Washington · Pacific Northwest
Washington cybersecurity grants for defense contractors
Washington is anchored by Joint Base Lewis-McChord, major Pacific Northwest naval operations, and one of the nation's largest aerospace manufacturing bases through Boeing's commercial and defense production in the Puget Sound region. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
- 5Major defense installations
- BoeingAerospace supply chain hub
- 100Grants available
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Washington's defense work come from?
Washington's defense economy spans Army logistics, the Pacific Northwest submarine fleet, naval electronic warfare, air mobility, and Boeing's aerospace supply chain, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Tacoma / Lakewood
Joint Base Lewis-McChord
A major Army and Air Force installation supporting logistics, training, and deployment. Generates contracting in I-5 corridor logistics, aviation support, and Army acquisition, with contractors handling sensitive logistics and operational support materials.
Bremerton / Silverdale
Naval Base Kitsap
Home to the Navy's submarine fleet in the Pacific Northwest, generating contracting in ship maintenance, submarine support, logistics, and specialized technical services for the Trident missile program.
Oak Harbor
Whidbey Island Naval Air Station
The home of all Navy EA-18G Growler electronic warfare squadrons, generating contracting in aviation maintenance, electronic warfare support, and training services.
Everett
Naval Station Everett
A carrier strike group homeport on Puget Sound, generating contracting in ship maintenance, port logistics, and specialized technical services for surface fleet operations.
Spokane
Fairchild Air Force Base
The 92nd Air Refueling Wing's KC-135 Stratotanker hub, generating contracting in logistics, aircraft maintenance, and training support for Pacific theater air refueling operations.
Puget Sound
Boeing Aerospace Supply Chain
Boeing's Puget Sound footprint (Everett, Renton) is driven primarily by commercial aviation, with the Renton factory also building the P-8A Poseidon, a military derivative of the 737, for the Navy. Hundreds of suppliers across both commercial and defense lines must meet NIST SP 800-171 requirements to keep their contract positions.
Your local partner
Who is Washington's CMMC and manufacturing partner?
Impact Washington is Washington's Manufacturing Extension Partnership center. It provides specialized cybersecurity readiness and federal contracting support to defense contractors and manufacturers throughout the Pacific Northwest, with offices serving Seattle, Tacoma, Spokane, and the Puget Sound region.
Cybersecurity readiness
Impact Washington offers technology assessments that identify security gaps relevant to NIST SP 800-171 and CMMC Level 2 requirements.
Federal contracting support
Impact Washington helps small businesses navigate DoD contracting, including SAM.gov registration, market research, and teaming agreements.
More resources
What other cybersecurity support can Washington businesses use?
Beyond the grant, Washington businesses can tap additional support through federal resources and their local aerospace supply chain.
CISA Region 10
CISA Region 10, headquartered in Seattle, serves Washington and the Pacific Northwest, providing threat intelligence, cybersecurity exercises, and incident-response planning for defense contractors.
Impact Washington
Washington's MEP center connects contractors near JBLM, Naval Base Kitsap, and Boeing facilities with cybersecurity assessments and CMMC compliance tools.
Boeing Supply Chain
DoD increasingly requires primes to verify subcontractor cybersecurity, making CMMC certification essential for small suppliers in Boeing's aerospace corridor.
The grant
How much does a CMMC gap assessment cost in Washington?
Through the CMMC gap assessment grant, it is an in-kind award. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and identifies the gaps that stand between you and CMMC Level 2.
Leave knowing where you stand
You receive a prioritized list of your compliance gaps by severity, so you know what to fix first.
Questions
Frequently asked questions: Washington CMMC grants
Who qualifies for the CMMC gap assessment grant in Washington?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Washington businesses supporting Joint Base Lewis-McChord, Naval Base Kitsap, Whidbey Island NAS, Fairchild AFB, or Boeing's aerospace supply chain are typical candidates.
How much does a CMMC gap assessment cost in Washington?
Through the Cyber Grants Alliance program, the assessment is delivered as an in-kind grant. You receive the assessment itself from a certified partner. 100 grants are available.
What is Washington's MEP center?
Impact Washington is Washington's Manufacturing Extension Partnership center. It provides NIST-based cybersecurity readiness assessments and federal contracting support, including SAM.gov registration and DoD contracting help, with offices serving Seattle, Tacoma, Spokane, and the Puget Sound region.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Washington need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. For Boeing's aerospace suppliers, primes increasingly verify subcontractor compliance, so a gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards. Confirm eligibility and submit in minutes.
Or email info@cybergrantsalliance.org or call +1 (888) 323-9991