Conclusion

C3s could prove critical in addressing new and evolving cyber threats. As more states seek to bolster their cybersecurity efforts despite insecure software and technology and an ongoing cyber workforce shortage, the C3 model offers an avenue to work toward cyber resilience. In addition to outlining the landscape of existing C3s and related legal frameworks, this report concludes with a roadmap with key legal provisions (see Appendix 2) and a template for creating a C3 statute suited to an individual state’s context, challenges, and opportunities (see Appendix 3). As cyber attacks continue to rise and threaten important infrastructure like state, local, tribal, and territorial (SLTT) governments and small and medium-sized businesses, C3s are a critical tool to help ensure our nation’s security.