The US department of defense has begun to enforce the cmmc or cybersecurity maturity model certification requirement of their vendors

The National Institute of Standards and Technology (NIST) awarded a $962,974.90 Project Grant under the Congressionally-Identified Projects program (CFDA 11.617) to Move America, Inc., a non-profit organization, to help regional small businesses in Prince George's County, Maryland improve their cybersecurity posture and align with Cybersecurity Maturity Model Certification (CMMC) requirements. The grant aims to conduct a business impact analysis, develop educational programs and training tools, and establish a regional accelerator to increase awareness and build capacity among small businesses to meet CMMC standards and participate in defense sector contracting. The award was made on September 15, 2024, with an expected completion date of August 14, 2025.

Activities

In a multi-phase program, moveamerica will begin by conducting a business impact analysis or market assessment to determine exactly what is needed for small businesses to meet the cmmc requirements. This will lead to very specific guidance for education partners, from high school, community colleges, and universities, who can then adjust their educational programs to address the training and education gaps found in the business impact analysis. A pilot cohort of students, faculty and business owners will work to generate ideas to support the training needs common to local small businesses. This will lead to the development of tools to assist a typical small business in assessing their own cybersecurity posture, addressing areas of risk and ensuring cmmc compliance. The plan includes development of a curriculum to address the top needs, leading to workshops and other hands-on methodologies.

Expected outcomes

The creation of a regional accelerator will increase general awareness among small business owners of common cybersecurity risks, how one might assess cybersecurity readiness, what cmmc requirements are and how one achieves them, and additional knowledge of the pathways to becoming a defense sector contractor in prince george?S county. IT is expected that this effort will lead to a more robust cybersecurity posture by participants in the cohort, better match of education to workforce needs, and improvements to workforce development.

Intended beneficiaries

Small businesses will benefit from greater defense capability from common cybersecurity risk factors; their employees will have significantly improved their knowledge and skills about cybersecurity threats; and the economy will benefit from greater local defense sector contracting and workforce opportunities.

Subrecipient activities

The applicant intends to supplement their staff via contractor services, as needed.