CIS says SLCGP funds can cover MS-ISAC membership

The Center for Internet Security says state and local governments eligible for the State and Local Cybersecurity Grant Program can use those funds for MS-ISAC membership and related services. The move gives public agencies a clearer route to bolster cyber defenses as threats rise and budgets stay tight.

Why it matters: - State, local, tribal and territorial governments now have a clearer funding path to buy cybersecurity services through MS-ISAC. - The clarification could help public agencies stretch limited budgets while adding threat information, support and other defenses. - CIS says the change is especially relevant as cyber threats escalate and public-sector budgets remain constrained.

What happened: - The Center for Internet Security announced that organizations eligible for the State and Local Cybersecurity Grant Program can apply those funds to MS-ISAC membership. - Eligible organizations can also use SLCGP funds for additional MS-ISAC products and services. - The announcement was made Oct. 15, 2026, from Clifton Park, New York. - CIS said the funding path applies to state and local government organizations serving SLTT governments.

The details: - MS-ISAC membership gives access to cybersecurity capabilities through a community built for state and local government organizations, K-12 schools, public utilities and public safety organizations. - Carlos Kizzee, senior vice president of MS-ISAC Strategy and Plans, said a single membership can provide services, threat information and expert support that might otherwise require multiple commercial contracts. - CIS is developing resources to help grant recipients understand eligibility requirements, procurement considerations and implementation options. - The forthcoming guidance is designed to help organizations align cybersecurity priorities with available grant funding. - CIS says the guidance will also help accelerate adoption of cybersecurity capabilities. - FEMA Information Bulletin 588 contains the revised SLCGP guidance.

Between the lines: - The clarification reduces one of the common barriers to public-sector cyber upgrades: uncertainty about whether grant dollars can be used for ongoing services. - MS-ISAC’s value proposition is not just technical support. It is also procurement simplicity for agencies that may not have large in-house security teams. - The timing suggests CIS sees an opening to convert grant eligibility into wider adoption across budget-strapped governments.

What's next: - CIS plans to publish more guidance for organizations that want to use SLCGP money for MS-ISAC membership and services. - Grant recipients will need to map eligibility, procurement and implementation details into their cybersecurity plans. - Governments interested in the program can review FEMA Information Bulletin 588 and learn more about MS-ISAC membership through CIS.

The bottom line: - CIS is turning a grant-program clarification into a practical path for governments to buy shared cybersecurity services and strengthen defenses without adding as many separate vendor contracts.