Arizona · Southwestern US
Arizona cybersecurity grants for defense contractors
Arizona's defense economy spans fighter pilot training, aircraft maintenance, and Army intelligence, anchored by Luke Air Force Base, Davis-Monthan Air Force Base, and Fort Huachuca. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Arizona's defense work come from?
Arizona's defense economy is anchored by three major installations plus a dense base of aerospace and defense manufacturers in the Phoenix and Tucson metro areas, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Glendale
Luke Air Force Base
The Air Force's premier fighter pilot training base, training roughly 75% of the world's F-35 pilots, with a total economic impact on Arizona of nearly $2.4 billion and about 6,900 active-duty, reservist, and civilian personnel.
Tucson
Davis-Monthan Air Force Base
Home to A-10 attack squadrons and the 309th Aerospace Maintenance and Regeneration Group (the military's aircraft "Boneyard"), employing about 9,000 military and civilian personnel with an economic impact exceeding $1 billion a year.
Sierra Vista
Fort Huachuca
The U.S. Army's home for military intelligence training and network operations, generating an estimated $2.4-2.9 billion annual impact on Cochise County and drawing major defense contractors including Raytheon, General Dynamics IT, and Northrop Grumman.
Your local partner
Who is Arizona's CMMC and manufacturing partner?
Arizona MEP, run through the Arizona Commerce Authority as part of the national NIST MEP network, is Arizona's Manufacturing Extension Partnership center. It provides technology adoption, cybersecurity readiness, and manufacturing-improvement services to more than 4,600 small and mid-sized Arizona manufacturers.
Cybersecurity readiness
Arizona MEP delivers gap assessments against the 110 NIST SP 800-171 controls and helps manufacturers build the System Security Plans and POA&Ms that CMMC Level 2 requires.
Federal contracting support
Arizona MEP works alongside the Arizona APEX Accelerator (formerly Arizona PTAC) to help manufacturers register, bid, and perform on DoD contracts.
More resources
What other cybersecurity support can Arizona businesses use?
Beyond the grant, Arizona businesses can tap additional support through state programs and federal resources.
Arizona Cyber Command
Established by the Arizona Department of Homeland Security, this statewide information security office sets policy, coordinates incident response, and runs the state's Statewide Cyber Readiness Program for local and tribal entities.
CISA Region 9
Serves Arizona alongside California, Nevada, and Hawaii, providing no-cost cybersecurity advisories, assessments, and incident-response support through regional Cybersecurity Advisors.
Arizona APEX Accelerator
Formerly Arizona PTAC and hosted by Maricopa Community Colleges, this program gives no-fee, one-on-one help with government contracting, registrations, and DoD subcontracting.
The grant
How much does a CMMC gap assessment cost in Arizona?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Arizona CMMC grants
Who qualifies for the CMMC gap assessment grant in Arizona?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Arizona businesses supporting Luke Air Force Base, Davis-Monthan Air Force Base, or Fort Huachuca are typical candidates.
How much does a CMMC gap assessment cost in Arizona?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Arizona's MEP center?
Arizona MEP, operated through the Arizona Commerce Authority, is Arizona's Manufacturing Extension Partnership center. It provides NIST SP 800-171 gap assessments and CMMC compliance guidance to Arizona manufacturers, including aerospace and defense suppliers.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Arizona need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.