An Overview of the Original FCC 22-84 Order
On November 25, 2022, the Federal Communications Commission (FCC) announced new rules to ban the authorization of Chinese telecommunications and video surveillance equipment that posed a threat to U.S. national security. This step aligns with the Bipartisan Secure Equipment Act of 2021 and is part of broader efforts to enhance the security and resilience of the U.S. communications network supply chain. The rules prevent the importation and sale of equipment listed as risky on the FCC’s Covered List, which includes products from companies like Huawei, ZTE, and others. These initiatives are among several taken by the FCC to maintain secure U.S. networks, including prohibiting the use of public funds for purchasing covered equipment, launching programs to remove insecure equipment from U.S. networks, and revoking operating authorities for Chinese state-owned carriers.
Then Came an Additional $379 Million in Funding for the SLCGP
The State and Local Cybersecurity Grant Program (SLCGP) announced that an additional $379 million was available for funding on August 8th, 2023. This grant program, a critical initiative under the Bipartisan Infrastructure Investment and Jobs Act, aims to bolster the cyber defense capabilities of state, local, and territorial (SLT) governments. This announcement was particularly timely given the escalating sophistication of threats to public safety and critical infrastructure.
Launched by the Department of Homeland Security, in partnership with the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Emergency Management Agency (FEMA), the SLCGP is a four-year project with a total funding pool of $1 billion. In its inaugural year, $185 million was awarded, demonstrating a strong commitment to enhancing the nation’s cyber resilience.
The focus for 2023 under the SLCGP remained consistent with the program’s long-term goals but with an evolved approach. Key areas included assessing current cybersecurity postures, emphasizing continuous improvement, training personnel in cybersecurity, and implementing risk-aligned security protections. This progressive build-up ensured a comprehensive strengthening of cybersecurity infrastructures across the nation. Though many believe (including TriSquare Cyber’s experts) believe it isn’t nearly enough.
In addition to the grant program, CISA offers year-round support to SLT partners. With a network of cybersecurity advisors and technical experts across 10 regions, they provide guidance, technical assistance, and training. This support is part of a broader strategy to foster robust partnerships and enhance nationwide cybersecurity capabilities.
The SLCGP’s Verbiage on How Non-Secure Cameras Can Be Replaced
“FEMA grant funding may be permitted to procure replacement equipment and services impacted by this prohibition, provided the costs are otherwise consistent with the requirements of the funding notice and the Preparedness Grants Manual. Per section 889(f)(2)-(3) of the FY 2019 NDAA and 2 C.F.R. § 200.216, covered telecommunications equipment or services means:
i. Telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation, (or any subsidiary or affiliate of such entities);
ii. For the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities);
iii. Telecommunications or video surveillance services provided by such entities or using such equipment; or
iv. Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the People’s Republic of China.”
What if you Missed the October 6, 2023 Application Deadline?
Applications for the SLCGP opened on August 7, 2023. The deadline for submitting applications for the Fiscal Year 2023 State and Local Cybersecurity Grant Program (SLCGP) was October 6, 2023. However, this program is expected to continue for at least two more years. Prospective applicants should note that the application window for next year’s SLCGP is scheduled to open in the summer of 2024.
That’s a long wait, especially when you take this into account: grants often take many months to be paid, meaning if your company needs protection from threats NOW, then you will have to temporarily foot the bill (for likely around 9 months). Alternatively, you could wait for nearly a year and hope that these vulnerable cameras aren’t used as a bridge into your corporate network over that span. Guessing wrong here could lead to millions lost from ransomware, malware, and many other types of ever-evolving cyber threats.
Understanding the critical nature of cybersecurity in today’s digital landscape, companies that missed the grant deadline (or companies that were approved, but are awaiting funds) for upgrading to more secure camera models face a significant risk. TriSquare Cyber’s T2C-S32 device emerges as an essential solution in this context for several reasons.
Firstly, our device serves as an ideal stop-gap measure. With the long wait for the next grant application period in Summer 2024, and the subsequent delay in receiving grant money, organizations are vulnerable to cyber threats for an extended period. During this time, TriSquare Cyber can provide robust protection against potential breaches. Our proprietary GateKeeper Technology is specifically designed to secure vulnerable cameras, such as those from Hikvision and Dahua, which are commonly used but infamous for their security flaws and exploit history. By undergoing a simple installation of T2C-S32, you can immediately enhance your company’s security posture, mitigating the risk of costly cyber attacks like ransomware and malware.
Furthermore, the value of our hardware and software extends beyond the immediate need for security. Once the grant money is received and companies upgrade to more secure camera models, TriSquare Cyber will continue to play a vital role. It’s a common misconception that cameras approved by the U.S. government are devoid of vulnerabilities. In reality, all camera systems can have potential security gaps. The T2C-S32 device acts as an additional layer of defense, ensuring that even these new, more secure cameras are further safeguarded against evolving cyber threats. Learn more about TriSquare Cyber’s security camera network segmentation solution here.
Waiting Even a Few Months Without Locking Down Your Weakest Links Can Lead to a Cyber Disaster
The landscape of cybersecurity is ever-evolving, and the risks associated with non-secure camera systems and other networked devices are too significant to ignore. Whether your organization missed the application deadline for the FEMA State and Local Cybersecurity Grant Program (SLCGP) or is awaiting funding, the need for immediate and effective cybersecurity measures is paramount. TriSquare Cyber offers a practical and robust solution to bridge this gap. Contact us to learn more, or get a free security camera audit today.
