Grants
In-Kind Cybersecurity Grants for Small Businesses
Learn how to access in-kind grants to improve your cybersecurity posture. The CGA grant program and CMMC Gap Assessment grants are provided at no cost to eligible businesses.
Many small businesses do not realize that in-kind grants exist to help them improve their cybersecurity. Cyber Grants Alliance (CGA), a nonprofit, runs five in-kind programs with sponsor partners. In-kind means the grant is a service: an approved provider does the work and you do not pay for it.
What does a CGA grant cover?
CGA lists five programs on its grant programs page (Cyber Grants Alliance: Grant Programs):
- CMMC Level 1 Gap Assessment, for organizations that handle Federal Contract Information
- CMMC Level 2 Gap Assessment, for organizations that handle Controlled Unclassified Information
- Cybersecurity Training, with security training modules, phishing simulations and incident response training
- Silver CyberCert Certification
- Gold CyberCert Certification
What does a grant not cover?
Each grant covers the service it names. The Level 2 gap assessment, for example, does not include a detailed written assessment report, C3PAO readiness preparation, a remediation roadmap or a Plan of Action and Milestones. Those are available separately from the sponsor (Cyber Grants Alliance).
Who can apply?
CGA reviews eligibility from your business size, industry and compliance needs. Defense contractors that handle Federal Contract Information or Controlled Unclassified Information look at the CMMC gap assessment grants. See CMMC gap assessment grants for who they suit.
How do I apply?
You apply once on the CGA website, and CGA matches you with the program and sponsor that fit. Start the application, or see how the grants work.
Last reviewed:
Ready to close your cybersecurity gap?
Start with a grant application if budget is the blocker, or talk to a specialist if you are ready to buy.
Or email info@cybersecuritynearme.ai