{"id":194656,"date":"2026-03-10T19:19:00","date_gmt":"2026-03-10T23:19:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/10\/federal-cyber-strategy-holds-few-details-for-state-local-govt\/"},"modified":"2026-03-10T19:30:11","modified_gmt":"2026-03-10T23:30:11","slug":"federal-cyber-strategy-holds-few-details-for-state-local-govt","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/10\/federal-cyber-strategy-holds-few-details-for-state-local-govt\/","title":{"rendered":"Federal Cyber Strategy Holds Few Details for State, Local Govt."},"content":{"rendered":"

Federal Cyber Strategy Holds Few Details for State, Local Govt.<\/a><\/p>\n

https:\/\/www.govtech.com\/security\/federal-cyber-strategy-holds-few-details-for-state-local-govt<\/a><\/p>\n

Publish Date: 2026-03-10 19:19:00<\/a><\/p>\n

Source Domain: www.govtech.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

President Donald Trump\u2019s new \u201cCyber Strategy for America,\u201d a seven-page document with six policy pillars intended to guide federal cybersecurity efforts, offers limited detail about how those priorities will impact state and local governments.The strategy, released March 6, emphasizes deterring cybersecurity adversaries, streamlining cybersecurity regulation, modernizing federal networks and securing critical infrastructure and emerging technologies. It calls for using both defensive and offensive operations to \u201cshape adversary behavior,\u201d while also promoting regulatory reforms intended to reduce compliance burdens and accelerate innovation.Among priorities are accelerating adoption of zero-trust architecture, cloud computing and post-quantum cryptography across federal systems, as well as strengthening protections for infrastructure sectors including energy systems, telecommunications networks, financial services, water utilities and hospitals. Focused at the federal level, the document reflects work that state and local governments are already doing, including in infrastructure security.Pillar 4 focuses on securing critical infrastructure and supply chains, noting that state, local, tribal and territorial governments (SLTT) should play a role in those efforts, describing them as \u201ca complement to \u2014 not a substitute for \u2014 our national cybersecurity efforts.\u201dDan Lohrmann, Government Technology cybersecurity columnist, said critical infrastructure is something states have been dealing with for decades, with cybersecurity now counted among potential disaster scenarios.\u201cThe fact is that cyber could be front and center because of an attack from a foreign adversary \u2026 the lights go out, whether that\u2019s a fire, flood, tornado, hurricane or natural disaster,\u201d he said. \u201cThere are individual and small utilities owned specifically by cities and counties themselves, but they have been working with groups like MS-ISAC and CISA to implement cybersecurity best practices within their sectors.\u201dFor context, the Multi-State Information Sharing and Analysis Center (MS-ISAC) provided no-cost cybersecurity monitoring and support to state, local, tribal and territorial governments for more than two decades, but now operates under a membership model after Trump and Congress ended its federal funding. The Cybersecurity and Infrastructure Security Agency (CISA), part of the U.S. Department of Homeland Security, works with government and industry partners to identify and reduce risks to critical infrastructure.Still, the cyber strategy offers few specifics about how federal initiatives would translate into operational support for those governments, drawing criticism from some. In an analysis published by the Institute for Security and Technology, Michael Klein noted that the strategy devotes only a single line to SLTT governments despite their role in operating and securing critical services.\u201cThe strategy provides no roadmap for how the federal government will actually fulfill that cyber defense role and seems to stand at odds with the administration\u2019s actions to date,\u201d he wrote in his analysis. \u201cThe State and Local Cybersecurity Grant Program, which provided critical funding for baseline protections, was not included in the president\u2019s budget. The Multi-State Information Sharing and Analysis Center, which offered no-cost threat monitoring and services to all SLTT entities, has seen all federal funding removed.\u201dAnother pillar that could affect state and local governments is Pillar 2, \u201cPromote Common Sense Regulation,\u201d which calls for streamlining cybersecurity requirements and reducing compliance burdens.Lohrmann pointed out that there are dozens of requirements attached to sensitive government data, including standards tied to criminal justice systems, health data and tax information. Those frameworks often overlap, he said, creating multiple compliance and audit requirements for the same systems. State governments can face dozens of cybersecurity audits in a single year under different regulatory regimes, but streamlining regulations could benefit stakeholders by saving time, money and duplicative work.Security certifications also would benefit from harmonization, he said, and GovRAMP and other organizations are seeking to do so. Alex Whitaker, director of government affairs for the National Association of State Chief Information Officers (NASCIO), said one element of the strategy that could benefit states is its call for streamlined cybersecurity regulation. \u201cNASCIO is encouraged that this administration is seeking to streamline cybersecurity regulations and is hopeful that this policy will translate into real, concrete steps that will require federal agencies to evaluate and reduce those cybersecurity compliance and reporting requirements that create both financial and administrative burdens for states,\u201d Whitaker said Tuesday via email.The strategy states that its six pillars will guide future policy and resource decisions through additional implementation efforts. For state and local governments responsible for operating many of the nation\u2019s essential services, those details will determine how federal cybersecurity priorities intersect with theirs.During a panel discussion Monday at the Billington Cybersecurity Summit, speakers largely focused on the new strategy. Nevada CIO Timothy Galluzi moderated.\u201cI am incredibly optimistic that the increased focus on collaboration and communication with state and local government was emphasized in the panel, knowing that SLTT partners are often how strategies like this get operationalized,\u201d Galluzi said via email. \u201cKey themes included a desire for better communication channels, workforce pipelines, better resource information from our federal partners.\u201cIn government and cyber, we live on relationships and communications. That is step one. Having a federal team committed to opening up those channels, wanting to hear about the good, bad and ugly, gives me hope that we are moving in the right direction to improve our environments to better protect our residents.\u201d<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Federal Cyber Strategy Holds Few Details for State, Local Govt. https:\/\/www.govtech.com\/security\/federal-cyber-strategy-holds-few-details-for-state-local-govt Publish Date: 2026-03-10 19:19:00…<\/p>\n","protected":false},"author":1,"featured_media":194657,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/erepublic.brightspotcdn.com\/dims4\/default\/98f1fdc\/2147483647\/strip\/true\/crop\/1168x568+0+154\/resize\/1440x700!\/quality\/90\/?url=http%3A%2F%2Ferepublic-brightspot.s3.us-west-2.amazonaws.com%2F3c%2F9c%2F285c16743bec6fba04b148c47855%2F4122862518-674b265c4a-o.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24],"class_list":["post-194656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/194656"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=194656"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/194656\/revisions"}],"predecessor-version":[{"id":194658,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/194656\/revisions\/194658"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/194657"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=194656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=194656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=194656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}