The U.S. Cybersecurity and Infrastructure Security Agency announced this week that it had issued a first-of-its kind $2 million award