{"labelingInfo":null,"renderer":{"description":"Survey Data Locations","label":"Alabama SLCGP Local Government Survey","symbol":{"angle":0,"color":[255,0,0,255],"outline":{"color":[255,255,0,255],"width":1},"size":8,"style":"esriSMSCircle","type":"esriSMS","xoffset":0,"yoffset":0},"type":"simple"},"transparency":0}
HasZ: false
HasM: false
Has Attachments: true
Has Geometry Properties: false
HTML Popup Type: esriServerHTMLPopupTypeAsHTMLText
header_name (type: esriFieldTypeString, alias: State and Local Cybersecurity Grant Program (SLCGP), SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true)
header_sub (type: esriFieldTypeString, alias: Alabama Local Government Survey, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true)
sub_pargraph (type: esriFieldTypeString, alias: The State of Alabama Office of Information Technology announces the availability of a grant opportunity through the State and Local Cybersecurity Grant Program (SLCGP). Issued by the U.S. Department of Homeland Security/Federal Emergency Management Agency/Resilience/Grant Program Directorate, the SLCGP (Funding Opportunity Number:
DHS-22-137-000-01) was created to assist state and local governments with managing and reducing systemic cyber risk.
Alabama will leverage this grant opportunity to help local governments throughout the state identify cybersecurity services, tools, and best practices which can be implemented and/or enhanced to strengthen an entity's cybersecurity posture and readiness level. Local governments interested in participating in this program will be asked to complete a brief survey to determine what resources are needed to address any critical deficiencies and establish a baseline level of security.
Technology touches almost every aspect of our daily lives. This is especially true in government. Therefore, a proactive approach to cybersecurity is essential to effectively secure the information, infrastructure, and resources of our individual entities. Through this grant opportunity, the State of Alabama looks forward to working with local governments to make targeted cybersecurity investments to strengthen cyber defense and response capabilities. In turn, this will enable local governments to better serve the citizens who rely on their services., SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true)
quest_one (type: esriFieldTypeString, alias: 1) What sensitive information do you handle, manage, store, destroy, or otherwise control?(check all that apply), SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [none_no_pii_or_phi: None (no PII or PHI)], [socialsecurity_numbers: Social Security Numbers], [creddebit_cardnum: Credit/Debit Card Numbers], ... 4 more ...)
quest_two (type: esriFieldTypeString, alias: 2) Approximately how many users do you support?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [0-50: 0-50], [50-100: 50-100], [100-500: 100-500], ... 2 more ...)
quest_three (type: esriFieldTypeString, alias: 3) Do you use Multi-Factor Authentication (MFA) for email and Virtual Private Network (VPN) access?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [yes: Yes], [no: No])
quest_four (type: esriFieldTypeString, alias: 4) Do you have and follow a vulnerability and patch management plan?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [yes: Yes], [no: No])
quest_five (type: esriFieldTypeString, alias: 5) Are separate accoubnts used for privileged and admin activities?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [no: No], [yes_but: Yes, but not centrally managed], [yes_and: Yes, and using a Privileged Access Management (PAM) solution])
quest_six (type: esriFieldTypeString, alias: 6) What type of network security controls are in place?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [internet: Internet Service Provider (ISP) provided], [external: External firewall], [applications_firewall: Applications layer (L7) firewall], ... 4 more ...)
quest_seven (type: esriFieldTypeString, alias: 7) What type of endpoint/server controls are in place?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [none: None], [anti_virus: Anti-virus], [endpoint_detection: Endpoint Detection and Response (EDR)/Extended Detection and Repsonse (XDR) without central monitoring], ... 2 more ...)
quest_eight (type: esriFieldTypeString, alias: 8) How do you currently back-up critical servers and data?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [none: None], [local_filesystem: Local filesystem], [manual_backup: Manual backup process to storage array or network shares], ... 2 more ...)
quest_nine (type: esriFieldTypeString, alias: 9) Do you have an Incident Response (IR) and Disaster Recovery (DR) plan?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [no: No], [yes_but_not: Yes, but not exercised], [yes_exercised: Yes, exercised annually])
quest_ten (type: esriFieldTypeString, alias: 10) When was the last security assessment or penetration test performed?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [none_on_record: None on record], [years_ago: Years ago], [within_one_year: Within 1 year], ... 1 more ...)
quest_eleven (type: esriFieldTypeString, alias: 11) What cloud services do you use?(check all that apply), SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [aws: Amazon Web Services (AWS)], [azure: Azure], [microsoft_0365: Microsoft 0365], ... 3 more ...)
quest_twelve (type: esriFieldTypeString, alias: 12) What services would you be interested in receiving as a participating local government in the SLCGP?, SQL Type: sqlTypeOther, length: 255, nullable: true, editable: true, Coded Values: [sub_secur: Subsidized security assessments and gap analysis (reports to be fully owned by requestor and not used by Office of Information Technology/State of Alabama)], [deploy_essential: Deployment of essential cybersecurity services (anti-virus, EDR, network tools, other)], [deploy_gov: Deployment of .gov email addresses], ... 3 more ...)