Cybersecurity Grant Program Agreement

Home Browse Search

c. Monitoring activities may include, but are not limited to: i. Review of financial and performance reports; ii. Monitoring and documenting the completion of Agreement deliverables; iii. Documentation of phone calls, meetings (e.9., agendas, sign-in sheets, meeting minutes), e- mails, and correspondence; iv. Review of reimbursement requests and supporting documentation to ensure allowability and consistency with Agreement Work Plan (Attachments D-1, D-2, D-3), Budget (Attachment E), and federal requirements; v. Observation and documentation of Agreement-related activities, such as exercises, training, events, and equipment demonstrations; and vi. On-site visits to review equipment records and inventories, to verify source documentation for reimbursement requests and performance reports, and to verify completion of deliverables. d. The Subrecipient is required to meet or exceed the monitoring activities, as outlined above, for any non-federal entity to which the Subrecipient makes a subaward as a pass-through entity under this Agreement. e. Compliance will be monitored throughout the performance period to assess risk. Concerns will be addressed through a corrective action plan. L LTMTTED ENGLTSH PROFTC|ENCY (CrVrL RTGHTS ACT OF 1964 TITLE Vl) fhe Subrecipient must comply with the Title Vl of the Civil Rights Act of 1964 (Title Vl) prohibition against discrimination on the basis of national origin, which requires that subrecipients of federal financial assistance take reasonable steps to provide meaningful access to persons with limited English proficiency (LEP) to their programs and services. Providing meaningful access for persons with LEP may entail providing language assistance services, including oral interpretation and written translation. Executive Order 13166, lmproving Access to Services for Persons with Limited English Proficiency (August 11, 2000), requires federal agencies to issue guidance to recipients, assisting such organizations and entities in understanding their language access obligations. DHS published the required recipient guidance in April 2011, DHS Guidance to Federal Financial Assistance English Proficient Persons, T6 Fed. Reg.21755-21768, (April 18, 2011). The Guidance provides helpful information such as how a recipient can determine the extent of its obligation to provide language services, selecting language services, and elements of an effective plan on language assistance for LEP persons. For additional assistance and information regarding language access obligations, please refer to the DHS Recipient Guidance at htlps://www.dhs.qov/quidance-published- help-department-supported-oroanizations-provide-meaninqful-access-oeoole-limited and additional resources on https://wwtrv. lep.qov. B. SLCGP SPECIFIC REQUIREMENTS 1. The Subrecipient must use SLCGP funds only to perform tasks as described in the Work Plan (Attachments D) and the Subrecipient's approved application for funding incorporated into this Agreement. 2. Subrecipients are required to annually complete the Nationwide Cybersecurity Review (NCSR) https:/lwww.cisecuritv.orq/ms-isac/services/ncsr. a free, anonymous, annual self-assessment designed to measure gaps and capabilities of a SLT's cybersecurity programs to benchmark and measure progress of improvement in their cybersecurity posture. Due dates are included in the Timeline (Attachment F). For more information, visit Nationwide Cvbersecuritv Rgview (NCSR) (cisecuritv.org). 3. Subrecipients are required to participate in free cyber hygiene services, specifically vulnerability scanning and web application scanning. To register for these services, email vulnerabilitv@cisa.dhs.oov with the subject line "Requesting Cyber Hygiene Services - SLCGP" to get started. lndicate in the body of your email that you are requesting this service as part of the SLCGP. For more information, visit CISA's Cvber Hvqiene lnformation Pqge. DHS.FEMA-SLCGP-FY23 Page 9 of 39 Kittitas County Sheriffls Office, E25-313