-
AI in Local Government: Lessons from 2025 and Emerging Cyber Threats in 2026
National League of Cities
AI adoption in local government created new security vulnerabilities in 2025 and 2026 is shaping up to be more demanding. The National League of Cities breaks down what city and county officials actually learned, what cyber threats they are now facing, and what practical steps leaders should be taking now.
-
Cybersecurity: DHS Grant Program to Enable State, Local, Tribal, and Territorial Governments to Improve Security
U.S. GAO
Federal funding exists specifically for government cybersecurity improvements for state and local governmental entities. This GAO report covers how the State and Local Cybersecurity Grant Program (SLCGP) works, what governments need to do to qualify, and program status through 2027.
Federal
Electronic and Information Technology Accessibility (Section 508)
Section 508 — 29 U.S.C. § 794d
Requires federal agencies to make their electronic and information technology accessible to people with disabilities. Directly applicable to any tech company selling to the federal government — your product must meet Section 508 standards or you cannot win federal contracts. Standards align with WCAG 2.1 AA for web content. Enforced through the Access Board and federal procurement requirements.
Federal
Federal Acquisition Regulation
FAR — 48 CFR Ch. 1
The primary body of rules governing all federal government procurement. Applies to all executive branch agencies. Micro-purchase threshold: $15,000. Simplified acquisition threshold: $350,000. Formal competition required above $350,000.
Federal
Federal Advisory Committee Act
FACA — 5 U.S.C. §§ 1001–1014
Governs advisory committees that advise federal agencies — including many AI and technology advisory panels. Requires public notice and open meetings for most advisory committee sessions.
Federal
Federal Risk and Authorization Management Program
FedRAMP — 44 U.S.C. §§ 3607–3616
A government-wide program establishing security assessment standards for cloud services used by federal agencies. Not a law but effectively mandatory if you want to sell cloud services to the federal government. Authorization is expensive and time-consuming but creates a significant competitive moat — relatively few cloud providers have full authorization. Managed by GSA. Authorization levels: Low, Moderate, High corresponding to sensitivity of data processed.
Federal
Freedom of Information Act
FOIA — 5 U.S.C. § 552
Gives any person the right to request access to federal agency records. Heavily used by businesses, law firms, and lawyers to obtain government data about competitors, regulatory proceedings, enforcement actions, and agency decision-making. Official portal: foia.gov.
Federal
Government in the Sunshine Act
Sunshine Act — 5 U.S.C. § 552b
Requires multi-member federal agencies to conduct meetings open to the public. Applies to agencies like the FTC, FCC, SEC, and similar collegial bodies. Relevant for monitoring regulatory rulemaking and enforcement policy decisions.
Federal
Privacy Act of 1974
Privacy Act — 5 U.S.C. § 552a
Governs federal agency collection, maintenance, use, and dissemination of personal information. Applies to information the government holds about individuals — relevant to tech companies whose products interact with federal agencies or whose data may be in government systems.
Federal
SBIR/STTR Programs
SBIR/STTR — 15 U.S.C. § 638
Small Business Innovation Research and Small Business Technology Transfer programs provide federal R&D funding to small businesses across 11 agencies. Awardees generally retain IP rights under Bayh-Dole principles. A major entry point for tech companies seeking federal contracts.