FEMA's $1 Billion Homeland Security Grant Program Has a July 24 Deadline — and Five Spending Mandates That Decide Whether You Get to Keep It. SHSP, UASI, and Operation Stonegarden, Decoded

When FEMA announced on June 24 that it was making more than $1.5 billion available to prevent terrorism and protect infrastructure, the number grabbed the headlines. But the figure bundles several programs, and the piece that matters most to states, cities, and county sheriffs is the Fiscal Year 2026 Homeland Security Grant Program (HSGP) — more than $1 billion on its own, split across three sub-programs, with a July 24, 2026 application deadline. We have already covered FEMA's transportation-focused awards this cycle in our FEMA Port Security and Transit Security analysis; the HSGP is the larger, broader umbrella, and it comes with a set of spending mandates that are easy to underestimate and fatal to ignore.

This is the definitive breakdown of how the three HSGP programs work, how the FY2026 spending fences stack on top of each other, and how to build an application that both wins funding and survives the compliance requirements attached to it.

The three programs under one umbrella

HSGP is not a single grant. It is three distinct programs administered together, each with its own eligibility logic:

• State Homeland Security Program (SHSP) — the base layer. Every state and territory receives an allocation, distributed through the State Administrative Agency (SAA) to state, local, and tribal entities. SHSP is the workhorse that funds planning, equipment, training, and exercises statewide.
• Urban Area Security Initiative (UASI) — the high-risk-city layer. For FY2026, UASI is funded at roughly $584 million across 44 designated high-risk urban areas, selected by an analysis of the relative terrorism risk faced by the 100 most populous metropolitan statistical areas. Eligible applicants must sit within a designated urban area — cities like Tampa–St. Petersburg, Minneapolis–St. Paul, and St. Louis appear in the FY2026 field. The complete list lives in Appendix 1 of the NOFO.
• Operation Stonegarden (OPSG) — the border layer. OPSG funds enhanced cooperation among local, tribal, state, and federal law enforcement to secure U.S. borders, and is available to agencies in border states and territories.

The key thing to understand is that these programs do not compete against each other — an eligible entity may participate in more than one. A sheriff's office in a UASI city on a border state could touch all three. The strategy is to understand which pool each proposed project belongs in, because the spending mandates below apply differently across them.

The five spending fences — and how they stack

This is where FY2026 gets complicated, and where applications fail. HSGP funds do not arrive as flexible money. They arrive fenced, and the fences stack. For SHSP and UASI recipients, the FY2026 requirements are:

• National Priority Areas (NPAs): at least 30%. Recipients must direct a minimum of 30% of their combined SHSP and UASI funds to five National Priority Areas. For FY2026 those priorities are: improving coordination among law-enforcement agencies, strengthening the cybersecurity of critical infrastructure, protecting election integrity, supporting border-security efforts, and enhancing the protection of crowded public spaces such as concerts and parades.
• Law Enforcement Terrorism Prevention Activities (LETPA): at least 35%. A minimum of 35% of total SHSP and UASI funding must go toward LETPA. This is the single largest fence.
• Enhancing Election Security NPA: a 3% minimum spend, backed by a required Investment Justification.
• Border Crisis Response and Enforcement Support NPA: a 10% minimum spend, also requiring a dedicated Investment Justification.
• The election and border minimums sit inside the broader 30% NPA requirement, not on top of it — but they must be individually documented.

Read together, these mandates mean that a large majority of an SHSP or UASI award is effectively pre-committed before an applicant funds a single local priority of its own. If you plan a budget assuming full discretion, you will find at closeout that you underspent a required category — and unspent or misallocated funds against a minimum are exactly the kind of finding that jeopardizes the award and future eligibility. The discipline the FY2026 program rewards is building the budget from the fences outward: satisfy LETPA and the NPA minimums first, document each with its own Investment Justification, and only then allocate the remainder to local discretionary needs.

Who is eligible — and the SAA bottleneck

Eligibility runs through a specific channel that trips up first-time applicants. FEMA does not, in most cases, award HSGP funds directly to a local police department or county agency. It awards to the State Administrative Agency, which then sub-grants to local, tribal, and territorial entities. For UASI, funds flow to the designated urban area's SAA and are managed through an Urban Area Working Group. That means the operative deadline for a local applicant is almost always earlier than July 24 — it is whatever internal deadline your SAA sets to assemble the state's consolidated application. If you are a local agency, your real clock is your state's, and it may already be running.

This structure has strategic implications. Because the SAA aggregates and prioritizes, local applicants compete for a place in the state's Investment Justifications, not directly with FEMA. Building the relationship with your SAA — and aligning your proposed project explicitly to one of the five National Priority Areas — is what gets your project into the state's submission. A cybersecurity upgrade for critical infrastructure, an election-security investment, a crowded-space protection project, or a border-support capability maps cleanly onto a required category and is therefore far easier for an SAA to fund than a project that sits outside the fences.

How to build an Investment Justification that survives

The Investment Justification (IJ) is the core document of an HSGP application, and FY2026's structure makes it more demanding. Each NPA with a minimum spend requires its own IJ, so a competitive applicant is effectively writing several linked justifications rather than one. The IJ has to establish a clear line from a defined risk, to the capability gap it creates, to the specific project that closes it, to the outcome that will be measured. Vague "enhance preparedness" language loses; a justification that names the threat, quantifies the gap, and ties the spend to a National Priority Area wins.

Three practical moves separate strong applications:

1. Map every proposed project to an NPA before you write. If a project does not map to law-enforcement coordination, infrastructure cybersecurity, election integrity, border security, or crowded-space protection, it is competing for the shrinking discretionary remainder — a much harder path.
2. Front-load the mandated categories. Because LETPA (35%) and the NPAs (30%, including the 3% election and 10% border minimums) consume most of the award, design the flagship projects to satisfy those fences directly rather than treating compliance as an afterthought.
3. Document the border and election spends separately. These two carry their own dedicated Investment Justifications and their own minimums. An application that folds them into a general narrative risks failing the documentation test even if the dollars are technically there.

The HSGP is one of the largest recurring pools of homeland-security money available to state and local government, and for agencies that understand its architecture it is a dependable, multi-program source of capability funding. But it is a program where the compliance structure is the strategy: the winners are the applicants who treat the five spending fences not as obstacles but as the blueprint their Investment Justifications are built around. With the FEMA deadline on July 24 — and SAA internal deadlines earlier — the time to align projects to the National Priority Areas is now. Granted's grant database tracks the full FY2026 FEMA preparedness portfolio, including the UASI allocations and the companion Port and Transit Security programs, so eligible agencies can see every fence and every deadline in one place.