Maine · Northeastern US
Maine cybersecurity grants for defense contractors
Maine's defense economy is built on shipbuilding and submarine work, anchored by Bath Iron Works and Portsmouth Naval Shipyard. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Maine's defense work come from?
Maine's defense economy is concentrated in naval shipbuilding and submarine maintenance, with additional Air National Guard and Coast Guard activity, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Bath
Bath Iron Works
A General Dynamics shipyard and Maine's largest private employer, serving as the lead yard for the Navy's Arleigh Burke-class (DDG-51) guided-missile destroyers.
Kittery
Portsmouth Naval Shipyard
The Navy's oldest continuously operating shipyard, performing overhaul, repair, and modernization of Los Angeles-class and Virginia-class nuclear attack submarines.
Bangor
Bangor Air National Guard Base
Home to the Maine Air National Guard's 101st Air Refueling Wing, which operates KC-135 Stratotanker aerial-refueling aircraft.
South Portland
Coast Guard Sector Northern New England
The Coast Guard command responsible for maritime safety, security, and operations across Maine and northern New England waters.
Your local partner
Who is Maine's CMMC and manufacturing partner?
The Maine Manufacturing Extension Partnership (Maine MEP) is Maine's Manufacturing Extension Partnership center, based in Augusta. It helps small and mid-sized Maine manufacturers adopt technology, improve operations, and strengthen cybersecurity readiness.
Cybersecurity readiness
Maine MEP supports manufacturers with cybersecurity and DFARS/NIST 800-171 compliance guidance relevant to CMMC Level 2 requirements.
Federal contracting support
Maine MEP works alongside the Maine APEX Accelerator to help manufacturers pursue and perform on government contracts.
More resources
What other cybersecurity support can Maine businesses use?
Beyond the grant, Maine businesses can tap additional support through state programs and federal resources.
MaineIT (Office of Information Technology)
The state's Office of Information Technology coordinates Maine's cybersecurity efforts under the Chief Information Officer and issues statewide cybersecurity directives.
CISA Region 1
Serves Maine through CISA's Boston-based New England regional office, providing no-cost cybersecurity advisories and incident-response support.
Maine APEX Accelerator
Formerly the Maine PTAC, this EMDC-run program helps businesses find, win, and perform on government contracts, including guidance on frameworks like CMMC.
The grant
How much does a CMMC gap assessment cost in Maine?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Maine CMMC grants
Who qualifies for the CMMC gap assessment grant in Maine?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Maine businesses supporting Bath Iron Works, Portsmouth Naval Shipyard, or Bangor Air National Guard Base are typical candidates.
How much does a CMMC gap assessment cost in Maine?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Maine's MEP center?
The Maine Manufacturing Extension Partnership (Maine MEP), based in Augusta, is Maine's Manufacturing Extension Partnership center. It helps small and mid-sized manufacturers with technology adoption, operational improvement, and cybersecurity readiness, including DFARS and NIST 800-171 guidance.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Maine need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.