State and Local Cyber Protection Act of 2017

State and Local Cyber Protection Act of 2017

This bill amends the Homeland Security Act of 2002 to require the Department of Homeland Security's (DHS's) national cybersecurity and communications integration center (NCCIC) to assist state and local governments with cybersecurity by:

• upon request, identifying system vulnerabilities and information security protections to address unauthorized access, use, disclosure, disruption, modification, or destruction of information collected or maintained by, or information systems used or operated by, state or local governments or other organizations or contractors on their behalf;

• providing via a web portal updated resources and guidelines related to information security;

• coordinating through national associations to implement information security tools and policies to ensure the resiliency of state and local information systems;

• providing training on cybersecurity, privacy, and civil liberties;

• providing requested technical assistance to deploy technology that continuously diagnoses and mitigates cyber threats and to conduct threat and vulnerability assessments;

• coordinating vulnerability disclosures under standards developed by the National Institute of Standards and Technology; and