TOWNS & THE LAW
Russian Cyber Attacks & Shields Up; ARPA Funds Available for Immediate Investment in Cybersecurity BY ALISON EARLES, SENIOR ASSOCIATE GENERAL COUNSEL CIPP/US
Every city, large and small, must be prepared to respond to disruptive cyber incidents arising from cyber attacks and human error. Many cities have held off on implementing basic protections due to cost. FORTUNATELY, FEDERAL GUIDance is clear that cities may use American Rescue Plan Act State and Local Fiscal Recovery Funds (ARPA SLFRF) to pay for cybersecurity measures. The Final Rule narrative states that government services include “modernization of cybersecurity, including hardware, software and protection of critical
44
infrastructure.” Investments in cybersecurity are eligible under Eligible Use Category 6.1, Revenue Replacement, Provision of Government Services (see Appendix 1 in the Treasury Compliance and Reporting Guidance). For more information about cybersecurity investments and ARPA funding, see the articles Cities May Use ARPA Funding for CyberSecurity and IT Services and Websites on gacities.com
