North Carolina · Southeastern US
North Carolina cybersecurity grants for defense contractors
North Carolina's defense-manufacturing footprint centers on Fort Bragg, Marine Corps Base Camp Lejeune, and Seymour Johnson Air Force Base, home to some of the largest concentrations of military personnel and defense activity in the country. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does North Carolina's defense work come from?
North Carolina's defense economy centers on three major installations, Fort Bragg, Marine Corps Base Camp Lejeune, and Seymour Johnson Air Force Base, creating one of the largest concentrations of defense activity in the country, and significant CMMC obligations, for local businesses.
Fayetteville
Fort Bragg
One of the largest military bases in the world by population, with 52,000+ military personnel. Headquarters for U.S. Army Special Operations Command; hosts XVIII Airborne Corps, 82nd Airborne Division, 1st Special Forces Command (Airborne), and the 75th Ranger Regiment. Renamed Fort Liberty in 2023 and reverted to Fort Bragg in early 2025, its current official name as of 2026 honors WWII paratrooper Army Pfc. Roland L. Bragg.
Jacksonville
Marine Corps Base Camp Lejeune
A 246-square-mile Marine Corps base and major amphibious assault training site, located between the deep-water ports of Wilmington and Morehead City. With its satellite camps and New River Air Station, Camp Lejeune is the largest concentration of Marines and sailors in the world.
Goldsboro
Seymour Johnson Air Force Base
A 3,300-acre USAF installation established during WWII. Home to the 4th Fighter Wing (Air Combat Command), which trains all Air Force F-15E crews, and the 916th Air Refueling Wing (KC-135R Stratotankers).
Your local partner
Who is North Carolina's CMMC and manufacturing partner?
The North Carolina Manufacturing Extension Partnership (NCMEP), administered by NC State University's Industry Expansion Solutions (IES) division, is the official NIST Hollings MEP center for North Carolina. It operates as a network of six NC organizations, including the Economic Development Partnership of NC, the Polymers Center of Excellence, and the Manufacturing Solutions Center, providing manufacturing extension services to enhance the productivity, innovation, and competitiveness of NC-based manufacturers.
Direct CMMC and DFARS compliance support
NC State IES's Cybersecurity / DFARS-CMMC Compliance Services provide direct guidance to NC defense manufacturers on DFARS 252.204-7012, NIST SP 800-171 (110 controls), System Security Plans and POA&Ms, and CMMC Level 2 preparation, including the free "Mission Possible: Cyber Secure" five-module training series.
Federal contracting support
The North Carolina Military Business Center (NCMBC), headquartered at Fayetteville Technical Community College, helps NC businesses identify, bid on, and win military and federal contracts through specialists across 12 community colleges and the MatchForce.org platform. Since 2005 it has helped NC firms win 7,000+ contracts worth roughly $18.9 billion.
More resources
What other cybersecurity support can North Carolina businesses use?
Beyond the grant, North Carolina businesses can tap additional support through state programs and federal resources, including one of the strongest direct CMMC compliance infrastructures found among state programs.
$7.5M federal award
NC Defense Manufacturing Community Support Program (DMCSP)
A federally funded, $7.5 million initiative administered by NC State IES after NC State was awarded one of five DoD Office of Local Defense Community Cooperation grants nationally. Builds a 20+ partner consortium of universities, research centers, manufacturing networks, and state agencies to advance smart textiles, wearables, cybersecurity, AI, microelectronics, biotech, and additive manufacturing for the defense industrial base.
NC Military Business Center (NCMBC)
Publishes CMMC requirements guidance and CMMC Phase 2 update information for defense contractors, and runs the NC Defense Technology Transition Office (DEFTECH) to help NC businesses transition new technology into military and commercial use.
NC Defense Industry Diversification Initiative (NCDIDI)
Created in 2017 and jointly managed by NC State IES and the NC Department of Military and Veterans Affairs, to understand, support, and respond to the needs of North Carolina's defense-sector businesses.
The grant
How much does a CMMC gap assessment cost in North Carolina?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — North Carolina CMMC grants
Who qualifies for the CMMC gap assessment grant in North Carolina?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. North Carolina businesses supporting Fort Bragg, Marine Corps Base Camp Lejeune, or Seymour Johnson Air Force Base are typical candidates.
How much does a CMMC gap assessment cost in North Carolina?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is North Carolina's MEP center?
The North Carolina Manufacturing Extension Partnership (NCMEP), administered by NC State University's Industry Expansion Solutions (IES) division, is the official NIST Hollings MEP center for North Carolina. It operates as a network of NC organizations providing manufacturing extension services, including guidance relevant to CMMC and NIST 800-171, to North Carolina manufacturers.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in North Carolina need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.