Iowa · Midwestern US
Iowa cybersecurity grants for defense contractors
Iowa's defense-manufacturing footprint centers on Rock Island Arsenal, straddling the Mississippi River between Davenport, Iowa, and Rock Island, Illinois, home to the Department of Defense's only vertically integrated government-owned manufacturing operation. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Iowa's defense work come from?
Iowa's defense economy centers on Rock Island Arsenal in the Quad Cities, the only full-service Army installation in Iowa, Illinois, or Minnesota, alongside a statewide Iowa National Guard footprint, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Quad Cities (Davenport, IA side)
Rock Island Arsenal & the Joint Manufacturing and Technology Center
A 946-acre Army installation on an island in the Mississippi River between Davenport, Iowa, and Rock Island, Illinois. Roughly 6,250 personnel support more than 30 organizations there, including U.S. Army Sustainment Command, Army Contracting Command – Rock Island, and the Joint Manufacturing and Technology Center (JMTC), the DoD's only vertically integrated government-owned manufacturing operation, with an estimated $1 billion annual regional economic impact.
Johnston
Camp Dodge / Iowa National Guard Headquarters
Camp Dodge in Johnston serves as the headquarters of the Iowa National Guard, coordinating the state's Army and Air National Guard units and their federal contracting and support needs.
Des Moines & Sioux City
Iowa Air National Guard wings
The 132d Wing at the Des Moines Air National Guard Base and the 185th Air Refueling Wing at Sioux City Air National Guard Base anchor Iowa's Air National Guard flying missions, generating sustainment, logistics, and IT-support contracting activity.
Your local partner
Who is Iowa's CMMC and manufacturing partner?
CIRAS (the Center for Industrial Research and Service), based in the Iowa State University College of Engineering since 1963, manages the Manufacturing Extension Partnership (MEP) program for the state of Iowa. It provides Iowa manufacturers with guidance on enterprise leadership, growth, technology, productivity, and government contracting.
Cybersecurity & contracting readiness
CIRAS assistance ranges from technical management support to help with government contracts, which is where NIST 800-171 and CMMC readiness questions typically start for Iowa manufacturers.
Federal contracting support
CIRAS also operates Iowa's APEX Accelerator (the former Iowa PTAC), funded in part through a DoD cooperative agreement, helping businesses register in SAM.gov, find opportunities, and prepare bids.
More resources
What other cybersecurity support can Iowa businesses use?
Beyond the grant, Iowa businesses can tap additional support through state programs and federal resources.
Iowa Office of the Chief Information Officer
Housed within the Iowa Department of Management, the OCIO's Information Security Services team runs the state's cybersecurity.iowa.gov resource hub and handles incident-notification intake for state and local government, education, and nonprofit entities.
CISA Region 7
Serves Iowa, Kansas, Missouri, and Nebraska from a regional office in Kansas City, Missouri, providing no-cost cybersecurity advisories, critical-infrastructure analysis, and incident-response support.
CIRAS APEX Accelerator
Iowa's DoD-funded procurement technical assistance provider, helping businesses identify, compete for, and win government contracts, from SAM.gov registration through bid preparation and award management.
The grant
How much does a CMMC gap assessment cost in Iowa?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Iowa CMMC grants
Who qualifies for the CMMC gap assessment grant in Iowa?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Iowa businesses supporting Rock Island Arsenal's Joint Manufacturing and Technology Center or the Iowa National Guard are typical candidates.
How much does a CMMC gap assessment cost in Iowa?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Iowa's MEP center?
CIRAS (the Center for Industrial Research and Service) at Iowa State University manages the Manufacturing Extension Partnership program for the state of Iowa. It provides technology adoption, government-contracting, and manufacturing-improvement support, including guidance relevant to CMMC and NIST 800-171, to Iowa manufacturers.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Iowa need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.