FY26 NSGP NOFO_Final.pdf

Notice of Funding Opportunity

Application due: July 24, 2026

Nonprofit Security Grant Program

(NSGP)

Assistance Listing Number: 97.008

Funding Opportunity Number: DHS-26-GPD-008-00-99

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Contents

Before you begin 2

Step 1: Review the Opportunity 3

Basic information 4

Eligibility 5

Program Description 8

Step 2: Get Ready to Apply 21

Submission Requirements and Application Deadlines 22

Step 3: Write Your Application 25

Application Contents and Format 26

Step 4: Learn About the Award Review Process 29

Application Review Information 30

Intergovernmental Review 35

Step 5: Learn What Happens After Award 37

Award Notices 38

Post-Award Requirements and Administration 39

Other Information 48

Contacts and Appendices 55

Contacts 56

Appendices 58

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Before you begin

If you believe you are a good candidate for this funding opportunity, secure your System for

Award Management (SAM.gov) and Grants.gov registrations now. If you are already registered, make sure your registration is active and up-to-date.

(a) SAM.gov registration (this can take several weeks)

You must have an active account with SAM.gov. This includes having a Unique Entity Identifier (UEI).

See Step 2: Get Ready to Apply

(b) Grants.gov registration (this can take several days)

You must have an active Grants.gov registration. Doing so requires a Login.gov registration as well.

See Step 2: Get Ready to Apply

Fraud, waste, abuse, mismanagement, and other criminal or noncriminal misconduct related to this program may be reported to the Office of Inspector General (OIG) Hotline. The toll-free numbers to call are 1-(800)-323-8603 and TTY 1-(844)-889-4357

To help you find what you need, this NOFO uses internal links. In Adobe Reader, you can go back to where you were before clicking an internal link by pressing Alt + Left Arrow (Windows) or Command + Left Arrow (Mac) on your keyboard.

https://sam.gov/ https://grants.gov/ https://login.gov/

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

A. Step 1: Review the Opportunity

In this step

Basic information 4

Eligibility 5

Program description 8

Jump to a step

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

1. Basic Information A. Award Facts

Agency Name: Department of Homeland Security (DHS),Federal

Emergency Management Agency (FEMA), Resilience, Grant Programs

Directorate, Preparedness Grants Division, Nonprofit Security Grant

Program

Assistance Listing Number: 97.008

Notice of Funding Opportunity (NOFO) Title: Fiscal Year (FY) 2026

Nonprofit Security Grant Program (NSGP)

Funding Opportunity Number: DHS-26-GPD-008-00-99

Announcement Type: Initial

Expected Award Range:

• NSGP - Urban Area (NSGP-UA): $269,000 – $32 million

• NSGP - State (NSGP-S): $0 or 1.4 million - $5.9 million

Expected Total Funding: $300,000,000

• Subtotal for NSGP-UA: $150 million

• Subtotal for NSGP-S: $150 million

Anticipated Number of Awards: 56 Awards

1. Executive Summary The FY 2026 Nonprofit Security Grant Program (NSGP) enhances the physical/cybersecurity and facility/target hardening of nonprofit organizations’ facilities at risk of terrorist or other extremist attacks, ultimately safeguarding the lives and property of the American people.

The State Administrative Agency (SAA) is responsible for administering

NSGP funds and coordinating with eligible nonprofit organizations.

In FY 2026, there are two funding sources available for nonprofit organizations:

1. NSGP - Urban Area (NSGP-UA): Provides funding to nonprofit organizations located within FY 2026 designated high-risk urban areas. Each NSGP-UA recipient will receive an allocation for nonprofit organizations within FY 2026 designated high-risk urban areas.

2. NSGP - State (NSGP-S): Provides funding to nonprofit organizations located outside of a FY 2026 designated high-risk urban area. Each NSGP - S recipient will receive an allocation for nonprofit

Key Dates

Projected Application Start

Date: June 24, 2026

Projected Application End

Date: July 24, 2026

Anticipated Funding

Selection Date:

No later than 09/30/2026

Anticipated Award Date:

No later than 09/30/2026

Projected Period of

Performance Start Date:

09/1/2026

Projected Period of

Performance End Date:

08/31/2029

Budget Period:

09/1/2026 - 08/31/2029

Have questions? See Contacts and Support

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts organizations in the state located outside of FY 2026 designated high-risk urban areas.

2. Eligibility A. Eligible Entities

Only the following entities or entity types are eligible to apply.

(1) Applicant Eligibility

Note: Throughout this funding notice, the term “applicant” refers to the SAA, and the term

“subapplicant” refers to the nonprofit organization. Consistent with the commitment to clarity and transparency, most of this NOFO’s information identifies actions for the applicant to take, not the subapplicant. Contact FEMA-NSGP@fema.dhs.gov with questions.

All states, territories and FEMA identified high-risk urban areas SAAs are deemed the only applicants eligible to apply to FEMA for funding. Nonprofit organizations are eligible as subapplicants to SAAs.

Nonprofit organizations may NOT apply directly to the Department of Homeland Security (DHS)/FEMA for

FY 2026 NSGP funds.

Additional information on the subapplicant processes specific to nonprofit organizations is included in the

Subapplicant Eligibility subsection of this funding notice.

SAAs, in coordination with the Urban Area Working Groups (UAWG) or other relevant state partners, are encouraged to notify and actively inform eligible nonprofit organizations of the availability of FY 2026

NSGP funding.

NSGP-UA funds nonprofit organization located within the FY 2026 designated high-risk urban area. Under

NSGP-UA, each urban area will receive an allocation for nonprofit organizations located within a designated high-risk urban area. See Appendix B for the complete list.

NSGP-S funds nonprofit organizations located outside of a FY 2026 designated high-risk urban area. Under

NSGP-S, each state will receive an allocation for nonprofit organizations in the state located outside of FY 2026 Designated high-risk urban areas. See Appendix C for the FY 2026 Allocations.

(2) Subapplicant Eligibility

Nonprofit organization subapplicants and subawards are allowed. However, Nonprofit organizations may NOT apply to FEMA directly.

Nonprofit organizations must apply for the FY 2026 NSGP through their SAA, which is responsible for submitting application information to FEMA. A list of SAA points of contact is available at: State Administrative Agency (SAA) Contacts | FEMA.gov. Subawards are permitted under the NSGP. The SAA receives the award and subsequently distributes funds to nonprofit organizations, which are considered subrecipients. All funds provided to nonprofit organizations are classified as subawards.

mailto:FEMA-NSGP@fema.dhs.gov https://www.fema.gov/grants/preparedness/about/state-administrative-agency-contacts https://www.fema.gov/grants/preparedness/about/state-administrative-agency-contacts

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Nonprofit organizations eligible to apply as subapplicants to the SAA are those organizations that are:

1. Described under section 501(c)(3) of the Internal Revenue Code of 1986 (IRC) and exempt from tax under section 501(a) of such code. This includes entities designated as “private” (e.g., private institutions of higher learning), as private colleges and universities can also be designated as

501c3 entities.

Note: The Internal Revenue Service (IRS) does not require certain organizations such as churches, mosques, and synagogues to apply for and receive a recognition of exemption under section

501(c)(3) of the IRC. Such organizations are automatically exempt if they meet the requirements of section 501(c)(3). These organizations are not required to provide recognition of exemption. For organizations that the IRS requires to apply for and receive a recognition of exemption under section 501(c)(3), the state may not require recognition of exemption, if the method chosen is applied consistently.

Refer to links below for additional information:

▪ Exemption Requirements - 501(c)(3) Organizations | Internal Revenue Service (irs.gov)

▪ Publication 557 (01/2022), Tax-Exempt Status for Your Organization | Internal Revenue

Service (irs.gov)

▪ Charities and Nonprofits | Internal Revenue Service (irs.gov)

2. Able to demonstrate, through the application, that the organization is at high risk of a terrorist or other extremist attack; and

3. For NSGP-UA, located within a FY 2026 designated high-risk urban area; or for NSGP-S, located outside of a FY 2026 designated high-risk urban area.

Examples of eligible subapplicant organizations can include houses of worship, museums, educational facilities, senior centers, community centers, and day camps, among many others.

B. Project Type Eligibility

(3) Allowable Project Types

Allowable costs generally must fall into the categories of planning, equipment, training, or exercises.

Please see Appendix A: Allowable Costs for more information on allowable costs.

If there are any questions regarding allowable costs, please contact the appropriate FEMA Headquarters

(HQ) Preparedness Officer (or contact fema-nsgp@fema.dhs.gov for information on the designated HQ Preparedness Officer).

(4) Unallowable Project Types

See Program-Specific Unallowable Costs for more information on unallowable project types.

C. Requirements for Personnel, Partners, and Other Parties An application submitted by an otherwise eligible non-federal entity (which for this program is the SAA) https://www.irs.gov/charities-non-profits/charitable-organizations/exemption-requirements-501c3-organizations https://www.irs.gov/publications/p557 https://www.irs.gov/publications/p557 https://www.irs.gov/charities-and-nonprofits mailto:fema-nsgp@fema.dhs.gov

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts may be deemed ineligible when the person that submitted the application (for the applicant [SAA]) is not:

1) a current employee, personnel, official, staff, or leadership of the non-federal entity; and

2) duly authorized to apply for an award on behalf of the non-federal entity at the time of application.

Further, the Authorized Organization Representative (AOR) must be a duly authorized current employee, personnel, official, staff or leadership of the recipient and provide an email address unique to the recipient (SAA) at the time of application and upon any change in assignment during the period of performance.

Consultants or contractors of the recipient are not permitted to be the AOR of the recipient.

Subapplicants/subrecipients should not include foreign nationals or noncitizens. If a subapplicant/subrecipients has foreign nationals, they must be properly vetted and must adhere to all government statues, polices, and procedures including “staff American, stay in America” and security requirements.

Subapplicants/subrecipients must submit short bios and resumes. This should include the type of entity, organizational leadership, and board members along with both the names and addresses of the individuals. Resumes are subject to approval.

D. Maximum Number of Applications The maximum number of applications that can be submitted is: One (1) per state.

Nonprofit organizations must apply through their respective SAA. See the Eligible Entities section above for more information about the SAA, nonprofit organization, and applicant/subapplicant roles and responsibilities. For NSGP-UA and NSGP-S, consistent with prior years, each nonprofit organization may only represent one site/location/physical address per application. For example, a nonprofit organization with one site may apply for up to $200,000 for that site.

Nonprofit organizations with multiple sites, locations, or physical addresses may apply for funding for up to three sites per funding stream (NSGP-S and NSGP-UA), at a maximum of $200,000 per site, not to exceed

$600,000 total per state. Nonprofit organizations with locations in multiple states may apply for up to three sites per funding stream in each state. For example, a nonprofit organization with sites in both

NSGP-S and NSGP-UA areas within a state may apply for up to six sites, but the combined award total cannot exceed $600,000 per state.

Appendix B provides a table of eligible Urban Areas for FY 2026 applicable to the NSGP-UA funding stream.

Nonprofit organizations located outside of these Urban Areas should apply under the NSGP-S program.

If a nonprofit subapplicant applies for projects at multiple sites, each site’s application must include a vulnerability and risk assessment specific to that location, regardless of whether the projects are similar in nature. One vulnerability assessment is required per physical address. Failure to provide a unique assessment for each site may result in the rejection of the application.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

E. Additional Restrictions None

F. References to Other Eligibility Factors Please see the following other eligibility references provided below:

1. “Threshold Review Criteria” subsection

2. “Financial Integrity Criteria” subsection

3. “Supplemental Financial Integrity Criteria and Review” subsection

4. FEMA may request financial information such as the Employer Identification Number (EIN) and bank information as part of the potential award selection. This will apply to everyone who benefits from the award, including subrecipients.

G. Cost Share Requirements There is no cost share requirement for the FY 2026 NSGP.

H. Cost Share Description, Type, and Restrictions Not applicable.

I. Cost Share Example

J. Required Information for Verifying Cost Share

(5) Maintenance of Effort

3. Program Description A. Program Purpose

NSGP is one of the grant programs that support DHS/FEMA’s focus on enhancing the ability of state, local, tribal, and territorial governments, as well as nonprofits, to prevent, protect against, prepare for, and respond to terrorist or other extremist attacks. These grant programs are part of a comprehensive set of measures authorized by Congress and implemented by DHS to help strengthen the nation’s communities against potential terrorist or other extremist attacks. The NSGP is a competitive grant program intended to provide federal funding for physical security enhancements and other security-related activities nonprofit organizations that are at risk of terrorist attack.

DHS is focused on the criticality of information sharing and collaboration in building a national mindset of preparedness and protecting against terrorism and other threats to our national security. DHS and its homeland security mission were born from the “failures among federal agencies and between the federal

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts agencies and state and local authorities to share critical information related to the threat of terrorism” prior to the September 11, 2001, attacks. However, the threat profile has changed in the past two decades.

We now face continuous cyberattacks by sophisticated actors, as well as ongoing threats to soft targets and crowded places, such as schools, churches, synagogues, mosques, and other nonprofit entities.

NSGP reflects DHS’s commitment to risk-informed investment, collaboration, and resilience. To ensure that priorities reflect the current threat environment, FEMA’s Preparedness Grant Programs are guided by annually designated National Priority Areas (NPAs).

The FY 2026 NPAs did not change from FY 2025. They are:

1. Enhancing the protection of soft targets and crowded places. (This includes faith-based organizations and election sites)

2. Supporting Homeland Security Task Forces and fusion centers;

3. Enhancing and integrating cybersecurity resiliency;

4. Enhancing election security; and

5. Border Crisis Response and Enforcement Support.

For FY 2026, the Administration encourages applicants to propose innovative solutions that support the broader homeland security mission reflected in the NPAs, as applicable.

The NSGP has significantly contributed to the improvement and increase in the physical/cyber security and facility/target hardening of nonprofit organizations’ facilities, ultimately safeguarding the lives and property of the American people. Nonprofit organizations tend to be high-profile and/or visible targets of group- or identity-based attacks because the populations affiliated with these organizations are usually members of a group with a shared identity (religious, ideological, mission-based, etc.). The frequency and severity of attacks – whether they are hate-based, group-based, opportunistic, or random – are increasing.

The Federal Bureau of Investigation (FBI) reported more than 11,862 hate or bias-based attacks in 2023, an increase from previous years.

Nonprofit organizations tend to not have the resources, capital, or experience to secure facilities and implement costly and effective (i.e., state-of-the-art) security measures to protect the individuals who use their services or facilities from the increasing acts of violence perpetrated against populations who affiliate with these, often identity-based, nonprofits.

In FY 2025, the types of equipment nonprofit organizations requested and received the most NSGP funding for included:

1) Video assessment and security systems;

2) Impact resistant doors and gates;

3) Physical access control systems;

4) Jersey walls, fences, and other barriers; and

5) Fixed area lighting.

By providing crucial funding to high-risk non-profit organizations, the NSGP supports the ability of non-profit organizations to protect themselves and the individuals targeted by affiliation.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

In the history of the program, over $2 billion has been allocated to nonprofit organizations and over 18,000 applications have been awarded. In recent years:

▪ NSGP emphasized the integration of preparedness activities of nonprofit organizations with broader state and local preparedness efforts.

▪ Funding priorities evolved to include spending Planning, Organizational, Equipment, Training, and Exercises (POETE) towards addressing the NPAs.

B. Goals and Objectives This program will improve and increase the physical/cybersecurity and facility/target hardening of nonprofit organizations’ facilities at risk of a terrorist of other extremist attack, ultimately safeguarding the lives and property of the American people. Concurrently, the NSGP will integrate the preparedness activities of nonprofit organizations that are at high risk of a terrorist or other extremist attack with broader state and local preparedness efforts.

Objectives: NSGP, via SAAs, provides funds to nonprofit organizations that are at high risk of terrorist or other extremist attack to meet the following three objectives throughout the period of performance:

1. Enhance equipment and conduct security-related activities to improve the security posture of nonprofit organizations that are at high risk of a terrorist or other extremist attack.

• With this funding, build and sustain core capabilities, as identified in individual nonprofit organization Vulnerability Assessments, of high-risk nonprofit organizations in the annual national priority areas. See the table on FY 2026 NSGP funding priorities.

2. Address and close capability gaps that are identified in individual nonprofit organization Vulnerability Assessments via funding spent on Planning, Equipment, and Training and

Exercises that aim to enhance the protection of soft targets and crowded places.

• Planning – carrying out risk management for the protection of programs and activities, risk and disaster resilience assessment, threats, and hazard identification, as well as operational coordination.

• Equipment– Strengthening security infrastructure, technology, and protective measures.

• Training & Exercises – long-term vulnerability reduction via preparedness training, public information and warning enhancement, and threat response exercises.

3. Strengthen relationships across nonprofit organizations, state, local, and territorial homeland security agencies for a whole community approach to preparedness.

• Implementing a comprehensive and coordinated (whole of community) approach to preparedness can address enduring security needs, including effective planning, training and awareness campaigns, and exercises. See the table on FY 2026 NSGP Funding

Priorities.

Priorities: Given the evolving threat landscape, it is incumbent upon DHS/FEMA to continuously evaluate the national risk profile and set priorities that help ensure appropriate allocation of scarce security dollars.

The FY 2026 NPAs reflect FEMA’s broader mission across all preparedness efforts. Applicants should be

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts familiar with these NPAs, as they represent DHS’s current focus areas and may shape future guidance:

▪ Enhancing Protection of Soft Targets/Crowded Places

▪ Supporting Homeland Security Task Forces and Fusion Centers

▪ Enhancing Cybersecurity

▪ Enhancing Election Security

▪ Supporting Border Crisis Response and Enforcement

Enduring needs include:

▪ Effective planning

▪ Training and awareness campaigns

▪ Equipment and capital projects

▪ Exercises

The table below provides a breakdown of the NPAs, and core capabilities impacted, as well as examples of eligible project types for each area. More information on allowable investments can be found in the

Funding Restrictions and Allowable Costs section below.

FY 2026 NSGP Funding Priorities

All priorities reflected in this table align with the Safety and Security Lifelines.

Priority Areas Core Capabilities

Enhanced Example Project Types

National Priorities

Enhancing the Protection of Soft Targets/Crowded Places

▪ Planning

▪ Operational coordination

▪ Public information and warning

▪ Intelligence and

Information Sharing

▪ Interdiction and disruption

▪ Screening, search, and detection

▪ Access control and identity verification

▪ Physical protective measures

▪ Risk management for protection programs and

▪ Private contracted security guards

▪ Physical security enhancements o Closed circuit television

(CCTV) security cameras o Security screening equipment for people and baggage o Access controls

▪ Fencing, gates, barriers, etc.

▪ Card readers, associated hardware/software

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhanced Example Project Types activities

▪ Long-term vulnerability reduction

▪ Situational assessment

▪ Infrastructure systems

Supporting Homeland

Security Task Forces and Fusion Centers

▪ Intelligence and information sharing

▪ Interdiction and disruption

▪ Public information and warning

▪ Operational coordination

▪ Risk management for protection programs and activities

▪ Establishing or enhancing multi-agency Homeland Security Task Forces (HSTFs), including operational coordination centers

▪ Enhancing capabilities and integration with local fusion centers

▪ Procurement of technology or equipment to support surveillance, communications, and data analysis

▪ Development of standard operating procedures for information sharing, joint operations, and immigration enforcement coordination

▪ Personnel training, credentialing, and certification to improve interoperability and mission alignment

▪ Intelligence analysis, reporting, and suspicious activity monitoring

▪ Exercises and simulations focused on joint operations, intelligence sharing, or interdiction/disruption of criminal or smuggling networks

▪ Community engagement efforts to foster trust and encourage threat reporting

▪ Information sharing with all DHS components; fusion centers; other operational, investigative, and

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhanced Example Project Types analytic entities; and other federal law enforcement and intelligence entities

▪ Cooperation with DHS and other entities in intelligence, threat recognition, assessment, analysis, and mitigation

▪ Identification, assessment, and reporting of threats of violence

▪ Intelligence analysis training, planning, and exercises

▪ Coordinating the intake, triage, analysis, and reporting of tips/ leads and suspicious activity, to include coordination with the Nationwide Suspicious Activity Reporting (SAR) Initiative (NSI)

Enhancing Cybersecurity ▪ Cybersecurity

▪ Intelligence and

Information Sharing

▪ Interdiction and disruption

▪ Long-term vulnerability reduction

▪ Cybersecurity enhancements o Risk-based cybersecurity planning and training o Improving cybersecurity of access control and identify verification systems o Improving cybersecurity of security technologies (e.g., CCTV systems)

▪ Adoption of cybersecurity performance goals (CISA's Cross-

Sector Cybersecurity Performance

Goals)

Enhancing Election Security

▪ Cybersecurity

▪ Intelligence and information sharing

▪ Planning

▪ Long-term vulnerability reduction

▪ Situational assessment

▪ Prioritize compliance with the VVSG 2.0 established by the U.S.

Election Assistance Commission

▪ Complete testing through a VSTL accredited by the U.S. Election

Assistance Commission

▪ Physical security planning and exercise support

▪ Physical/site security measures – https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.dhs.gov/nationwide-sar-initiative-nsi https://www.cisa.gov/cpg https://www.cisa.gov/cpg https://www.cisa.gov/cpg

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhanced Example Project Types

▪ Infrastructure systems

▪ Operational coordination

▪ Community resilience e.g., locks, shatter proof glass, alarms, access controls, etc.

▪ General election security navigator support

▪ Cyber and general election security navigator support

▪ Cybersecurity risk assessments, training, and planning

▪ Projects that address vulnerabilities identified in cybersecurity risk assessments

▪ Iterative backups, encrypted backups, network segmentation, software to monitor/scan, and endpoint protection

▪ Distributed Denial of Service protection

▪ Migrating online services to the

“.gov” internet domain

▪ Public awareness/preparedness campaigns discussing election security and integrity measures

▪ Long-term vulnerability reduction and community resilience

Supporting Border Crisis

Response and Enforcement

▪ Training and awareness

▪ Community resilience

▪ Operational coordination

▪ Risk management for protection programs and activities

▪ Staffing support to expand 287(g) screening operations within correctional facilities

▪ Operational overtime costs directly tied to 287(g) screening, processing, and enforcement activities

▪ Training programs for state and local law enforcement officers in immigration law, civil rights protections, and 287(g) procedures

▪ Development or enhancement of information-sharing platforms between ICE and local agencies

▪ Procurement of screening,

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhanced Example Project Types detection, and communications technology to support immigration enforcement activities

▪ Establishing secure and dedicated communication networks with ICE Field Offices

▪ Conducting joint training exercises with ICE and local law enforcement to test operational coordination

▪ Support for facilities upgrades, such as creating dedicated interview rooms and secure processing spaces

▪ Community engagement and public briefings to promote transparency and understanding of 287(g) operations and protections

Enduring Needs

Planning ▪ Planning

▪ Risk management for protection programs and activities

▪ Risk and disaster resilience assessment

▪ Threats and hazards identification

▪ Operational coordination

▪ Conduct or enhancement of security risk assessments

▪ Development of:

o Security plans and protocols o Emergency/contingency plans o Evacuation/shelter in place plans

Training & Awareness

▪ Long-term vulnerability reduction

▪ Public information and warning

▪ Active shooter training, including integrating the needs of persons with disabilities

▪ Security training for employees

▪ Public awareness/preparedness

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

Enhanced Example Project Types campaigns

Exercises ▪ Long-term vulnerability reduction

▪ Response exercises

C. Performance Measures and Targets FEMA will calculate and analyze the metrices through a review of recipient Biannual Strategy

Implementation Report (BSIR) updates and award monitoring to ensure that the funds are expended for their intended purpose and achieve the stated outcomes in the grant application.

1. Percentage of agreed-upon security personnel deployed by subrecipients to enhance visible deterrence and reduce threats at high-risk facilities.

Target: By 2029, ensure that 100% of agreed-upon contract security personnel hired by high-risk nonprofit subrecipients are using awarded funding.

2. Percentage of cybersecurity vulnerabilities, equipment, or resources identified that were addressed.

Target: By 2029, achieve 100% of identified cybersecurity vulnerabilities, equipment or resource gaps that were successfully addressed by nonprofits organizations using NSGP funds.

3. Performance Measure: Percentage of identified vulnerabilities addressed by nonprofit recipients through NSGP-funded security and safety projects, as described in vulnerability assessments.

Target: By 2029, ensure that 100% of high-risk nonprofits implement security and safety projects through the purchase or installation of equipment and technology to enhance or sustain facility hardening, strengthening their resilience against potential threats.

4. Performance Measure: Percentage of preparedness activities (e.g. planning, awareness campaign, training, and exercises) implemented by each nonprofit.

Target: By 2029, ensure that 100% of nonprofits’ preparedness activities outlined in the

Investment Justification (IJ) are successfully implemented with annual incremental targets.

D. Federal Assistance Type Grant

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

E. Program-Specific Unallowable Costs The following projects and costs are considered ineligible for award consideration:

▪ Organization costs, and operational overtime costs;

▪ Hiring of public safety personnel (excluding off duty law enforcement personnel in the capacity of contract security);

▪ General use expenditures;

▪ Overtime and backfill;

▪ Initiatives that do not address the implementation of programs/initiatives to build prevention and protection-focused capabilities directed at identified facilities and/or the surrounding communities;

▪ The development of risk/vulnerability assessment models;

▪ Initiatives that fund risk or vulnerability security assessments or the development of the

Investment Justification (IJ);

▪ Initiatives in which federal agencies are the beneficiary or that enhance federal property;

▪ Initiatives which study technology development;

▪ Proof-of-concept initiatives; and

▪ Direct or indirect pass-through of benefits to non-eligible entities.

Note: The above list may not be exhaustive. Please consult the applicable terms and conditions and with FEMA for more information.

F. General Funding Requirements Costs charged to federal awards (including federal and non-federal cost share funds) must comply with applicable statutes, rules and regulations, policies, this NOFO, and the terms and conditions of the federal award. This includes, among other requirements, that costs must be incurred, and products and services must be delivered within the budget period (see 2 C.F.R. § 200.403(h)).

Recipients may not use federal funds or any cost share funds for the following activities:

1. Matching or cost sharing requirements for other federal grants and cooperative agreements

(see 2 C.F.R. § 200.306).

2. Lobbying or other prohibited activities under 18 U.S.C. § 1913 or 2 C.F.R. § 200.450.

3. Prosecuting claims against the federal government or any other government entity (see 2

C.F.R. § 200.435).

G. Prohibition on Covered Equipment or Services FEMA provides additional resources regarding the prohibition on covered telecommunications equipment and services in its policy titled Prohibitions on Expending FEMA Award Funds for Covered Telecommunications Equipment or Services (FEMA Policy #405-143-1). This policy outlines specific requirements related to the prohibition. Additionally, FEMA's Contract Provisions Guide offers sample language for the required contract provisions.

Recipients, subrecipients, and their contractors or subcontractors must comply with the prohibitions set forth in Section 889 of the John S. McCain National Defense Authorization Act for Fiscal Year 2019, https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRea20080eff2ea53/section-200.403 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-D/section-200.306 https://uscode.house.gov/view.xhtml?req=(title:18%20section:1913%20edition:prelim)%20OR%20(granuleid:USC-prelim-title18-section1913)&f=treesort&edition=prelim&num=0&jumpTo=true https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.450 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.435 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/subpart-E/subject-group-ECFRed1f39f9b3d4e72/section-200.435 https://www.fema.gov/sites/default/files/documents/fema_policy-405-143-1-prohibition-covered-services-equipment-gpd.pdf https://www.fema.gov/sites/default/files/documents/fema_policy-405-143-1-prohibition-covered-services-equipment-gpd.pdf https://www.fema.gov/sites/default/files/documents/fema_contract-provisions-guide_fy24.pdf https://www.govinfo.gov/link/plaw/115/public/232

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts which restrict the purchase of covered telecommunications and surveillance equipment and services.

See 2 C.F.R. §§ 200.216, 200.327, 200.471, and Appendix II to 2 C.F.R. Part 200 for more information.

(1) Prohibition on Covered Foreign Unmanned Aircraft Systems (UAS)

Recipients, subrecipients, and their contractors or subcontractors must also comply with Section 1825 of the American Security Drone Act of 2023, enacted as part of the National Defense Authorization Act for Fiscal Year 2024 (Pub. L. No. 118-31 §§ 1821-33, 41 U.S.C. 3901 note prec.). This provision mandates that, beginning December 22, 2025, no federal funds awarded through a contract, grant, or cooperative agreement, or otherwise made available may be used to procure a covered unmanned aircraft system (UAS) that is manufactured or assembled by a covered foreign entity. Significantly, no funds may be used in connection with the operation of such a drone or UAS. For more information, refer to Public

Law 118-31 and OMB Memorandum M-26-02, Ensuring Government Use of Secure Unmanned Aircraft

Systems and Supporting United States Producers.

H. Beneficiary and Participant Eligibility

(2) Beneficiary

There are no program requirements. See Eligibility for additional information. This NOFO and any subsequent federal awards create no rights or causes of action for any beneficiary.

(3) Participant

There are no program requirements. This NOFO and any subsequent federal awards create no rights or causes of action for any participant.

This NOFO and any subsequent federal awards create no rights or causes of action for any beneficiary or participant. Please consult the DHS Standard Terms and Conditions, your awarding agency’s terms and conditions, and your awarding documents for more details.

I. Indirect Costs Indirect costs (IDC) are allowed for recipients and subrecipients.

IDC are costs incurred for a common or joint purpose benefiting more than one cost objective and not readily assignable to specific cost objectives without disproportionate effort. Applicants with a current negotiated IDC rate agreement who desire to charge indirect costs to a federal award must provide a copy of their IDC rate agreement with their applications. Not all applicants are required to have a current negotiated IDC rate agreement. Applicants that are not required to have a negotiated

IDC rate agreement, but are required to develop an IDC rate proposal, must provide a copy of their proposal with their applications. Applicants without a current negotiated IDC rate agreement

(including a provisional rate) and wish to charge the de minimis rate must reach out to FEMA for further instructions. Applicants who wish to use a cost allocation plan in lieu of an IDC rate proposal must reach out to FEMA for further instructions. As it relates to the IDC for subrecipients, a recipient must follow the requirements of 2 C.F.R. §§ 200.332 and 200.414 in approving the IDC rate for subawards.

https://www.ecfr.gov/current/title-2/section-200.216 https://www.ecfr.gov/current/title-2/section-200.327 https://www.ecfr.gov/current/title-2/section-200.471 https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200/appendix-Appendix%20II%20to%20Part%20200 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.congress.gov/bill/118th-congress/house-bill/2670 https://www.whitehouse.gov/wp-content/uploads/2025/11/M-26-02-Ensuring-Government-Use-of-Secure-Unmanned-Aircraft-Systems-and-Supporting-United-States-Producers.pdf https://www.whitehouse.gov/wp-content/uploads/2025/11/M-26-02-Ensuring-Government-Use-of-Secure-Unmanned-Aircraft-Systems-and-Supporting-United-States-Producers.pdf https://www.ecfr.gov/current/title-2/section-200.332 https://www.ecfr.gov/current/title-2/section-200.414

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

J. Budget Period There will be only a single budget period with the same start and end dates as the period of performance.

K. Pre-Award Costs Recipient (SAA) pre-award costs are allowable only with the prior written approval of DHS/FEMA and as included in the award agreement. To request pre-award costs, a written request must be included with the application signed by the SAA. The letter must outline what the pre-award costs are for, including a detailed budget break-out of pre-award costs from the post-award costs, and a justification for approval. Subrecipients cannot claim pre-award costs. Please contact your SAA should exigent circumstances exist.

L. Management and Administration Costs Management and Administration (M&A) costs are allowed.

M&A costs are not operational costs but are necessary costs incurred in direct support of the federal award or because of it, such as travel, meeting-related expenses, and salaries of full/part-time staff in direct support of the program. As such, M&A costs can be itemized in financial reports. Other M&A costs examples include preparing and submitting required programmatic and financial reports, establishing and/or maintaining equipment inventory, documenting operational and equipment expenditures for financial accounting purposes, and responding to official informational requests from state and federal oversight authorities.

Note: SAAs must be able to separately account for M&A costs associated with the NSGP-UA award from those associated with the NSGP-S award.

M&A costs are allowed under this program as described below:

1. SAA (Recipient) for NSGP-S and NSGP-UA M&A

The SAA may use and expend up to 5% of their total FY 2026 NSGP-S and NSGP-UA awards for M&A purposes associated with administering the NSGP-S and NSGP-UA awards. SAAs must include the amount they are requesting for NSGP-S and NSGP-UA M&A in the SF-424A form. The amount should be in addition to the total requested by the subapplicant nonprofit organizations but not exceed 5% of the total requested by the subapplicant nonprofit organizations. SAAs must be able to separately account for M&A costs associated with the NSGP-UA award from those associated with the NSGP-S.

2. Nonprofit Organization (subrecipient) for NSGP-S and NSGP-UA M&A

Nonprofit organizations that receive a subaward under the NSGP may use and expend up to 5% of each subaward for M&A purposes associated with that subaward. If an organization receives more than one subaward, they must be able to separately account for M&A costs for each subaward.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

M. Authorizing Authority Section 2009 of the Homeland Security Act of 2002 (Pub. L. No. 107-296, as amended) (6 U.S.C. § 609a).

N. Appropriation Authority Homeland Security and Further Additional Continuing Appropriations Act, 2026, Pub. L. No. 119-86.

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

B. Step 2: Get Ready to Apply

Submission Requirements and Application Deadlines 22

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

1. Submission Requirements and

Application Deadlines A. Registration

You must have an active SAM.gov account which includes having a UEI. SAM.gov registration can take several weeks. Begin that process today.

For more detailed instructions for obtaining a UEI number or to register, go to SAM.gov Entity

Registration and click “Get Started.” From the same page, you can also click on the Entity

Registration Checklist for the information you will need to register.

You must also have an active account with Grants.gov. You can see step-by step instructions see the

Quick Start Guide for Applicants.

B. Requesting the Application Package The application package is accessible in the FEMA Grants Outcomes (FEMA GO) system. To access the system, go to https://go.fema.gov/.

C. Application and Submission Instructions To apply for an award under this program, all applicants must:

1. Apply for, update, or verify their UEI number and EIN from the Internal Revenue Service;

2. Provide their UEI number in the application;

3. Have an account with login.gov;

4. Register for, update, or verify their SAM.gov account and ensure the account is active before submitting the application;

5. Register in FEMA GO, add the organization to the system, and establish the Authorized

Organizational Representative (AOR). The organization’s electronic business point of contact

(eBiz POC) from the SAM registration may need to be involved in this step. For step-by-step instructions, see the FEMA GO Startup Guide;

6. Submit the complete application in FEMA GO; and

7. Always maintain an active SAM registration with current information during which the applicant has an active federal award, an application, or plan under consideration by a federal awarding agency. As part of this, applicants must also provide information on an applicant’s immediate and highest-level owner and subsidiaries, as well as on all predecessors that have been awarded federal contracts or federal financial assistance within the last three years, if applicable.

Per 2 C.F.R. 25.110(a)(2)(iv), if an applicant is experiencing exigent circumstances that prevents it from obtaining an UEI number and completing SAM registration prior to receiving a federal award, the applicant must notify FEMA as soon as possible. Contact fema-grants-news@fema.dhs.gov and provide the details of the exigent circumstances.

https://sam.gov/ https://sam.gov/content/entity-registration https://sam.gov/content/entity-registration https://grants.gov/applicants/applicant-registration https://grants.gov/help/get-started/ https://go.fema.gov/ https://login.gov/ https://sam.gov/ https://www.fema.gov/sites/default/files/documents/fema_gpd_startup_guide_051325.pdf https://www.ecfr.gov/current/title-2/part-25/section-25.110#p-25.110(a)(2)(iv) mailto:fema-grants-news@fema.dhs.gov

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

D. How to Register to Apply

(1) General Instructions

Registering and applying for an award under this program is a multi-step process and requires time to complete. Below are instructions for registering to apply for FEMA funds. Read the instructions carefully and prepare the requested information before beginning the registration process. Gathering the required information before starting the process will alleviate last-minute searches for required information.

The registration process can take up to four weeks to complete. To ensure an application meets the deadline, applicants are advised to start the required steps well in advance of their submission.

Organizations must have a UEI number, EIN, and an active SAM registration.

(2) Obtain a UEI Number

All entities applying for funding, including renewal funding, must have a UEI number.

(3) Obtain Employer Identification Number

In addition to having a UEI number, all entities applying for funding must provide an EIN. The EIN can be obtained from the IRS at Get an employer identification number.

(4) Create a login.gov account

Applicants must have a login.gov account to register with SAM or update their SAM registration.

Applicants can create a login.gov account at Create an account.

Applicants only have to create a login.gov account once. For existing SAM users, use the same email address for both login.gov and SAM.gov so that the two accounts can be linked.

For more information on the login.gov requirements for SAM registration, refer to SAM.gov.

(5) Register with SAM.gov

In addition to having a UEI number, all organizations must register with SAM.gov. Failure to register with SAM.gov will prevent your organization from applying through FEMA GO. SAM.gov registration must be renewed annually and must remain active throughout the entire grant life cycle.

For more detailed instructions for registering with SAM.gov, refer to Register with SAM.gov.

Note: per 2 C.F.R. § 25.200 applicants must also provide the applicant’s immediate and highest-level owner, subsidiaries, and predecessors that have been awarded federal contracts or federal financial assistance, applicants must also provide the applicant’s immediate and highest-level owner, subsidiaries, and predecessors that have been awarded federal contracts or federal financial assistance within the past three years, if applicable.

(6) Register in FEMA GO, Add the Organization to the System, and Establish the AOR

Applicants must register in FEMA GO and add their organization to the system. The organization’s https://www.irs.gov/businesses/small-businesses-self-employed/apply-for-an-employer-identification-number-ein-online https://login.gov/create-an-account/ https://login.gov/create-an-account/ https://www.sam.gov/SAM/pages/public/loginFAQ.jsf https://sam.gov/ https://www.ecfr.gov/current/title-2/section-25.200 https://go.fema.gov/

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts electronic business point of contact (eBiz POC) from the SAM.gov registration may need to be involved in this step. For step-by-step instructions, see the FEMA GO Startup Guide.

Note: FEMA GO will support only the most recent major release of the following browsers:

• Google Chrome;

• Mozilla Firefox;

• Apple Safari; and

• Microsoft Edge.

Applicants using tablet type devices or other browsers may encounter issues with using FEMA GO.

E. Submitting the Final Application Applicants will be prompted to submit the standard application information, and any program-specific information required in FEMA GO.

After submitting the final application, FEMA GO will provide either an error message or send an email to the submitting AOR confirming the transmission was successfully received.

F. Application Deadline July 24, 2026 11:59 p.m. Eastern Time

G. Pre-Application Requirements Deadline

H. Post Application Requirements Deadline

I. Effects of Missing Deadlines All applications must be completed in FEMA GO by the application deadline. FEMA GO automatically records proof of submission and generates an electronic date/time stamp when FEMA GO successfully receives an application. The submitting AOR will receive an email with an official date/time stamp and a FEMA GO tracking number to serve as proof of timely submission prior to the application deadline.

Applicants experiencing system-related issues have until 3 p.m. ET on the date applications are due to notify FEMA. No new system-related issues will be addressed after this deadline. Applications not received by the application submission deadline will not be accepted.

https://www.fema.gov/sites/default/files/documents/fema_gpd_startup_guide_051325.pdf

C. Step 3: Write Your Application

Application contents and format 26

1. Review 2. Get ready 3. Write 4. Learn 5. Award Contacts

1. Application Contents and Format A. Application Requirements

The following forms or information are integrated into the application package in FEMA GO.

Applicants should review these forms at SF-424 Family | Grants.gov before applying to ensure they are providing all required information.

1. SF-424, Application for Federal Assistance

2. Grants.gov Lobbying Form, Certification Regarding Lobbying

3. SF-424A, Budget Information (Non-Construction)

• If construction is permitted under the program, submit SF-424C, Budget Information

(Construction), instead of SF-424A

4. SF-424B, Standard Assurances (Non-Construction)

• If construction is permitted under the program, submit SF-424D, Standard Assurances

(Construction), instead of SF-424B

5. SF-LLL, Disclosure of Lobbying Activities

B. Required Documents, Content, and Formatting Applications must be submitted in FEMA GO by the SAA ONLY. To begin, visit Grants.gov and search for the NSGP posting. Download the necessary documents from the Related Documents tab. Complete all forms accurately and ensure they are clearly labeled. Save the completed forms, then log in to FEMA GO and upload the required documents as part of your application submission.

C. Program-Specific Required Documents and Information The following program-specific forms or information are required to be submitted in FEMA GO following award to the applicable SAA and before any subawards are approved/issued:

▪ Investment Justifications (IJ) from ALL nonprofit subapplicants must be submitted, regardless of whether the SAA recommends them for funding, using the FY 2026 IJ Template (Office of Management and Budget (OMB) Control Number: 1660-0110/FEMA…