What NSGP is
NSGP is a FEMA grant program that pays for physical security, planning, training, and exercises at nonprofit organizations at high risk of terrorist or extremist attack. Funding flows from DHS to FEMA to your State Administrative Agency, which runs the competition in your state. Nonprofits never apply to FEMA directly.
| FY2026 figure | Amount |
|---|---|
| National appropriation | $300,000,000 |
| Urban Area stream (NSGP-UA) | $150,000,000 |
| State stream (NSGP-S) | $150,000,000 |
| Cap per site | $200,000 |
| Sites per organization, per stream | up to 3 |
| Cap per organization, per state | $600,000 |
Who is eligible
- A 501(c)(3) organization, or one described under 501(c)(3) and tax-exempt under 501(a). Churches and other houses of worship qualify.
- A specific physical site to protect, with its own application and assessment.
- A credible risk of terrorist or extremist attack, documented with sources.
- A Unique Entity ID and active SAM.gov registration before funds can be paid. Start this early.
Not eligible
- Government entities, utilities, and for-profit organizations
- Public K-12 schools
- Political or lobbying organizations, homeowners associations, and volunteer fire or rescue departments
Urban Area or State track
If your site is inside a FEMA-designated Urban Area, you apply through NSGP-UA. Everyone else applies through NSGP-S. In Virginia, the Hampton Roads and Richmond Urban Areas apply through VDEM, and Northern Virginia applies through the National Capital Region.
How applications are scored
The Investment Justification, or IJ, is the scored document. Reviewers score it out of 40 points. The largest block is risk, which FEMA defines as threat, vulnerability, and consequence. Reviewers reward three things above all:
- Specific, sourced threats. Dated incidents with named sources, at the national, regional, and site level.
- Specific vulnerabilities. Findings from a current site assessment, not generic concerns.
- A one-to-one trace. Every proposed purchase tied to a documented vulnerability, at a realistic cost.
What it pays for
Allowable costs include equipment categories under NSGP (cameras, access control, door hardening, security film, lighting, barriers, alarms), planning, training, exercises, competitively procured contract security, and a capped amount for management and administration. NSGP has no cost match. It is a reimbursement grant, so you pay first and are reimbursed after submitting documentation.
Applying in Virginia
- The State Administrative Agency is the Virginia Department of Emergency Management (VDEM).
- Applications go through the VDEM EM Grants portal, except Northern Virginia, which submits through DC HSEMA for the National Capital Region.
- Required attachments: the IJ on FEMA's fillable form, your mission statement, and your vulnerability assessment. No password-protected files.
- The FY2026 Virginia window ran July 1 to July 10, 2026, and VDEM did not accept corrections after submission. Expect a short window again.
When to start
Start 90 days before you expect the state window. The notice typically arrives in spring or early summer, and state windows follow within weeks. Use the months before to finish your assessment, build your incident log, collect vendor quotes, and get board approval.
Questions
Is the vulnerability assessment required?
Yes. Each site needs its own current vulnerability assessment, submitted with the Investment Justification. A free self-assessment tool published by CISA is one accepted starting point; a professional assessment usually produces stronger, more specific findings.
Can we apply for more than one site?
Yes. An organization can submit up to three sites per funding stream, each with its own Investment Justification and assessment, up to $600,000 per state in the FY2026 cycle.
We were denied last cycle. Should we reapply?
Usually, yes. Ask your State Administrative Agency for feedback, then strengthen the weakest sections. Thin threat documentation and purchases that do not trace to a finding are the most common problems.
Sources: FEMA NSGP program page; VDEM NSGP page; current FY notice of funding opportunity. Rules change each year; always confirm against the current notice and your state's guidance.