLTT entity” to cover state, local, tribal, territorial governments and their subdivisions.
  • Requires the DHS Center to coordinate cybersecurity efforts with SLTT entities, including conducting joint exercises and providing operational and technical training.
  • Mandates real‑time sharing of cyber threat indicators, defensive measures, risk information, and incident details between SLTT entities and the federal government.
  • Obligates DHS to issue notifications about specific incidents and malware that could affect SLTT entities and their residents.
  • Provides an easily accessible platform for SLTT entities to obtain tools, products, policies, guidelines, and best‑practice resources related to information security.
  • Calls for collaboration with senior SLTT officials, including chief information officers and election officials, to implement security tools and procedures for their systems.
  • Requires DHS to assist SLTT entities in developing vulnerability‑disclosure policies and to promote cybersecurity education and awareness.
  • Sets a reporting schedule: the Secretary must report to the Senate and House Homeland Security committees within one year of enactment and every two years thereafter on the services provided to SLTT entities.

Legislative Activity

Stay on top of the latest movement without scrolling through every action

22 earlier actions
Became Law Latest Action

Became Public Law No: 117-150.

June 21, 2022

View full timeline
SenateIntro Referral

Introduced in Senate

July 28, 2021

SenateIntro Referral

Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

July 28, 2021

SenateCommittee

Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.

August 4, 2021

SenateCommittee

Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-42.

October 21, 2021

SenateCalendars

Placed on Senate Legislative Calendar under General Orders. Calendar No. 152.

October 21, 2021

SenateFloor

Measure laid before Senate by unanimous consent. (consideration: CR S161-162)

January 11, 2022

SenateFloor

The committee substitute withdrawn by Unanimous Consent.

January 11, 2022

SenateFloor

Passed Senate with an amendment by Unanimous Consent. (text: CR S162)

January 11, 2022

SenateFloor

Message on Senate action sent to the House.

January 13, 2022

HouseFloor

Received in the House.

January 13, 2022 • 12:22 PM

HouseFloor

Held at the desk.

January 13, 2022 • 12:25 PM

HouseIntro Referral

Referred to the House Committee on Homeland Security.

January 18, 2022

HouseFloor

Mr. Malinowski moved to suspend the rules and pass the bill.

May 16, 2022 • 2:26 PM

HouseFloor

Considered under suspension of the rules. (consideration: CR H4978-4979)

May 16, 2022 • 2:26 PM

HouseFloor

DEBATE - The House proceeded with forty minutes of debate on S. 2520.

May 16, 2022 • 2:26 PM

HouseFloor

At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.

May 16, 2022 • 2:33 PM

HouseFloor

Considered as unfinished business. (consideration: CR H5076)

May 17, 2022 • 6:35 PM

SenateFloor

Passed/agreed to in House: On motion to suspend the rules and pass the bill Agreed to by the Yeas and Nays: (2/3 required): 404 - 14 (Roll no. 194).

May 17, 2022 • 6:46 PM

HouseFloor

On motion to suspend the rules and pass the bill Agreed to by the Yeas and Nays: (2/3 required): 404 - 14 (Roll no. 194). (text: 05/16/2022 CR H4978)

May 17, 2022 • 6:46 PM

HouseFloor

Motion to reconsider laid on the table Agreed to without objection.

May 17, 2022 • 6:46 PM

President

Presented to President.

June 9, 2022

Became Law

Signed by President.

June 21, 2022

Became Law

Became Public Law No: 117-150.

June 21, 2022

Floor Debate

4 members

What members said about S. 2520 on the floor

2 Republicans2 Democrats
Tom Malinowski
Rep. Tom MalinowskiD-NJ-7 · May 16, 2022

Mr. Speaker, I move to suspend the rules and pass the bill (S. 2520) to amend the Homeland Security Act of 2002 to provide for engagements with State, local, Tribal, and territorial governments, and…

Jake LaTurner
Rep. Jake LaTurnerR-KS-2 · May 16, 2022

Mr. Speaker, I yield myself such time as I may consume. Mr. Speaker, I rise today in support of S. 2520, the State and Local Government Cybersecurity Act of 2021. Today, State and local governments…

Charles E. Schumer
Sen. Charles E. SchumerD-NY · Jan 11, 2022

Madam President, I ask unanimous consent that the Senate proceed to the immediate consideration of Calendar No. 152, S. 2520. I ask unanimous consent that the committee-reported substitute amendment…

Dan Bishop
Rep. Dan BishopR-NC-9 · May 16, 2022

Mr. Speaker, on that I demand the yeas and nays.

Bill Text

6 versions available

Reading Mode
Latest
Enrolled BillPublication date not provided

One Hundred Seventeenth Congress of the United States of America

2d Session

Begun and held at the City of Washington on Monday, the third day of January, two thousand and twenty two

S. 2520

AN ACT

To amend the Homeland Security Act of 2002 to provide for engagements with State, local, Tribal, and territorial governments, and for other purposes.

1.

Short title

This Act may be cited as the State and Local Government Cybersecurity Act of 2021.

2.

Amendments to the Homeland Security Act of 2002

Subtitle A of title XXII of the Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) is amended—

(1)

in section 2201 (6 U.S.C. 651), by adding at the end the following:

(7)

SLTT entity

The term SLTT entity means a domestic government entity that is a State government, local government, Tribal government, territorial government, or any subdivision thereof.

; and

(2)

in section 2209 (6 U.S.C. 659)—

(A)

in subsection (c)(6), by inserting operational and before timely;

(B)

in subsection (d)(1)(E), by inserting , including an entity that collaborates with election officials, after governments; and

(C)

by adding at the end the following:

(p)

Coordination on cybersecurity for SLTT entities

(1)

Coordination

The Center shall, upon request and to the extent practicable, and in coordination as appropriate with Federal and non-Federal entities, such as the Multi-State Information Sharing and Analysis Center—

(A)

conduct exercises with SLTT entities;

(B)

provide operational and technical cybersecurity training to SLTT entities to address cybersecurity risks or incidents, with or without reimbursement, related to—

(i)

cyber threat indicators;

(ii)

defensive measures;

(iii)

cybersecurity risks;

(iv)

vulnerabilities; and

(v)

incident response and management;

(C)

in order to increase situational awareness and help prevent incidents, assist SLTT entities in sharing, in real time, with the Federal Government as well as among SLTT entities, actionable—


(i)

cyber threat indicators;

(ii)

defensive measures;

(iii)

information about cybersecurity risks; and

(iv)

information about incidents;

(D)

provide SLTT entities notifications containing specific incident and malware information that may affect them or their residents;

(E)

provide to, and periodically update, SLTT entities via an easily accessible platform and other means—

(i)

information about tools;

(ii)

information about products;

(iii)

resources;

(iv)

policies;

(v)

guidelines;

(vi)

controls; and

(vii)

other cybersecurity standards and best practices and procedures related to information security, including, as appropriate, information produced by other Federal agencies;

(F)

work with senior SLTT entity officials, including chief information officers and senior election officials and through national associations, to coordinate the effective implementation by SLTT entities of tools, products, resources, policies, guidelines, controls, and procedures related to information security to secure the information systems, including election systems, of SLTT entities;

(G)

provide operational and technical assistance to SLTT entities to implement tools, products, resources, policies, guidelines, controls, and procedures on information security;

(H)

assist SLTT entities in developing policies and procedures for coordinating vulnerability disclosures consistent with international and national standards in the information technology industry; and

(I)

promote cybersecurity education and awareness through engagements with Federal agencies and non-Federal entities.

(q)

Report

Not later than 1 year after the date of enactment of this subsection, and every 2 years thereafter, the Secretary shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland


Security of the House of Representatives a report on the services and capabilities that the Agency directly and indirectly provides to SLTT entities.

.

Speaker of the House of Representatives

Vice President of the United States and President of the Senate