CMMC in California
CMMC help for California defense contractors
California took in $42.9 billion in Defense Department contracts in fiscal 2024, second among the states, and more DoD grant money than any other state.
California's defense contracting base
Sourced facts- In FY2024 DoD contract spending in California was $42.9 billion, second among states.Source: oldcc.gov
- California ranked second in total FY2024 defense spending at $63.2 billion and first in DoD grants at $1.04 billion.Source: oldcc.gov
- In FY2023 California's top defense contractors were Northrop Grumman ($3.8 billion), Lockheed Martin ($2.4 billion) and Boeing ($2.1 billion).Source: oldcc.gov
- Los Angeles ($12.0 billion) and San Diego ($10.9 billion) counties led California defense contract spending in FY2023.Source: oldcc.gov
- San Diego County had 112,645 defense personnel in FY2023, the most in California.Source: oldcc.gov
What CMMC looks like in California
Southern California carries most of the load: aerospace in Los Angeles County and naval and unmanned systems around San Diego. The supply chain beneath those primes is full of small machine shops, composites makers and engineering firms, many family run, that handle drawings marked CUI every week.
California has no active NIST MEP center right now. NIST lists the previous center as former and opened a new competition for the state in July 2026. Until a new center is named, the regional APEX Accelerators are the main public starting point.
Public help in California
APEX and MEPAPEX Accelerators
APEX Accelerators, formerly the Procurement Technical Assistance Program, are managed by the Defense Department's Office of Small Business Programs and help businesses compete for government contracts. Many also point contractors to cybersecurity readiness resources such as Project Spectrum. Source: virginiaapex.org
- San Diego, Orange, Imperial APEX Accelerator, hosted by Southwestern College (San Diego, Orange and Imperial counties)
- Los Angeles County APEX Accelerator, hosted by LA County Department of Economic Opportunity (Los Angeles County)
- Inland Empire APEX Accelerator, hosted by Riverside Community College District (Riverside and San Bernardino counties)
- Golden State APEX Accelerator, hosted by a regional program (Kern, Santa Barbara, San Luis Obispo and Ventura counties)
- Monterey Bay APEX Accelerator, hosted by a regional program supported by the Monterey County Business Council (Central Valley and Central Coast)
- California Capital APEX Accelerator, hosted by California Capital Financial Development Corporation (Sacramento region and northern interior)
- Norcal APEX Accelerator, hosted by a regional program (Bay Area and North Coast)
Manufacturing Extension Partnership
The NIST Manufacturing Extension Partnership (MEP) network helps small and mid-sized manufacturers, including with cybersecurity.
California has no active MEP center at the moment; see above.
Where we fit
The public programs above are the right first call for contracting basics. When you need hands-on work inside your own systems, use the form. Pick paid help and Capital Cyber scopes a CMMC gap assessment and remediation plan with you. Pick no-cost help and your request goes to Cyber Grants Alliance, a nonprofit that provides in-kind cybersecurity support to eligible small businesses, at no cost to you.