Cyber as a Service Grant Program

The Cyber as a Service Grant Program, under the Commonwealth Cyber Initiative, aims to enhance students' cybersecurity skills while benefiting Virginia's local economies. This program encourages student-led projects that provide essential cyber services, such as penetration testing and risk analysis, to small businesses and non-profits located in the same counties as participating educational institutions. With a funding cap of $15,000, the initiative fosters collaboration between academia and the local workforce.

Commonwealth Cyber Initiative (CCI)
The Commonwealth Cyber Initiative (CCI) is Virginia’s main access point for cybersecurity research, innovation, workforce development, and news. In this community, researchers find funding and collaboration, students discover diverse career possibilities, and new innovations come to life.
CCI seeks proposals for Cyber as a Service projects to enhance students’ skills to enter the cybersecurity workforce on graduation and benefit the local economy.
Projects, performed primarily by students, should provide a cyber service (e.g., penetration or pen testing, cyber risk analysis) to Virginia small businesses or not-for-profits in the same county as the institution of higher education.
Awards
We anticipate funding proposals with a budget that does not exceed $15,000. Budgets should be proportional to the anticipated scale of impact.

Eligibility

Who Can Serve as Principal Investigator (PI): Researchers and faculty members at public institutions of higher education in Virginia who are deemed eligible by their home institution to serve as a Principal Investigator (PI) on an external grant are eligible to apply.Limit on Number of Proposals per Institution: There are no restrictions or limits.Limit on Number of Proposals per PI:  An eligible researcher can participate on at most two proposals in this call and can submit at most one proposal as PI.Project RequirementsProjects must provide a cyber service to a locally owned and operated business (e.g., pen testing, cyber risk analysis).Businesses must be located in the same county as the institution where the PI receives the grant.Projects must last at least one month in duration, and must take place during a normally scheduled academic term, as defined by the PI's home institution.Students must be the primary service providers.Businesses may not pay for the services.Students must receive payment for work completed.All faculty must include liability language in their programming to release CCI from any legal responsibility. Suggested language: As a participant in  the Cyber As A Service CFP, I hereby acknowledge and agree to release the Commonwealth Cyber Initiative from any liability for any damages or losses incurred during my participation.

Ineligibility

Indirect costs (IDC) aren’t allowed.According to the terms under which CCI is funded, the following costs are not allowed:Costs of developing and delivering undergraduate capstone programs.Portion of salaries and benefits of faculty for time spent teaching.Scholarships for costs of attendance at institutions of higher education.