CMMC in Virginia
CMMC help for Virginia defense contractors
No state takes in more Defense Department contract dollars than Virginia: $53.7 billion in fiscal 2024. Defense spending equals 10 percent of the state's economy.
Virginia's defense contracting base
Sourced facts- In FY2024 DoD contract spending in Virginia was $53.7 billion, the highest of any state.Source: oldcc.gov
- Virginia ranked first in total FY2024 defense spending at $76.2 billion, equal to 10.0 percent of state GDP.Source: oldcc.gov
- In FY2023 Huntington Ingalls was Virginia's top defense contractor at $3.8 billion, followed by Leidos at $2.3 billion.Source: oldcc.gov
- Fairfax County led Virginia defense contract spending in FY2023 at $18.3 billion.Source: oldcc.gov
- Norfolk had the most defense personnel in Virginia in FY2023, 65,035, and the Navy and Marine Corps accounted for 38 percent of contract dollars.Source: oldcc.gov
What CMMC looks like in Virginia
Virginia has two defense economies. Northern Virginia, led by Fairfax County, is services and technology: IT, engineering, analysis and program support, most of it handling Controlled Unclassified Information on laptops and cloud systems. Hampton Roads is ships: building, repairing and supplying the Navy, with a long tail of small marine, electrical and fabrication subcontractors.
Both feel CMMC differently. A Northern Virginia services firm usually has the IT staff but a sprawling cloud footprint to scope. A Hampton Roads subcontractor often has a shop floor, a front office and one person who handles computers on the side.
Public help in Virginia
APEX and MEPAPEX Accelerators
APEX Accelerators, formerly the Procurement Technical Assistance Program, are managed by the Defense Department's Office of Small Business Programs and help businesses compete for government contracts. Many also point contractors to cybersecurity readiness resources such as Project Spectrum. Source: virginiaapex.org
- Virginia APEX Accelerator, hosted by George Mason University (most of the state, with offices in Fairfax, Fredericksburg and Virginia Beach)
- Southwest Virginia Community College APEX Accelerator, hosted by Southwest Virginia Community College (far Southwest Virginia)
Manufacturing Extension Partnership
The NIST Manufacturing Extension Partnership (MEP) network helps small and mid-sized manufacturers, including with cybersecurity.
- GENEDGE, hosted by Virginia's NIST MEP center
Where we fit
The public programs above are the right first call for contracting basics. When you need hands-on work inside your own systems, use the form. Pick paid help and Capital Cyber scopes a CMMC gap assessment and remediation plan with you. Pick no-cost help and your request goes to Cyber Grants Alliance, a nonprofit that provides in-kind cybersecurity support to eligible small businesses, at no cost to you.