Arkansas · South Central US
Arkansas cybersecurity grants for defense contractors
Arkansas's defense footprint spans airlift training at Little Rock Air Force Base, munitions production at Pine Bluff Arsenal, and National Guard maneuver training at Fort Chaffee. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
- 19thAirlift Wing at Little Rock AFB
- $1.3BNew investment at Pine Bluff Arsenal
- 100Grants available
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Arkansas's defense work come from?
Arkansas's defense economy is anchored by airlift training, munitions manufacturing, and Army National Guard maneuver training, creating real contracting opportunities, and CMMC obligations, for the state's manufacturers and service providers.
Jacksonville
Little Rock Air Force Base
Home to the 19th Airlift Wing and the 314th Airlift Wing, which together operate the Air Force's largest C-130 Hercules fleet and run all Air Force C-130 formal flight training, supporting more than 7,500 active-duty military and civilian personnel.
Pine Bluff
Pine Bluff Arsenal
An active U.S. Army munitions and chemical/biological defense manufacturing site. The Army recently leased facility space to Hanwha Defense USA for a roughly $1.3 billion munitions modernization project expected to create around 200 skilled jobs.
Fort Smith
Fort Chaffee Joint Maneuver Training Center
A nearly 65,000-acre Arkansas Army National Guard installation used by all branches of the Department of Defense for maneuver training and live-fire exercises.
North Little Rock
Robinson Maneuver Training Center
A 32,000-acre installation, also known as Camp Joseph T. Robinson, that hosts the Joint Force Headquarters of the Arkansas National Guard and the Headquarters of the Arkansas Air National Guard.
Your local partner
Who is Arkansas's CMMC and manufacturing partner?
Arkansas Manufacturing Solutions (AEDC-MS) is Arkansas's Manufacturing Extension Partnership center. It is a program of the Arkansas Economic Development Commission, established in 1995 and affiliated with the NIST Manufacturing Extension Partnership, with project managers based in Little Rock, Camden, Fayetteville, Fort Smith, and Jonesboro.
Operational excellence consulting
Arkansas Manufacturing Solutions works directly with manufacturers statewide on growth and innovation, operational excellence, and information technology projects that support CMMC-relevant readiness.
Federal contracting support
Arkansas Manufacturing Solutions works alongside the Arkansas APEX Accelerator (formerly the Arkansas PTAC) to help manufacturers pursue and perform on DoD and other government contracts.
More resources
What other cybersecurity support can Arkansas businesses use?
Beyond the grant, Arkansas businesses can tap additional support through state-affiliated programs and federal resources.
Arkansas APEX Accelerator
Operated by the University of Arkansas since 1993 under a cost-sharing agreement with the Department of Defense, this program provides free bid-matching, subcontracting assistance, and training from offices in Little Rock, Bentonville, and Jonesboro.
Forge Institute Arkansas Cyber Defense Center
Offers free Cyber Risk Assessments to Arkansas small businesses as part of the U.S. Small Business Administration's Cybersecurity for Small Business Pilot Program.
Arkansas Small Business and Technology Development Center (ASBTDC)
Publishes CMMC and SBIR/STTR compliance guidance and free cyber-safety training aimed at helping small Arkansas firms understand DoD cybersecurity requirements.
The grant
How much does a CMMC gap assessment cost in Arkansas?
Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.
Leave knowing where you stand
You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.
Questions
Frequently asked questions: Arkansas CMMC grants
Who qualifies for the CMMC gap assessment grant in Arkansas?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Arkansas businesses supporting Little Rock Air Force Base, Pine Bluff Arsenal, or Fort Chaffee are typical candidates.
How much does a CMMC gap assessment cost in Arkansas?
Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.
What is Arkansas's MEP center?
Arkansas Manufacturing Solutions (AEDC-MS), a program of the Arkansas Economic Development Commission based in Little Rock with additional offices statewide, is Arkansas's Manufacturing Extension Partnership center. It is an affiliate of the NIST Manufacturing Extension Partnership and provides operational excellence, growth and innovation, and cybersecurity readiness support to Arkansas manufacturers.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Arkansas need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards. Confirm eligibility and submit in minutes.
Or email info@cybergrantsalliance.org or call +1 (888) 323-9991