New York · Northeastern US

New York cybersecurity grants for defense contractors

From Fort Drum in the north to Watervliet Arsenal near Albany, New York anchors a wide defense supply chain across the Northeast. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.

10thMountain Division at Fort Drum
15K+Soldiers at Fort Drum
$5,000In-kind grant
100Grants available

CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.

Why it matters here

Where does New York's defense work come from?

New York's defense economy spans active Army installations and one of the nation's oldest manufacturing arsenals, creating significant contracting opportunities, and CMMC obligations, for local businesses.

Watertown

Fort Drum

Home to the Army's 10th Mountain Division, one of its most deployed combat divisions, with more than 15,000 active-duty soldiers and about 3,700 civilian employees on post.

Albany area

Watervliet Arsenal

The oldest continuously active arsenal in the United States and the nation's only large-caliber cannon manufacturer, performing research, development, testing, and manufacturing of cannon and mortar systems.

West Point

U.S. Military Academy

The Army's officer education institution and a major active-duty installation, generating education, technology, and facilities-support contracts across the Hudson Valley.

Your local partner

Who is New York's CMMC and manufacturing partner?

FuzeHub is New York's statewide Manufacturing Extension Partnership (NY MEP) center, supported by Empire State Development's Division of Science, Technology and Innovation (NYSTAR) and NIST. It connects small and mid-sized manufacturers to a network of 10 regional MEP centers across the state.

Cybersecurity readiness

New York's MEP network provides cybersecurity certification support that helps manufacturers work toward CMMC Level 2 requirements.

Manufacturing and funding support

FuzeHub connects manufacturers to services and to funds for business investment, plus supplier and customer matchmaking statewide.

Visit fuzehub.com →

More resources

What other cybersecurity support can New York businesses use?

Beyond the grant, New York businesses can tap additional support through state programs and federal resources.

NYS Office of Information Technology Services

Through its Chief Information Security Office, New York State ITS provides statewide coordination of cybersecurity policies, standards, and programs.

CISA Region 2

Serves New York from CISA's New York City regional office, with Cybersecurity Advisors offering no-cost assessments and advisories to critical-infrastructure operators.

FuzeHub (NY MEP)

The statewide Manufacturing Extension Partnership center connects manufacturers to cybersecurity, funding, and federal-supply-chain resources.

The grant

How much does a CMMC gap assessment cost in New York?

Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.

$5,000IN-KIND VALUE PER AWARD · 100 AVAILABLE
1

Confirm you qualify

Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.

2

Get assessed against NIST 800-171

A certified partner reviews your current controls against the 110 controls across 14 domains and produces a scored gap report showing what stands between you and CMMC Level 2.

3

Leave with a remediation plan

You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.

Questions

Frequently asked questions — New York CMMC grants

Who qualifies for the CMMC gap assessment grant in New York?

The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. New York businesses supporting Fort Drum, Watervliet Arsenal, or West Point are typical candidates.

How much does a CMMC gap assessment cost in New York?

Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.

What is New York's MEP center?

FuzeHub is New York's statewide Manufacturing Extension Partnership (NY MEP) center, supported by Empire State Development's Division of Science, Technology and Innovation (NYSTAR) and NIST. It connects manufacturers to cybersecurity certification support, manufacturing improvement, and funding through a network of 10 regional MEP centers.

Is CMMC Level 2 enforcement still happening on November 10, 2026?

No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.

Do subcontractors in New York need CMMC?

If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.

Ready when you are

Apply for your CMMC gap assessment grant

100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.

Apply now