NOFO 2025-Cyber-01 for Cyber Resilient Massachusetts

The Massachusetts Technology Collaborative (MassTech) issued Notice of Funding Opportunity (NOFO 2025-Cyber-01) for the Cyber Resilient Massachusetts Grant Program, targeting municipalities, small businesses, and non-profits across Massachusetts. This program aims to enhance statewide cybersecurity by providing grants up to $25,000 to fund Managed Detection and Response (MDR) services and narrowly focused cybersecurity technology upgrades identified through vulnerability assessments conducted by qualified providers. Applicants must submit detailed scopes of work or project plans addressing specific cybersecurity vulnerabilities and include a recent vulnerability assessment. The funding supports projects designed to improve cybersecurity resilience, mitigate identified risks, and foster the development of more mature cybersecurity programs. Emphasis is placed on the participation of entities in statewide cybersecurity collaborations and compliance with Massachusetts laws, including Public Records Law and specific procurement exceptions tailored for cybersecurity services. The solicitation mandates submission through an online portal by March 25, 2030, with MDR applications reviewed on a rolling basis and technology upgrade applications reviewed quarterly. Required application components include an authorized signature and acceptance form, a comprehensive budget template outlining labor, materials, subcontractors, and other associated costs, along with concise project descriptions capped at 250 words. Proposals must remain valid for a minimum of 60 days post-deadline. Grants may fund MDR services up to three years, technology upgrades, capital equipment, and IT-related staffing costs for implementation, with no reimbursement for mark-ups or non-allowable expenses such as meals. Prior approval is required for subcontracting, and subcontractors must meet the same standards and reimbursement conditions. MassTech retains broad discretion in proposal evaluation, which considers factors like risk reduction, program maturity, and alignment with shared cybersecurity initiatives, but does not assign explicit weights. The grant agreement incorporates MassTech’s general terms and conditions, subject to Massachusetts statutory provisions, and obligates recipients to submit quarterly progress reports detailing cybersecurity improvements, associated controls per CIS standards, and expenditures. Communications regarding the opportunity are restricted to designated contacts, with all applicants responsible for monitoring posted addenda to ensure compliance with evolving requirements. There are no packaging, shipping, or federal acquisition clauses, as the contract is a service-oriented, state-governed grant program.