
Update your cybersecurity defense with IIJA funding
The Infrastructure Investment and Jobs Act, also known as the IIJA, was signed into law by President Biden in November 2021. The law is also known as the Bipartisan Infrastructure Law (BIL), and it authorized $1.2 trillion across several different industries for infrastructure improvements across the United States. There are a handful of cybersecurity initiatives and targets identified in the IIJA.
The Biden Administration has taken an aggressive approach to cybersecurity and bolstering infrastructure resiliency. Several appropriations in IIJA align directly with federal government initiatives and the new 2023 National Cybersecurity Strategy. Here are some of the cybersecurity initiatives in the IIJA:
- $35 million for the Cybersecurity and Infrastructure Security (CISA) for risk management operation and stakeholder engagement and requirements
- $21 million to fund the Office of the National Cyber Director (ONCD)
- $157+ million secure and improve infrastructure resiliency (via the Science and Technology Directorate (DHS-S&T))
- $100 million over five years for a Cyber Response and Recovery Fund that allows CISA to assist public and private entities in recovering from significant cybersecurity incidents.
The $1 billion appropriation to support the cybersecurity efforts of state and local governments will be dispersed through a grant program over the course of four years. With the first tranche of funding released in 2022, the program will run through the fiscal year 2025. Section 70612 of the IIJA (p. 889) defines the terms for the grant. A very basic summary of these requirements is that applicants must have a cybersecurity plan that includes how cybersecurity is managed and directed. The National Association of Attorneys General has a more thorough summary along with commentary on a successful grant program. You can get more details on this program on the State and Local Cybersecurity Grant Program page.
At Barracuda, we strive to make the world a safer place. We believe every business deserves access to cloud-first, enterprise-grade security solutions that are easy to buy, deploy, and use. We protect email, networks, data, and applications with innovative solutions that grow and adapt with our customers’ journey. More than 200,000 organizations worldwide trust Barracuda to protect them. For more information, visit barracuda.com.

Informe de Barracuda sobre Ransomware 2025
Principales conclusiones sobre la experiencia y el impacto del ransomware en las organizaciones de todo el mundo
Suscríbase al blog de Barracuda.
Regístrese para recibir Threat Spotlight, comentarios de la industria y más.

Seguridad de vulnerabilidades gestionada: corrección más rápida, menos riesgos, cumplimiento normativo más fácil
Descubra lo fácil que es encontrar las vulnerabilidades que los ciberdelincuentes quieren explotar.