Vermont · Northeastern US
Vermont cybersecurity grants for defense contractors
Vermont's defense footprint is small but real, anchored by the F-35A fighter wing at Burlington and the Army Mountain Warfare School at Camp Ethan Allen. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
- 20F-35As at Burlington
- 11,219Acres at Camp Ethan Allen
- 100Grants available
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Vermont's defense work come from?
Vermont's defense economy is compact but genuine, built around National Guard installations and a federally funded cybersecurity-research base, creating contracting opportunities, and CMMC obligations, for local businesses.
South Burlington
158th Fighter Wing (VTANG)
The Vermont Air National Guard base at Burlington International Airport was the first Air National Guard unit to field the fifth-generation F-35A Lightning II, flying 20 aircraft through its 134th Fighter Squadron.
Jericho
Camp Ethan Allen Training Site
An 11,219-acre Vermont National Guard installation that is home to the Army Mountain Warfare School, one of two elite mountain-training sites in the U.S., and the 86th Infantry Brigade Combat Team (Mountain).
Northfield
NUARI at Norwich University
Norwich University Applied Research Institutes is a federally funded cybersecurity and defense-technology R&D nonprofit, backed by DHS/FEMA and NIST grants and building a new Cyber Fusion Center.
Your local partner
Who is Vermont's CMMC and manufacturing partner?
The Vermont Manufacturing Extension Center (VMEC) is Vermont's Manufacturing Extension Partnership center, hosted by Vermont State University since 1995. It provides technology adoption, cybersecurity, and supply-chain services to small and mid-sized Vermont manufacturers.
Cybersecurity readiness
VMEC hosts the Vermont CMMC Collaborative User Group, a forum geared around CMMC and NIST 800-171 for manufacturers in the DoD supply chain.
Supply-chain support
With NUARI, VMEC provides resources that help Vermont manufacturers adopt cybersecurity practices and work toward CMMC compliance.
More resources
What other cybersecurity support can Vermont businesses use?
Beyond the grant, Vermont businesses can tap additional support through state programs and federal resources.
Vermont Agency of Digital Services
Runs the state's cybersecurity program under a Chief Information Security Officer and a Cybersecurity Advisory Council, aligning statewide security readiness to CISA standards.
CISA Region 1
Serves Vermont from CISA's Boston-based New England regional office, providing no-cost resilience-building advisories and incident-response support.
Vermont APEX Accelerator
Formerly the Vermont PTAC, this DoD-funded program offers free counseling, proposal help, and registration assistance for businesses pursuing federal contracts.
The grant
How much does a CMMC gap assessment cost in Vermont?
Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.
Leave knowing where you stand
You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.
Questions
Frequently asked questions: Vermont CMMC grants
Who qualifies for the CMMC gap assessment grant in Vermont?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Vermont businesses supporting the 158th Fighter Wing, Camp Ethan Allen Training Site, or the New England defense supply chain are typical candidates.
How much does a CMMC gap assessment cost in Vermont?
Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.
What is Vermont's MEP center?
The Vermont Manufacturing Extension Center (VMEC), hosted by Vermont State University since 1995, is Vermont's NIST Manufacturing Extension Partnership center. VMEC hosts the Vermont CMMC Collaborative User Group and provides cybersecurity and supply-chain resources geared around CMMC and NIST 800-171.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Vermont need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards. Confirm eligibility and submit in minutes.
Or email info@cybergrantsalliance.org or call +1 (888) 323-9991