2 Major Air Force Installations
INDOPACOM Strategic Defense Region
73 Grants Remain of 100
Alaska defense contractors and small businesses have unique pathways to strengthen their cybersecurity posture through grants, state programs, and federal resources. With the CMMC Phase 2 third-party certification requirement on hold pending DoD's program review, now is the time to understand what support is available and how to access it.
Alaska's Strategic Position and Defense Infrastructure
Alaska is one of the most strategically vital states for American defense operations, positioned along the Arctic border and the Pacific Rim. The state hosts major Air Force and Army installations critical to INDOPACOM operations and Arctic defense strategy.
Defense Contractors in Alaska
Alaska businesses contract with Joint Base Elmendorf-Richardson, Eielson Air Force Base, and Clear Space Force Station in areas including logistics, communications, Arctic operations support, and engineering services. CMMC compliance is becoming a requirement for these opportunities.
- Joint Base Elmendorf-Richardson (JBER) (Anchorage): Largest Air Force base in Alaska, hub for Arctic operations throughout the Pacific region. Houses the 673rd Air Base Wing and supports thousands of active duty personnel and contractors in aviation, logistics, and IT services.
- Eielson Air Force Base (Fairbanks): Home to the 354th Fighter Wing and the Pacific Air Forces regional training center. Generates contracting in pilot training, Arctic survival systems, and advanced aviation technology.
- Clear Space Force Station (Greely): Critical for space surveillance and missile warning in the Arctic theater. Contracts with local firms for communications, electronics, and technical support services.
Alaska MEP Center and State Cybersecurity Programs
Alaska's MEP center and state agencies provide cybersecurity and manufacturing support to help small businesses meet federal contracting requirements, particularly in remote and underserved communities.
Alaska MEP: Alaska Technology Innovation Program
Alaska's MEP programs connect businesses with federal contracting resources, NIST-based assessments, and cybersecurity readiness tools. Given Alaska's remote geography, MEP services also address connectivity and infrastructure challenges that affect cybersecurity.
- Alaska Department of Military and Veterans Affairs (DMVA): Coordinates state cybersecurity initiatives and partners with CISA on critical infrastructure protection for Alaska's defense-adjacent businesses.
- University of Alaska Anchorage (UAA) Cyber Program: UAA's Center for Cybersecurity Education maintains partnerships with defense contractors and provides workforce development in cybersecurity for Alaska businesses.
- Alaska Regional Development Organizations: Groups like the Arctic Economic Council and Alaska Aerospace Development Corporation provide resources for businesses in Alaska's defense and technology sectors.
Critical Infrastructure and Rural Cybersecurity Challenges
Alaska's geographic isolation creates unique cybersecurity challenges. Small defense contractors in rural Alaska face infrastructure gaps that amplify cyber risk, including limited broadband connectivity and restricted access to cybersecurity expertise.
Arctic Cybersecurity Challenges
Alaska's remote contractors face higher costs for cybersecurity tools, limited local IT support options, and longer response times from managed security providers. These challenges make in-kind gap assessments especially valuable.
- Rural Connectivity Gap: Many Alaska communities lack reliable broadband, which affects cloud-based security tools, MFA enforcement, and log management required by NIST SP 800-171.
- CISA Arctic Region Support: CISA has an active Arctic regional office that provides no-cost cybersecurity advisories, vulnerability assessments, and incident response planning to Alaska organizations.
- USDA Rural Development Grants: The USDA provides grants for rural infrastructure improvements that can include cybersecurity tools for small businesses in Alaska's agricultural and remote commercial sectors.
CMMC Compliance: What Defense Contractors Need to Know
The Cybersecurity Maturity Model Certification (CMMC) program requires defense contractors to meet specific cybersecurity standards before winning contracts that involve Controlled Unclassified Information (CUI).
CMMC Phase 2 Update
On July 13, 2026 the Department of War suspended CMMC Phase 2, the third-party (C3PAO) certification requirement, pending a 60 day review; no new date has been announced. Level 2 self-assessments against all 110 NIST SP 800-171 controls, SPRS and the annual affirmation still stand.
- NIST SP 800-171: The foundation of CMMC Level 2. Covers 110 security controls across 14 domains including Access Control, Audit and Accountability, Risk Assessment, and Incident Response.
- Gap Assessment: A professional gap assessment identifies exactly which controls your organization does not yet meet and ranks them by severity. This is the critical first step before remediation.
- CGA Grant: The CGA CMMC Gap Assessment Grant provides an in-kind professional assessment at no cost to eligible contractors. Apply now.
CGA National CMMC Gap Assessment Grant
Cyber Grants Alliance (CGA) has 73 of its 100 in-kind grants remaining to help defense contractors and manufacturers complete a professional CMMC gap assessment. This is an in-kind grant.
Who Is Eligible?
Defense contractors, subcontractors, and manufacturers who do business with the DoD or handle CUI on behalf of federal agencies. Small and mid-sized businesses in Alaska are especially encouraged to apply.
- What You Get: A professional gap assessment against all 110 NIST SP 800-171 controls, conducted by certified CMMC assessors. You receive a prioritized list of your compliance gaps by severity.
- What It Costs: Nothing. The assessment is provided at no cost to you through the CGA grant program, sponsored by Capital Cyber Compliance.
- How to Apply: Complete the online application. Grants are awarded on a rolling basis until all 100 are distributed.
How to Get Started
Taking the first step toward CMMC compliance starts with understanding where your organization stands.
- Step 1: Complete the CGA Grant Application at cybergrantsalliance.org/cmmc-level-2-gap-assessment-grant. Applications take under 10 minutes.
- Step 2: If approved, you will be connected with an independent certified assessor who will coordinate your assessment timeline with you.
- Step 3: Review your prioritized gap list and decide what to fix first. Remediation and implementation help is available separately from Capital Cyber Compliance.
- Step 4: Once remediation is complete, post your self-assessment score in SPRS, and plan for a C3PAO assessment if your contracts require one.
Ready to Start Your CMMC Journey?
Apply for the CGA National CMMC Gap Assessment Grant. 73 of our 100 in-kind grants remain.
This post is for informational purposes only. Cyber Grants Alliance is a nonprofit providing grant access. Capital Cyber Compliance sponsors the CMMC gap assessment grants and provides professional assessment services.
