States with plans approved by the Cybersecurity and Infrastructure Security Agency could land at least $2 million for cybersecurity projects.