BEAD Program Grants and Cybersecurity Requirements
The NTIA Broadband Equity, Access, and Deployment (BEAD) Program, a part of the Infrastructure Investment and Jobs Act of 2021, is scheduled to release funding on June 30, 2023.
Currently, local governments and broadband network operators are partnering with plans to apply for the funding—and many of them are well under way. As you make your preparations, taking the time to examine the requirements of the BEAD Program (as outlined in its Notice of Funding Opportunity) is critical.
Cybersecurity takes center stage
A major area of interest specifically called out within the 95-page Notice of Funding Opportunity are the strict cybersecurity requirements that must be met by any municipality or network operator applying for BEAD Program funding.
The BEAD Program Notice of Funding Opportunity specifically addresses the need for “protecting American communications networks and those who use them from domestic and international threat actors,” thereby acknowledging the importance of ensuring that the new broadband networks vital to our national infrastructure are safe and that their users are protected.
Putting together a risk management plan
As a necessary part of the funding requirements, the BEAD Program demands all prospective grantees implement a risk management plan that adheres to the National Institute of Standards and Technology (NIST) Framework for Improving Critical Infrastructure Cybersecurity. The NIST Framework, last updated in April 2018, is a comprehensive 55-page document with separate requirements in five key areas:
- Identifying risks
- Protecting data and assets
- Detecting threats
- Responding to cybersecurity events
- Recovering data and assets
Meeting the demands of this section of the BEAD Program grant application may prove to be the largest hurdle faced by many companies attempting to apply for BEAD funding on their own.
CHR can help you sort through the details
The level of detail in the NIST Framework can seem overwhelming. You’re not alone—CHR is here to help walk you through it.
Our new, complimentary guide to BEAD Program grants, available here, is designed to help you understand and navigate the BEAD cybersecurity requirements and more. In the guide, you’ll learn about:
- The BEAD Program justification for its cybersecurity requirements
- The four primary cybersecurity requirements named in the BEAD Program Notice of Funding Opportunity
- A detailed look at what the NIST Framework requires a cybersecurity plan to address
- Guidance about your next steps toward BEAD Program funding
As your BEAD Program preparation and planning moves forward, don’t let the cybersecurity requirements take you by surprise. Get an assist from CHR. We have decades of experience in managed IT services, data privacy, and compliance solutions—and we can help make sure you’re ready to meet the cybersecurity demands of the BEAD Program.