District of Columbia · National Capital Region
District of Columbia cybersecurity grants for defense contractors
Washington, DC is home to major DoD tenant commands, from Defense Intelligence Agency Headquarters at Joint Base Anacostia-Bolling to NAVSEA Headquarters at the Washington Navy Yard and National Defense University at Fort Lesley J. McNair. If you hold or pursue DoD work in the District, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does the District's defense work come from?
The District of Columbia hosts a concentrated set of DoD headquarters and support commands rather than a single sprawling base, from the Defense Intelligence Agency to Navy acquisition leadership to the institutions that train the joint force, creating a dense web of contracting activity and CMMC obligations for firms doing business in DC.
Southwest DC
Joint Base Anacostia-Bolling
A 905-acre installation formed in 2010 from the consolidation of Naval Support Facility Anacostia and Bolling Air Force Base. Supports roughly 17,000 military and civilian personnel across 48 mission and tenant units, including Defense Intelligence Agency Headquarters, Air Force District of Washington and the 11th Wing, Marine Helicopter Squadron One, and the U.S. Air Force Honor Guard and Band.
Southeast DC
Washington Navy Yard
A historic Navy installation at 1333 Isaac Hull Avenue SE that hosts Naval Sea Systems Command (NAVSEA) Headquarters in the Humphreys Building. NAVSEA engineers, builds, buys, and maintains the Navy's fleet of ships and combat systems, making it a major hub for Navy acquisition and contracting activity.
Buzzard Point
Fort Lesley J. McNair
A U.S. Army post in continuous service for over 200 years, located at the confluence of the Potomac and Anacostia Rivers. Hosts the National Defense University, including the National War College and Eisenhower School, the Inter-American Defense College, and serves as headquarters of the U.S. Army Military District of Washington.
Capitol Hill
D.C. Armory & DC National Guard
Garrison and headquarters for the District of Columbia Army National Guard since 1941. In March 2026 the DC National Guard activated the 260th Special Purpose Brigade at the Armory, the only U.S. Army brigade structured specifically to coordinate military support to civil authorities and protect critical infrastructure in the nation's capital.
8th & I
Marine Barracks Washington
The oldest active post in the Marine Corps, established in 1801, and the official residence of the Commandant of the Marine Corps since 1806. Carries ceremonial and security missions in the capital.
Your local partner
Who is DC's CMMC and manufacturing partner?
The District of Columbia does not have its own independent Manufacturing Extension Partnership (MEP) center. Instead, NIST's Hollings MEP program funds Maryland MEP under a cooperative agreement whose federally recognized service territory explicitly includes DC, alongside Maryland. DC manufacturers and contractors are served through Maryland MEP, not through a dedicated DC-only center.
A shared, DC-inclusive service territory
Maryland MEP's own announcement of its renewed roughly $14 million NIST cooperative agreement states the award supports its mission "to assist and promote manufacturing in Maryland and Washington DC." That means DC businesses have access to the same MEP guidance, technology-adoption support, and government-contracting readiness help as Maryland manufacturers, delivered by Maryland MEP.
CONNEX Maryland/DC
Maryland MEP operates CONNEX Maryland/DC, an online manufacturer supply-chain connectivity platform explicitly branded for both Maryland and DC manufacturers, a practical entry point for DC firms looking to plug into this cooperative-territory support.
More resources
What other cybersecurity support can DC businesses use?
Beyond the grant, DC businesses can tap additional support through a federally administered contracting-assistance program, though no DC-specific program currently funds CMMC compliance costs directly.
DC APEX Accelerator
Located at 441 4th Street NW in Washington, DC, and administered by the DoD Office of Small Business Programs through a cooperative agreement with the DC Department of Small and Local Business Development. Provides free one-on-one counseling, bid matching, proposal assistance, GSA schedule help, and subcontracting support, and links to CMMC self-check awareness resources. It is technical assistance only, not grant funding, and does not itself pay for a gap assessment or compliance remediation.
No DC-specific CMMC funding program
As of this research, no District of Columbia government program was found that directly funds or subsidizes CMMC compliance, gap-assessment costs, or NIST SP 800-171 remediation for private-sector defense contractors. DC's own small-business grant activity, such as the Ward 8 Community Investment Fund, is general-purpose and geographically restricted rather than cybersecurity-focused, which is exactly why the Cyber Grants Alliance in-kind grant fills a real gap for DC contractors.
Maryland MEP (serving DC)
As described above, DC's federally designated MEP coverage runs through Maryland MEP's NIST cooperative agreement territory, a useful complementary resource for manufacturing and government-contracting readiness alongside the CMMC gap assessment grant.
The grant
How much does a CMMC gap assessment cost in the District of Columbia?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — District of Columbia CMMC grants
Who qualifies for the CMMC gap assessment grant in the District of Columbia?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. DC-based firms supporting Joint Base Anacostia-Bolling, the Washington Navy Yard, Fort Lesley J. McNair, or DC National Guard missions are typical candidates.
How much does a CMMC gap assessment cost in the District of Columbia?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is the District of Columbia's MEP center?
DC does not have its own independent MEP center. Instead, NIST's Hollings Manufacturing Extension Partnership program funds Maryland MEP under a cooperative agreement whose service territory explicitly includes the District of Columbia. DC manufacturers and contractors are served through Maryland MEP, including its CONNEX Maryland/DC supply-chain platform, rather than through a dedicated DC-only center.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in the District of Columbia need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.