(2) Administration and Oversight The Secretary may not expend more than $10,000,000 for administration of the Public Health Emergency IT Grant Program. (d) Conditions on receipt of grant (1) Management of funds To be eligible for a grant under the Public Health Emergency IT Grant Program, a State shall agree to designate the Chief Information Officer, or an equivalent official, of the State as the primary official for the management and allocation of funds awarded under the Public Health Emergency IT Grant Program. (2) Security standards and certifications (A) In general Not later than 90 days after the date of the enactment of this Act, the Secretary, in consultation with the Secretary of Commerce, shall select commonly accepted security standards and certifications with respect to covered information technology. (B) Security standards and certifications required To be eligible for a grant under the Public Health Emergency IT Grant Program, a State shall agree to procure only covered information technology that meets or exceeds the standards and certifications selected pursuant to paragraph (1) with funds made available under such Program. (e) Grants (1) Single grant A State may not receive more than one grant under the Public Health Emergency IT Grant Program. (2) Grant amounts The Secretary may award grants to States under the Public Health Emergency IT Grant Program on the basis of the population of such State, except no grant awarded under such Program may be less than $5,000,000. (f) Subgrants Each State that receives a grant under the Public Health Emergency IT Grant Program shall reserve not less than 40 percent of amounts received for the purpose of making subgrants to local governments within such State— (1) for emergency information technology expenses