9 NSGP Applications Mistakes that get Nonprofits denied. The most expensive NSGP application mistakes are not writing mistakes. They are procedural, they happen before anyone evaluates the quality of your narrative, and they are almost entirely preventable.
Most organizations preparing a Nonprofit Security Grant Program application assume the outcome rests on how well the narrative is written. That is only half the story. An application has to clear two separate reviews, and the first one has nothing to do with writing quality.
The short answer: applications go to your state, not to FEMA. Your State Administrative Agency (SAA) checks the package for completeness against its own requirements before it ever reaches a scorer. Packages that fail that check are set aside, and the narrative inside them is never read. Most of the avoidable losses SGA sees happen at that first gate.
Two gates, not one
The Nonprofit Security Grant Program (NSGP) is a federal program administered by the states. Nonprofits cannot apply directly to FEMA. You apply to your state’s SAA, which reviews and scores the applications it receives, then forwards a ranked package to FEMA.
That structure creates two review points:
Completeness. The SAA confirms the package contains what the state requires, in the format the state requires, submitted the way the state requires, by the state’s deadline.
Scoring. Applications that survive step one are scored, first at the state level and then by federal reviewers. Final selection accounts for the state score along with a multiplier tied to organization type and bonus points.
The two failures look identical from the outside. An organization hears it was not funded and assumes the writing was not strong enough. Often the writing was fine and never got read. If your application was scored and came up short, that is a different problem with a different fix — we cover it separately in why NSGP applications get denied.
What the federal program asks a nonprofit to submit
At the federal level, the required package from a nonprofit is short. Each site needs:
- An Investment Justification (IJ), the FEMA form describing the risk to the site and the security work proposed to address it
- A site-specific vulnerability assessment for that location
- A mission statement, including any practices that may raise the organization’s risk
The IJ covers one physical address. Organizations with more than one site file a separate, complete IJ for each — a requirement that carries its own planning implications, covered in our guide to multi-site NSGP applications. Awards run up to $200,000 per site, for up to three sites per funding stream.
There are also two streams. NSGP-UA funds organizations inside a designated high-risk urban area for that fiscal year. NSGP-S funds organizations outside those areas. Which stream applies is determined by the facility address, not by preference, and the list of qualifying urban areas is published with each year’s funding notice.
The IJ itself is scored across seven areas: applicant information, background, risk, facility hardening, milestones, project management, and impact. Risk carries the most weight and is broken into threat, vulnerabilities, and consequences.
Where the state layer changes the answer
This is where most of the trouble starts. The federal requirements are the floor. States add to them, and the additions are not consistent from one state to the next.
A few examples of how much the ground shifts:
New York requires nonprofits to be prequalified in the state’s financial system at the time of application. An organization that is not prequalified when the window closes is disqualified without further review. New York’s companion state program also requires photographs of every location where work is proposed.
California asks for proof that the organization owns or leases the site, and, for leased space, a letter from the landlord permitting the work. Its state program also caps certain cost categories that the federal program does not.
Illinois runs its own state-funded program with different caps and a different eligibility statute, including an exclusion the federal program does not have.
Submission mechanics vary just as much. Some states take applications by email. Others run their own grant portals. Deadlines, time zones, file naming conventions, and required attachments all differ.
None of this is published in one place. It lives in each state’s own announcement, which is released on its own schedule.
Six NSGP application mistakes that stop a package before scoring
Across the states SGA works in, the recurring first-gate failures fall into a handful of categories.
1. Deadline confusion. The date that governs an application is the state’s, not FEMA’s. State windows close earlier, sometimes considerably earlier, because the SAA needs time to review and rank submissions before forwarding them. Organizations that plan to the federal date routinely find the state window closed weeks before.
2. The wrong form. FEMA revises the Investment Justification between cycles. The current year’s form is the only one that will be accepted, and it has to be submitted in the required format. Scanned copies of a completed form are not accepted.
3. Stream misclassification. A facility on the edge of an urban area, or an organization with sites both inside and outside one, gets filed under the wrong stream. This is a mechanical problem with a mechanical fix, but only if it is caught before the deadline.
4. Missing state-specific documents. The organization builds a clean federal package and never learns about the state layer sitting on top of it.
5. An assessment that does not match the ask. The vulnerability assessment has to be specific to the site named in the IJ, and states differ on how recent it must be and what it must contain. What qualifies is narrower than most applicants expect — see what counts as documented risk for NSGP.
6. A scope the program will not fund. Equipment and work outside the allowable categories forces a mid-review correction or a reduced award. Check your intended purchases against what NSGP money can be used for before you build the budget.
Why last year’s file is the most common source of trouble
A pattern worth naming: many NSGP application mistakes trace back to reusing something that worked before.
A prior year’s form. A peer organization’s document list. A checklist from a different state. Guidance from a consultant who handled a filing three cycles ago. Each of these was accurate at the time and in the place it came from.
Requirements move between cycles, and they were never uniform across states to begin with. What a synagogue in New Jersey needed last year is not what a church in Illinois needs this year. The reusable part of a prior application is the underlying substance about the organization and its site. The procedural wrapper has to be rebuilt every time.
One specific note, because it comes up constantly with faith institutions: the rules around tax-exemption documentation are not the same for every organization. The IRS does not require churches, mosques, and synagogues to apply for a determination letter, and organizations in that position are not required to produce one federally. States may handle this differently. Assuming the strictest version of the rule applies to you can send an organization chasing paperwork it does not need, and assuming the loosest version can leave a package short.
What this means for your organization
If you are considering an application, the sequencing matters more than the writing at the start.
Find out who your SAA is and what your state’s window looks like. Get the current year’s forms from the current year’s announcement. Confirm which stream your address falls in. Establish what your state adds on top of the federal package before you draft anything. Our step-by-step NSGP application guide walks through that order in detail.
That groundwork is unglamorous and it is where most applications are won or lost before they are scored. It is also the part that changes every year, which is why organizations that apply once every few years are at a structural disadvantage against the calendar.
This is the work SGA does daily across 15 or more states. We track what each state requires in the current cycle, confirm which rules apply to your organization and your site, and make sure the package clears the completeness gate so the substance actually gets read.
Want a second set of eyes before you commit time to an application? Book a free consultation with SGA here or call (855) 674-7946.
Official sources
Confirm the current cycle requirements at the official URLs below before submission. Each link goes to the primary federal source; state-specific bulletins are published by each State Administrative Agency.
- FEMA Nonprofit Security Grant Program (NSGP)
- Grants.gov opportunity portal
- SAM.gov (Unique Entity Identifier registration)
- SAM.gov Exclusions (federal debarment search)
- U.S. Department of Homeland Security
- 2 CFR Part 200 (Uniform Guidance for federal awards)
