Jacksonville's Naval Defense Community
Jacksonville isn't just one of the largest cities in Florida by area — it's one of the most significant naval bases in the Southeast. Naval Station Mayport is the third-largest Navy base on the East Coast, homeporting surface combatants including destroyers and littoral combat ships. NAS Jacksonville handles naval aviation, with Fleet Readiness Center Southeast (FRCSE) as the Navy's premier depot for naval aviation maintenance on the East Coast.
These two installations — plus the various support activities, training commands, and logistics operations that come with them — drive a substantial contractor ecosystem in Jacksonville and the surrounding First Coast area. Ship repair, naval aviation MRO, IT services, logistics, professional services — the range of contractor types is broad, and so is the CUI exposure across that community.
Jacksonville's defense contractor community has been growing, not shrinking. The Navy's investment in the Mayport homeport and ongoing FRCSE program growth are bringing more prime contractor activity to the region. That growth comes with increasing CMMC pressure.
Major surface fleet homeport with destroyers, LCS, and other combatants. Ship repair, maintenance, and technical services contractors are concentrated around the base. Ship technical manuals and specifications are CUI — every technical contractor here has CMMC exposure.
Fleet Readiness Center Southeast is the Navy's East Coast naval aviation depot — handling depot-level maintenance and overhaul for Navy and Marine Corps aircraft. FRCSE contractors working with technical data, maintenance procedures, and component specifications handle CUI daily.
Jacksonville's Southside and J. Turner Butler Blvd corridor hosts a concentration of defense IT companies, managed service providers, and professional services firms supporting naval programs. IT contractors whose systems touch CUI are themselves in scope for CMMC.
Defense manufacturers, defense logistics firms, and ship repair specialists are concentrated in Jacksonville's Northside industrial corridor near the port and the naval installations. Logistics contractors handling sensitive supply chain data may have CUI exposure.
FRCSE is one of the most important naval aviation MRO operations in the country. If you supply parts, components, or technical services to FRCSE — and your work touches aircraft technical data — you're in a CMMC Level 2 environment. This isn't a future requirement. It's current.
The free readiness check identifies your level, likely gaps, and estimated cost. Mayport contractors, FRCSE suppliers, and defense IT firms in Jax: this is designed for your environment.
Take the Free Readiness Check →Major Defense Employers in Jacksonville
- Naval Station Mayport — Third-largest Navy base on the East Coast. Surface combatant homeport. Ship repair, maintenance, and support contracts drive a large contractor community around the Mayport peninsula.
- NAS Jacksonville / Fleet Readiness Center Southeast (FRCSE) — East Coast naval aviation MRO depot. Depot-level maintenance and overhaul for Navy and Marine Corps aircraft. Private contractors support FRCSE with parts, components, and technical services.
- BAE Systems (Ship Repair) — One of the Navy's largest ship repair and maintenance contractors, with a significant Jacksonville operation supporting Mayport surface ships. Active CMMC compliance requirements flowing through the BAE supply chain.
- Northrop Grumman — Defense electronics and mission systems with Jacksonville program presence.
- L3Harris Technologies — Defense electronics, communications, and naval systems with Florida operations.
- SAIC and other defense IT integrators — IT services firms supporting naval programs at Mayport and NAS Jacksonville, managing systems that may contain CUI.
- Smaller ship repair and MRO specialists — Dozens of specialized contractors doing shipboard systems maintenance, component repair, and technical services in the Mayport ecosystem.
The Naval Maintenance CMMC Challenge
Jacksonville's naval contractor community has some specific CMMC dynamics that are worth understanding:
Ship technical manuals are CUI. Every ship in the Navy has a Technical Manual — essentially the ship's maintenance manual. These manuals contain detailed technical information about the ship's systems, propulsion, weapons, and electronics. Contractors who access ship technical manuals are handling CUI. This applies to almost every technical contractor at Mayport, from systems integrators to small HVAC shops.
FRCSE is an MRO environment. Just like Robins AFB, FRCSE is a depot MRO environment where technical orders and maintenance procedures are CUI. Aircraft component suppliers, repair stations, and technical services firms supporting FRCSE are in a CMMC Level 2 environment.
Defense IT is often mis-scoped. Jacksonville has a large defense IT community — managed service providers, IT contractors, network management firms — who support Navy programs. These firms often underestimate their CMMC exposure because they think of themselves as "just IT." But if their systems manage, store, or process CUI — even just as part of providing managed IT services to a Navy contractor — they're in scope for CMMC Level 2.
Naval ship repair, aviation MRO, or defense IT — your compliance package is built from your actual environment and verified by practitioners who understand the Jax defense market and can scope it correctly.
Take the Free Readiness Check →Florida Resources for CMMC
Florida APEX has advisors in the Jacksonville area familiar with the Mayport and NAS Jacksonville contractor community. Provides free initial CMMC guidance, contracting basics, and connections to regional compliance resources. Your first call before engaging paid consulting.
Florida's Manufacturing Extension Partnership center. FloridaMakes offers CMMC gap assessments, cybersecurity workshops, and connections to vetted consultants with naval defense manufacturing experience. Their subsidized programs are a cost-effective entry point for small manufacturers in the Jacksonville defense supply chain.
Jacksonville's regional defense industry organization, connecting First Coast defense contractors with resources, networking, and compliance information. Active CMMC education programs and peer knowledge sharing among Mayport and NAS Jacksonville contractors. A good source for local intelligence on how other Jax defense firms are approaching compliance.
What Jacksonville Contractors Should Do Now
Whether you're a ship repair specialist at Mayport, an MRO supplier at FRCSE, or a defense IT firm in Southside, the compliance steps are similar — but the scoping details are different. Here's what to do:
Determine your CUI exposure. For ship repair contractors: do you access ship technical manuals? For FRCSE suppliers: do you handle aircraft technical orders? For IT firms: do your systems store, process, or transmit CUI on behalf of a defense contractor? These questions determine whether CMMC Level 2 applies to you.
Check your SPRS score. If you have DFARS 252.204-7012 in any contract and haven't submitted a score to the Supplier Performance Risk System, you're out of compliance with existing requirements today. Fix this first.
Call Florida APEX or FloridaMakes. Both provide subsidized initial guidance that can orient you before you spend money on a private consultant. Jacksonville-area contractors tend to underuse these resources.
See the full CMMC cost guide to understand what Level 2 certification realistically costs for a company your size.
Frequently Asked Questions
It depends on what your work involves. If you handle ship technical manuals, specifications, or system data for Navy surface ships, you're almost certainly handling CUI and need CMMC Level 2. Commercial-type services that don't involve technical data may not require CMMC. The test is whether your work involves CUI — for most technical contractors at Mayport, it does.
FRCSE is the Navy's East Coast naval aviation depot at NAS Jacksonville — responsible for depot-level maintenance and overhaul of Navy and Marine Corps aircraft. Private contractors support FRCSE with parts, components, and technical services. This is an MRO environment — technical orders and maintenance data are CUI, and FRCSE contractors handling this data need CMMC Level 2.
FloridaMakes is Florida's Manufacturing Extension Partnership center. They offer CMMC gap assessments, cybersecurity workshops, and connections to vetted consultants in the Jacksonville area. Their subsidized programs are a cost-effective entry point for small manufacturers in the Jax naval supply chain.
Yes, if their services involve handling CUI. An MSP whose systems manage endpoints or networks containing CUI is in scope for CMMC — because the data flows through their systems. IT providers often assume they're not in scope because they don't create the CUI. If your systems touch CUI, you need CMMC Level 2.
Florida APEX Accelerator has offices across Florida including Jacksonville. They provide free initial guidance on CMMC requirements, contracting basics, and connections to regional compliance resources. Florida APEX advisors in the Jax area are familiar with the Mayport and NAS Jacksonville contractor community.
Get Your C3PAO-Ready Documentation — Built for Jacksonville's Naval Defense Market
Take the free readiness check and get a complete compliance package built from your actual environment and verified by practitioners who understand the Jacksonville naval defense market — ship repair, aviation MRO, or defense IT.
Take the Free Readiness Check →Free · 2 minutes · No obligation
Or see pricing & packages →