Rhode Island · Northeastern US

Rhode Island cybersecurity grants for defense contractors

Rhode Island's defense economy is anchored by the Navy at Newport and Quonset Point and by submarine builder General Dynamics Electric Boat. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.

  • 50Commands at NS Newport
  • 7,000+Electric Boat workers at Quonset
  • 100Grants available

CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.

Why it matters here

Where does Rhode Island's defense work come from?

Rhode Island's defense economy centers on the Navy's presence at Newport and Quonset Point and on the submarine industrial base, creating significant contracting opportunities, and CMMC obligations, for local businesses.

  • Newport

    Naval Station Newport

    Home to roughly 50 Navy, Marine Corps, Coast Guard and Army Reserve commands, including the Naval War College, the Naval Undersea Warfare Center, and the Surface Warfare Officers School, the state's largest concentration of defense activity.

  • Newport

    Naval Undersea Warfare Center

    The Navy's full-spectrum research, development, test and evaluation center for submarines and undersea weapon systems, headquartered in Newport with more than 4,400 civilian and military personnel.

  • North Kingstown

    Electric Boat · Quonset Point

    General Dynamics Electric Boat's 400-acre Quonset Point shipyard fabricates hull modules for Columbia- and Virginia-class submarines, employing more than 7,000 skilled workers on Narragansett Bay.

Your local partner

Who is Rhode Island's CMMC and manufacturing partner?

Polaris MEP is Rhode Island's Manufacturing Extension Partnership center, a business unit of the University of Rhode Island Research Foundation. Since 1996 it has delivered improvement solutions to Rhode Island manufacturers, including cybersecurity training and readiness services.

  • Cybersecurity readiness

    Polaris MEP offers cybersecurity training, certifications, and assessments that help Rhode Island manufacturers identify the gaps relevant to CMMC Level 2 requirements.

  • RI MADE defense program

    Polaris MEP's RI MADE program supports the state's defense manufacturing ecosystem with assessments covering cybersecurity, automation and robotics, and business risk.

Visit polarismep.org →

More resources

What other cybersecurity support can Rhode Island businesses use?

Beyond the grant, Rhode Island businesses can tap additional support through state programs and federal resources.

  • CISA Region 1

    Serves Rhode Island through CISA's Boston regional office covering the six New England states, providing no-cost advisories and incident-response support.

  • RIEMA

    The Rhode Island Emergency Management Agency coordinates critical-infrastructure and key-resource protection across the state, working with federal partners on cyber resilience.

  • RI APEX Accelerator

    Rhode Island's APEX Accelerator (formerly PTAC) helps small businesses navigate federal contracting, from SAM.gov registration to DoD subcontracting, and shares cyber resources for contractors.

The grant

How much does a CMMC gap assessment cost in Rhode Island?

Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.

  1. Confirm you qualify

    Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.

  2. Get assessed against NIST 800-171

    A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.

  3. Leave knowing where you stand

    You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.

Questions

Frequently asked questions: Rhode Island CMMC grants

Who qualifies for the CMMC gap assessment grant in Rhode Island?

The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Rhode Island businesses supporting Naval Station Newport, the Naval Undersea Warfare Center, or General Dynamics Electric Boat at Quonset Point are typical candidates.

How much does a CMMC gap assessment cost in Rhode Island?

Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.

What is Rhode Island's MEP center?

Polaris MEP is Rhode Island's Manufacturing Extension Partnership center, a business unit of the University of Rhode Island Research Foundation. It provides cybersecurity training and assessments to Rhode Island manufacturers, including the RI MADE defense manufacturing program.

Is CMMC Level 2 enforcement still happening on November 10, 2026?

No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.

Do subcontractors in Rhode Island need CMMC?

If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.

Ready when you are

Apply for your CMMC gap assessment grant

100 in-kind awards. Confirm eligibility and submit in minutes.