2026-Cyber-01 Notice of Funding Opportunity for Cyber Resilient Massachusetts

The Massachusetts Technology Collaborative is issuing a Notice of Funding Opportunity under the Cyber Resilient Massachusetts Grant Program to provide grants to municipalities, small businesses, and nonprofit organizations for the implementation of Security Operations Center (SOC) services, including Managed Detection and Response (MDR) and related cybersecurity capabilities. Applications are accepted on a rolling basis until the solicitation closes on March 18, 2030, and this solicitation supersedes prior iterations from 2024 and 2025. Respondents must develop a tailored Scope of Work in coordination with CyberTrust Massachusetts and submit it alongside a completed Budget Template, a 250-word non-confidential project description, and a signed certification form affirming compliance with state and federal requirements, including tax filings, debarment status, and accurate representation of all information. Eligible applicants must be registered entities, and small businesses must demonstrate compliance with U.S. Small Business Administration size standards. All applicants must provide a Unique Entity ID or CAGE code, though specific values are not collected in the solicitation documents. The grant program requires strict adherence to budgetary controls, with any variance exceeding 10% in any cost category requiring prior written approval from the Program Manager, and all subcontracting must be pre-approved. Subcontractors are held to the same standards as the primary applicant, including reimbursable cost guidelines and compliance obligations. Performance is expected to occur at the designated place of performance in Westborough, Massachusetts, and no physical delivery or packaging requirements are specified. Invoicing is managed through post-contract submission processes, with no electronic system such as WAWF specified. The funding is structured as a grant under a NOFO framework, not a traditional FAR-based contract, with evaluation based on alignment with MassTech’s cybersecurity goals and debarment status, though no formal weighting or scoring methodology is disclosed. Pre-award spending is not reimbursable unless explicitly authorized, and confidentiality claims for sensitive cybersecurity information must be formally requested in writing and meet Massachusetts Public Records Law criteria. All submissions must be made electronically through Commbuys, with a single integrated application package containing all required attachments.