Washington · Pacific Northwest
Washington cybersecurity grants for defense contractors
Washington is anchored by Joint Base Lewis-McChord, major Pacific Northwest naval operations, and one of the nation's largest aerospace manufacturing bases through Boeing's defense division. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Washington's defense work come from?
Washington's defense economy spans Army logistics, the Pacific Northwest submarine fleet, naval electronic warfare, air mobility, and Boeing's aerospace supply chain, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Tacoma / Lakewood
Joint Base Lewis-McChord
A major Army and Air Force installation supporting logistics, training, and deployment. Generates contracting in I-5 corridor logistics, aviation support, and Army acquisition, with contractors handling sensitive logistics and operational support materials.
Bremerton / Silverdale
Naval Base Kitsap
Home to the Navy's submarine fleet in the Pacific Northwest, generating contracting in ship maintenance, submarine support, logistics, and specialized technical services for the Trident missile program.
Oak Harbor
Whidbey Island Naval Air Station
The primary base for Navy Prowler and Growler electronic warfare aircraft, generating contracting in aviation maintenance, electronic warfare support, and training services.
Spokane
Fairchild Air Force Base
A key Air Mobility Command hub for air refueling and airlift, generating contracting in logistics, aircraft maintenance, and training support for Pacific theater operations.
Puget Sound
Boeing Aerospace Supply Chain
Boeing's Puget Sound defense operations produce military aircraft, missiles, and space systems, with hundreds of suppliers that must meet NIST SP 800-171 requirements to keep their contract positions.
Your local partner
Who is Washington's CMMC and manufacturing partner?
Impact Washington is Washington's Manufacturing Extension Partnership center. It provides specialized cybersecurity readiness and federal contracting support to defense contractors and manufacturers throughout the Pacific Northwest, with offices serving Seattle, Tacoma, Spokane, and the Puget Sound region.
Cybersecurity readiness
Impact Washington offers technology assessments that identify security gaps relevant to NIST SP 800-171 and CMMC Level 2 requirements.
Federal contracting support
Impact Washington helps small businesses navigate DoD contracting, including SAM.gov registration, market research, and teaming agreements.
More resources
What other cybersecurity support can Washington businesses use?
Beyond the grant, Washington businesses can tap additional support through federal resources and their local aerospace supply chain.
CISA Pacific Region
CISA's Pacific Region office serves Washington and the Pacific Northwest, providing threat intelligence, cybersecurity exercises, and incident-response planning for defense contractors.
Impact Washington
Washington's MEP center connects contractors near JBLM, Naval Base Kitsap, and Boeing facilities with cybersecurity assessments and CMMC compliance tools.
Boeing Supply Chain
DoD increasingly requires primes to verify subcontractor cybersecurity, making CMMC certification essential for small suppliers in Boeing's aerospace corridor.
The grant
How much does a CMMC gap assessment cost in Washington?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Washington CMMC grants
Who qualifies for the CMMC gap assessment grant in Washington?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Washington businesses supporting Joint Base Lewis-McChord, Naval Base Kitsap, Whidbey Island NAS, Fairchild AFB, or Boeing's aerospace supply chain are typical candidates.
How much does a CMMC gap assessment cost in Washington?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Washington's MEP center?
Impact Washington is Washington's Manufacturing Extension Partnership center. It provides NIST-based cybersecurity readiness assessments and federal contracting support, including SAM.gov registration and DoD contracting help, with offices serving Seattle, Tacoma, Spokane, and the Puget Sound region.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Washington need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. For Boeing's aerospace suppliers, primes increasingly verify subcontractor compliance, so a gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.