Guaranteeing Universal Access to Cybersecurity Act

Free cybersecurity help for local governments

This bill would require the CISA Director to make a cooperative agreement with the MS-ISAC operator. The MS-ISAC operator would have to offer no-cost membership and core cybersecurity services to any SLTT applicant. Core services include threat intelligence products, real-time indicator feeds, and incident response support. The agreement would prioritize outreach to SLTT entities without cybersecurity staff, with limited budgets, or covered under 6 U.S.C. 681. The Director and operator would have 60 days after enactment to implement a plan to restore and expand participation. The Director would report to Congress within one year on re-enrollments, new members, and barriers to participation. The MS-ISAC operator would submit annual reports to CISA and Congress about membership, threats, incidents, and outreach effectiveness. The bill would appropriate $50 million for fiscal year 2027 and each fiscal year after, available until spent.