Oregon · Pacific Northwest US
Oregon cybersecurity grants for defense contractors
Oregon's defense presence centers on its Air National Guard wings at Kingsley Field and Portland, rather than a major Air Force base or large Army post. If you're a manufacturer or contractor supporting that mission, or pursuing DoD work through the supply chain, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Oregon's defense work come from?
Oregon has no major Air Force base and no large active-duty Army installation. Its defense footprint centers on two Air National Guard fighter wings and a Navy-owned training range, a genuinely smaller-scale presence than states with major bases, but one that still generates real sustainment, logistics, and IT-support contracting activity, and the same CMMC obligations.
Klamath Falls
Kingsley Field Air National Guard Base
Home of the 173rd Fighter Wing, Oregon Air National Guard, and the U.S. Air Force's sole F-15C/D Eagle formal training unit, training combat pilots and support personnel for the active-duty Air Force and Air National Guard.
Portland
Portland Air National Guard Base
Home of the 142nd Wing, Oregon Air National Guard, on the southeast side of Portland International Airport. The 142nd Wing is transitioning from F-15 C/D Eagles to the new F-15EX Eagle II, with 18 aircraft on order.
Morrow County
Naval Weapons Systems Training Facility Boardman
A 47,000-acre Navy-owned bombing and training range used principally by NAS Whidbey Island for EA-18G Growler weapons-systems and drone testing, and by the Oregon Air National Guard for air-to-ground weapons training. The Oregon National Guard and U.S. Navy opened a $13 million Unmanned Aerial System Operating Facility there in 2023.
Your local partner
Who is Oregon's CMMC and manufacturing partner?
The Oregon Manufacturing Extension Partnership (OMEP), a NIST-designated Manufacturing Extension Partnership center established in 1996 and headquartered in Portland, provides Oregon manufacturers with Lean, technology adoption, workforce, and cybersecurity guidance, including CMMC readiness support.
DoD CMMC briefing seminars
OMEP directly hosts DoD CMMC briefing seminars for prime and subcontractor management, IT, and security staff, making it one of the most concrete, hands-on CMMC resources available to Oregon manufacturers.
Federal investment in Oregon manufacturing
NIST awarded OMEP $1,000,000 to lead a five-western-state Industry 4.0 regional strategy project covering IoT/cloud, automation, and cybersecurity, and Oregon's senators have announced over $1.85 million in additional federal investment supporting OMEP's work with Oregon manufacturers.
More resources
What other cybersecurity support can Oregon businesses use?
Beyond the grant, Oregon businesses can tap additional support through state programs and federal resources.
Oregon APEX Accelerator
Formerly Oregon PTAC, a statewide, no-cost government-contracting advising program funded jointly by the U.S. Department of Defense and Business Oregon, providing bid reviews, marketing assistance, contract performance support, and small-business certification help for businesses pursuing DoD and other government contracts.
Oregon Business Development Fund
A state revolving loan fund administered by Business Oregon, offering fixed-rate gap financing (up to $2 million, up to 20-year terms) for land, buildings, equipment, and permanent working capital, a real financing vehicle manufacturers can use for compliance-related capital equipment or facility upgrades.
Oregon SBDC Cybersecurity Program
The Oregon Small Business Development Center offers cybersecurity awareness workshops, training, and no-cost one-on-one advising for small businesses statewide.
The grant
How much does a CMMC gap assessment cost in Oregon?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Oregon CMMC grants
Who qualifies for the CMMC gap assessment grant in Oregon?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Oregon manufacturers working with OMEP or supporting the Oregon Air National Guard's flying wings are typical candidates.
How much does a CMMC gap assessment cost in Oregon?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
Does Oregon have major military bases?
Oregon has no major Air Force base or large active-duty Army post. Its defense footprint centers on two Air National Guard wings, Kingsley Field and the 142nd Wing at Portland Air National Guard Base, plus the Naval Weapons Systems Training Facility Boardman, a Navy-owned training range in Morrow County. Oregon defense contractors still face the same CMMC obligations as contractors in states with larger installations.
What is Oregon's MEP center?
The Oregon Manufacturing Extension Partnership (OMEP), a NIST-designated MEP center headquartered in Portland, provides Lean, technology adoption, workforce, and cybersecurity/CMMC-readiness services to Oregon manufacturers, including hosting DoD CMMC briefing seminars.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.