Hawaii · Pacific US

Hawaii cybersecurity grants for defense contractors

Hawaii is home to the Indo-Pacific Command's forward posture, anchored by Joint Base Pearl Harbor-Hickam and Pearl Harbor Naval Shipyard. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.

  • 160+Commands at JBPHH
  • 4Public Navy shipyards nationwide
  • 100Grants available

CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.

Why it matters here

Where does Hawaii's defense work come from?

Hawaii's defense economy is concentrated on Oahu around Pearl Harbor, home to Navy, Air Force, and Army commands that anchor the U.S. military's presence in the Indo-Pacific, creating significant contracting opportunities, and CMMC obligations, for local businesses.

  • Oahu

    Joint Base Pearl Harbor-Hickam

    A joint Navy-Air Force installation formed in 2010, home to more than 160 tenant commands supporting Navy Region Hawaii and Pacific-wide military operations.

  • Pearl Harbor

    Pearl Harbor Naval Shipyard & IMF

    One of only four public naval shipyards in the country, performing depot and intermediate maintenance on surface ships and Virginia-class submarines for the Pacific Fleet.

  • Wahiawa

    Schofield Barracks

    A 17,725-acre Army installation and headquarters for United States Army Hawaii, home to the 25th Infantry Division.

Your local partner

Who is Hawaii's CMMC and manufacturing partner?

INNOVATE Hawaii is Hawaii's Manufacturing Extension Partnership center. Administered by the Hawaii Technology Development Corporation (HTDC) under the state Department of Business, Economic Development and Tourism, it has supported Hawaii manufacturers since 2004.

  • Manufacturing & technology support

    INNOVATE Hawaii offers coaching, consulting, and grant programs that help small and mid-sized manufacturers improve productivity and adopt new technology.

  • Cybersecurity & contracting readiness

    Hawaii businesses can also draw on the state's Hawaii Defense Economy cybersecurity initiative and the Hawaiʻi APEX Accelerator for DFARS/NIST 800-171 guidance and federal contracting help.

Visit htdc.org/programs/innovate-hawaii →

More resources

What other cybersecurity support can Hawaii businesses use?

Beyond the grant, Hawaii businesses can tap additional support through state programs and federal resources.

  • Hawaii Defense Economy (DBEDT)

    A state Department of Business, Economic Development and Tourism initiative that runs cybersecurity education and Cyber Leader training to help small and mid-sized businesses meet DoD contracting requirements.

  • CyberHawaii

    A nonprofit affiliate of CyberUSA that has partnered with DBEDT and the Cyber Readiness Institute on training programs to help Hawaii businesses meet CMMC and federal cybersecurity requirements.

  • Hawaiʻi APEX Accelerator (Hi-PTAC)

    Formerly the Hawaii PTAC, this program helps local businesses find, bid on, and perform government contracts, including guidance on frameworks like CMMC.

The grant

How much does a CMMC gap assessment cost in Hawaii?

Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.

  1. Confirm you qualify

    Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.

  2. Get assessed against NIST 800-171

    A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.

  3. Leave knowing where you stand

    You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.

Questions

Frequently asked questions: Hawaii CMMC grants

Who qualifies for the CMMC gap assessment grant in Hawaii?

The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Hawaii businesses supporting Joint Base Pearl Harbor-Hickam, Pearl Harbor Naval Shipyard and Intermediate Maintenance Facility, or Schofield Barracks are typical candidates.

How much does a CMMC gap assessment cost in Hawaii?

Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.

What is Hawaii's MEP center?

INNOVATE Hawaii, administered by the Hawaii Technology Development Corporation (HTDC) under the state Department of Business, Economic Development and Tourism, is Hawaii's Manufacturing Extension Partnership center. It helps small and mid-sized manufacturers with productivity, technology adoption, and compliance guidance relevant to CMMC Level 2 requirements.

Is CMMC Level 2 enforcement still happening on November 10, 2026?

No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.

Do subcontractors in Hawaii need CMMC?

If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.

Ready when you are

Apply for your CMMC gap assessment grant

100 in-kind awards. Confirm eligibility and submit in minutes.