Cyber Civilian Corps Act
The Cyber Civilian Corps Act establishes a volunteer cybersecurity force to assist in protecting against cyber threats and responding to cybersecurity incidents, including data breaches, within Michigan.
| Jurisdiction | Michigan |
|---|---|
| Category | Cybersecurity |
| Status | Active |
| Latest development |
Analysis
Key Requirements
The Cyber Civilian Corps Act establishes the following main requirements:
- Creation of a Michigan cyber civilian corps program where civilian volunteers with cybersecurity expertise can provide rapid response assistance during cybersecurity incidents Michigan Legislature
- Volunteers must enter into a volunteer agreement with the Department of Technology, Management and Budget (DTMB) to serve as deployable or non-deployable advisors Michigan Legislature
- Volunteers must consent to background screening and submit fingerprints for criminal history and records checks Michigan Legislature
- The DTMB may deploy volunteers to provide assistance to municipal, educational, nonprofit, or critical infrastructure organizations experiencing cybersecurity incidents Michigan Legislature
- Establishment of a Michigan cyber civilian corps advisory board to review policies and procedures Michigan Legislature
Compliance Challenges
Organizations face several challenges in complying with and implementing the Cyber Civilian Corps Act:
- Recruiting and retaining qualified volunteers with the necessary cybersecurity expertise National Governors Association
- Ensuring proper vetting and background checks of volunteers while maintaining an adequate volunteer pool Lawfare
- Balancing volunteer availability with the need for rapid response during cybersecurity incidents National Governors Association
- Addressing potential liability issues related to volunteer actions during incident response Lawfare
Implementation Best Practices
To effectively implement the Cyber Civilian Corps Act, organizations should:
- Develop clear volunteer agreements outlining roles, responsibilities, and expectations Michigan Legislature
- Establish a robust training program to ensure volunteers maintain up-to-date skills CISA Cyber Volunteer Resource Center
- Implement a secure system for managing volunteer information and background check results Michigan Legislature
- Create clear activation and deployment procedures for responding to cybersecurity incidents National Governors Association
- Utilize existing frameworks like the NIST Cybersecurity Framework to guide overall cybersecurity practices
Recent Updates
As of the current date, there have been no significant recent updates to the Cyber Civilian Corps Act. However, organizations should:
- Regularly check the Michigan Legislature website for any amendments or changes to the Act
- Monitor CISA's Cyber Volunteer Resource Center for updates on best practices and national initiatives related to cyber volunteer programs
Related Regulations
The Cyber Civilian Corps Act intersects with several related regulations and standards:
- Michigan Cyber Initiative: A comprehensive approach to cybersecurity that complements the Cyber Civilian Corps Michigan.gov
- NIST Cybersecurity Framework: Provides guidelines for cybersecurity practices that can inform the work of the Cyber Civilian Corps NIST
- Federal Volunteer Protection Act: Offers liability protections for volunteers that may apply to Cyber Civilian Corps members U.S. Department of Labor
Industry Impact
The Cyber Civilian Corps Act has significant impacts on various industries:
- Government Agencies: Benefit from increased cybersecurity support and expertise National Governors Association
- Critical Infrastructure: Receives additional protection and incident response capabilities Michigan Legislature
- Cybersecurity Industry: Provides opportunities for professionals to volunteer and gain experience CISA
- Educational Institutions: Can participate in and benefit from the program, enhancing cybersecurity education and preparedness Michigan Legislature
Sources
- Michigan Legislature - Cyber Civilian Corps Act
- National Governors Association - Re-Envisioning State Cyber Response Capabilities
- Lawfare - Laying the Legal Foundation for Civilian Cyber Corps
- CISA Cyber Volunteer Resource Center
- NIST Cybersecurity Framework
- Michigan.gov Cybersecurity
- U.S. Department of Labor - Volunteer Protection Act
Recent developments
- — NDAA mandates DoD to standardize and eliminate duplicative cybersecurity requirements in defense industrial base contracts by June 1, 2026, with new governance and annual CIO reporting. (source)
- — New CCPA regulations effective Jan 1, 2026 introduce risk assessments, cookie/pixel rules, data broker requirements, and future cybersecurity audits, amid high enforcement; first audits due 2028 for large firms. (source)
- — House passed the FY2026 NDAA (312-112 vote) with broad cyber modernization, AI threat training mandates, and harmonized cybersecurity regulations for the defense industrial base, awaiting Senate final passage. (source)
- — House and Senate Armed Services Committee leaders unveiled the FY2026 NDAA text including cyber provisions like standardizing DoD cybersecurity requirements across the defense industrial base by June 1, 2026, enhancing U.S. Cyber Command funding, and tightening mobile device security for senior officials. (source)
Read the full guide to Cyber Civilian Corps Act
Related regulations
- NYDFS Cybersecurity Regulation — New York, Active, effective 2025-11-01
- Law on Cybersecurity of Vietnam — Vietnam, Active
- Austria NIS2 Act — Austria, Upcoming
- Luxembourg NIS2 Transposition — Luxembourg, Active
- EU Cyber Resilience Act (CRA) — European Union, Phased, effective 2027-12-11
- EU Cyber Resilience Act - Vulnerability and Incident Reporting (11 Sep 2026) — European Union, Active, effective 2026-09-11
- Netherlands NIS2 Transposition (Cyberbeveiligingswet) — Netherlands, Active, effective 2026-08-15
- Belgium NIS2 Transposition — Belgium, Active, effective 2024-10-18
Put it into practice
- Generate the policy: Privacy policy generator (generatepolicy.com)
- Buy the policy pack: State Privacy Law Checklist (cyberpolicy.shop)
- Build it yourself: 2026 US Privacy Program Workbook (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates