Rhode Island · Northeastern US
Rhode Island cybersecurity grants for defense contractors
Rhode Island's defense economy is anchored by the Navy at Newport and Quonset Point and by submarine builder General Dynamics Electric Boat. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Rhode Island's defense work come from?
Rhode Island's defense economy centers on the Navy's presence at Newport and Quonset Point and on the submarine industrial base, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Newport
Naval Station Newport
Home to roughly 50 Navy, Marine Corps, Coast Guard and Army Reserve commands, including the Naval War College, the Naval Undersea Warfare Center, and the Surface Warfare Officers School, the state's largest concentration of defense activity.
Newport
Naval Undersea Warfare Center
The Navy's full-spectrum research, development, test and evaluation center for submarines and undersea weapon systems, headquartered in Newport with more than 4,400 civilian and military personnel.
North Kingstown
Electric Boat · Quonset Point
General Dynamics Electric Boat's 400-acre Quonset Point shipyard fabricates hull modules for Columbia- and Virginia-class submarines, employing more than 7,000 skilled workers on Narragansett Bay.
Your local partner
Who is Rhode Island's CMMC and manufacturing partner?
Polaris MEP is Rhode Island's Manufacturing Extension Partnership center, a business unit of the University of Rhode Island Research Foundation. Since 1996 it has delivered improvement solutions to Rhode Island manufacturers, including cybersecurity training and readiness services.
Cybersecurity readiness
Polaris MEP offers cybersecurity training, certifications, and assessments that help Rhode Island manufacturers identify the gaps relevant to CMMC Level 2 requirements.
RI MADE defense program
Polaris MEP's RI MADE program supports the state's defense manufacturing ecosystem with assessments covering cybersecurity, automation and robotics, and business risk.
More resources
What other cybersecurity support can Rhode Island businesses use?
Beyond the grant, Rhode Island businesses can tap additional support through state programs and federal resources.
CISA Region 1
Serves Rhode Island through CISA's Boston regional office covering the six New England states, providing no-cost advisories and incident-response support.
RIEMA
The Rhode Island Emergency Management Agency coordinates critical-infrastructure and key-resource protection across the state, working with federal partners on cyber resilience.
RI APEX Accelerator
Rhode Island's APEX Accelerator (formerly PTAC) helps small businesses navigate federal contracting, from SAM.gov registration to DoD subcontracting, and shares cyber resources for contractors.
The grant
How much does a CMMC gap assessment cost in Rhode Island?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Rhode Island CMMC grants
Who qualifies for the CMMC gap assessment grant in Rhode Island?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Rhode Island businesses supporting Naval Station Newport, the Naval Undersea Warfare Center, or General Dynamics Electric Boat at Quonset Point are typical candidates.
How much does a CMMC gap assessment cost in Rhode Island?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Rhode Island's MEP center?
Polaris MEP is Rhode Island's Manufacturing Extension Partnership center, a business unit of the University of Rhode Island Research Foundation. It provides cybersecurity training and assessments to Rhode Island manufacturers, including the RI MADE defense manufacturing program.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Rhode Island need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.