California · Pacific Coast · Western US
California cybersecurity grants for defense contractors
California is home to one of the largest and most diverse defense ecosystems in the United States, anchored by major Air Force, Navy, and Space Force installations. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
- 5Major defense installations
- 2ndLargest naval base (San Diego)
- 100Grants available
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does California's defense work come from?
California's defense economy spans Air Force, Navy, and Space Force installations across the state, generating billions in contracting opportunities each year, and CMMC obligations, for local businesses.
Mojave Desert
Edwards Air Force Base
NASA's primary flight research center and the Air Force Test Center, generating contracting in aerospace R&D, flight testing, propulsion systems, and advanced materials, with classified and CUI data requiring robust cybersecurity controls.
San Diego
Naval Base San Diego
The largest naval base on the West Coast, home to over 60 ships and 130 tenant commands, with contracts in ship maintenance, logistics, communications, and cybersecurity services for Pacific Fleet operations.
Central Coast
Vandenberg Space Force Base
The primary U.S. space launch facility for the Western Range, with contracts covering satellite integration, launch operations, range safety systems, and missile defense testing.
Fairfield
Travis Air Force Base
A key Air Mobility Command hub for airlift and aerial refueling in the Pacific theater, generating contracting in logistics, aircraft maintenance, and transportation security.
Oceanside
Marine Corps Base Camp Pendleton
The Marine Corps' largest West Coast expeditionary training base, generating contracting in logistics, facilities support, communications, and cybersecurity services for Marine Corps and Navy operations.
Your local partner
Who is California's CMMC and manufacturing partner?
California Manufacturing Technology Consulting (CMTC) serves as California's Manufacturing Extension Partnership center. It provides manufacturing assistance, technology adoption support, and cybersecurity guidance to defense contractors and small manufacturers throughout the state.
Cybersecurity readiness
CMTC offers technology assessments that identify security gaps relevant to NIST SP 800-171 requirements, forming the foundation for CMMC gap analysis and remediation planning.
Federal contracting support
CMTC helps small businesses navigate DoD contracting pathways, including SAM.gov registration, proposal development, and Teaming Agreement facilitation.
More resources
What other cybersecurity support can California businesses use?
Beyond the grant, California businesses can tap additional support through state programs and federal resources.
Governor's Office of Emergency Services (Cal OES)
Coordinates statewide cybersecurity strategy and manages programs that support defense contractors in protecting critical systems and data.
CISA Region 9
CISA's Region 9 office, headquartered in Oakland, serves California and neighboring states, providing no-cost advisories, threat intelligence, and incident-response support to defense contractors.
Cal-CSIC
The California Cybersecurity Integration Center is a state fusion center coordinating threat sharing between federal, state, and private-sector partners in the defense industrial base.
The grant
How much does a CMMC gap assessment cost in California?
Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.
Leave knowing where you stand
You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.
Questions
Frequently asked questions: California CMMC grants
Who qualifies for the CMMC gap assessment grant in California?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. California businesses supporting Edwards AFB, Naval Base San Diego, Vandenberg SFB, or Travis AFB are typical candidates.
How much does a CMMC gap assessment cost in California?
Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.
What is California's MEP center?
California Manufacturing Technology Consulting (CMTC) is California's Manufacturing Extension Partnership center. It provides NIST SP 800-171 cybersecurity readiness assessments and federal contracting support, including SAM.gov registration and DoD contracting help, with offices throughout Southern California and the Bay Area.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in California need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards. Confirm eligibility and submit in minutes.
Or email info@cybergrantsalliance.org or call +1 (888) 323-9991