Most of what gets written about the Nonprofit Security Grant Program covers the part before the award letter arrives — eligibility, the Investment Justification, the budget. What happens after your congregation is actually notified it won funding gets far less attention, and it's where a fair number of awards run into trouble. A grant that isn't spent correctly, documented correctly, or reported on time can end in de-obligated funds, a disallowed cost that your organization has to cover out of pocket, or a rockier path the next time you apply. None of that is complicated once you know the sequence — but almost none of it is intuitive if this is your congregation's first federal award.
Winning NSGP funding starts a compliance clock, not just a spending window. Before most construction or installation work can begin, an Environmental and Historic Preservation (EHP) review has to be completed and approved. Your subaward agreement sets a period of performance — often shorter than the 36 months FEMA gives the state — inside which every dollar has to be obligated and spent. Purchases above a certain threshold require documented competition, not just picking a vendor. Your state administrative agency (SAA) will expect periodic financial reports, typically on the SF-425 form, plus programmatic updates, and it can monitor your file or visit your site. Money left unspent when the period of performance ends is de-obligated back to FEMA, not rolled over.
NSGP funds don't arrive as a lump-sum check that a congregation can draw down freely. FEMA awards the money to your state administrative agency — usually a state homeland security or emergency management office — which then passes a subaward down to your organization under its own agreement. That subaward agreement is the document that actually governs your project, and it typically incorporates federal grant regulations under 2 CFR Part 200 (the Uniform Guidance), the current fiscal year's NSGP Notice of Funding Opportunity, and any state-specific terms your SAA adds on top. Read it fully before you sign it back. Two congregations that received identical federal award amounts can have different deadlines, different reporting portals, and different documentation requirements depending on what their state layers on.
If your congregation is new to this, our NSGP 2026 complete application guide covers what leads up to the award — the Investment Justification, the timeline, and the tracks. This guide picks up exactly where that one ends.
This is the single most common place NSGP subrecipients lose money they were otherwise entitled to. Any project involving new construction, ground disturbance, or a change to a building's exterior or footprint — fencing, vehicle bollards, reinforced entry construction, exterior lighting poles, a new access-control vestibule — is subject to Environmental and Historic Preservation review before that work can begin. This matters even more for congregations meeting our historic preservation eligibility criteria, since federally funded work on a building that's listed or eligible for listing on a state or national historic register triggers additional EHP scrutiny around how the change affects the building's historic character.
In practice, this means your EHP screening form should be one of the first things you submit after signing your subaward agreement — not something you get to after ordering equipment. Camera systems and access-control electronics that don't involve structural changes usually clear EHP faster than fencing, bollards, or any project that touches the ground or the building envelope. Ask your SAA specifically which of your budget line items require EHP review; don't assume equipment-only purchases are automatically exempt, and don't assume construction items are automatically approved just because the underlying purpose is security.
FEMA gives the state administrative agency a 36-month period of performance to spend down the full NSGP award across all of its subrecipients. Individual congregations almost never get that full window. SAAs routinely set a shorter period of performance for nonprofit subrecipients — commonly somewhere between 18 and 30 months, though the exact figure varies by state and sometimes by award year — so that the SAA has enough runway left in its own 36-month clock to process everyone's final reporting and closeout. Your specific deadline is stated in your subaward agreement. Don't work off the 36-month figure you may have seen referenced for the program generally; work off the date in your own paperwork.
| Milestone | Typical Timing | What's Due |
|---|---|---|
| Subaward agreement signed | Weeks after federal award announcement | Signed agreement, EHP screening submission |
| EHP review | Before any construction/installation begins | EHP screening form, project description, site details |
| Procurement | Ongoing through project | Competitive quotes/bids, documented vendor selection |
| Quarterly financial reports | Every quarter of the period of performance | SF-425 or SAA equivalent |
| Programmatic/progress reports | Per SAA schedule, often quarterly or semi-annually | Narrative update on project status |
| Final closeout report | End of period of performance | Final SF-425, equipment inventory, closeout certification |
All costs must be incurred, and all funded goods or services delivered, inside the period of performance. Ordering equipment before the deadline but receiving and installing it afterward is generally not compliant — the completed work, not the purchase order, is what has to fall inside the window.
Because NSGP funds are federal money, purchases made with them are subject to procurement standards under the Uniform Guidance, not just your congregation's normal purchasing habits. Below a certain dollar threshold, a single vendor quote is often sufficient, but above that threshold — check your SAA's specific figure, since some set it lower than the federal simplified acquisition threshold — you generally need to document a competitive process: multiple quotes, a documented rationale if you select something other than the lowest bid, and a written record of how the vendor was chosen. Sole-source purchases (going with one vendor without competition) are allowed in limited circumstances, but they require documented justification, not just convenience.
The practical habit that avoids problems here: get at least two or three written quotes for any significant equipment purchase before you commit, keep them on file, and write a short memo explaining the selection if you don't pick the cheapest option. This is the same documentation discipline we recommend for budget-building generally in our NSGP eligible expenses guide — a compliant procurement file and a compliant budget line item are built with the same habit of paper-trailing every decision.
Recipients of federal preparedness grants like NSGP typically report financial activity on the SF-425, the standard Federal Financial Report used across federal grant programs, filed electronically through FEMA's payment and reporting system. For most NSGP subrecipients, financial reporting runs on a quarterly cadence through the period of performance, with a final report due at closeout that reconciles total spending against the award. Your SAA may layer its own reporting requirements on top of the federal minimum — a shorter reporting interval, an additional programmatic narrative, or its own online portal instead of direct federal system access — so confirm the specific cadence and format with your SAA rather than assuming the federal baseline is the whole requirement.
Programmatic (non-financial) reporting usually runs alongside the financial reports: a narrative update on installation progress, photos of completed work, and confirmation that funded equipment matches what was described in your Investment Justification. Keep a running project log from the day work starts — dated photos, delivery confirmations, and installation completion dates — so that writing each report is a matter of summarizing what you already documented, not reconstructing a timeline from memory.
Programmatic and financial monitoring is a routine part of federal grant administration, not a sign that something went wrong. Depending on the size of your award and your state's monitoring plan, this can take the form of a desk review of your submitted documentation, a phone or video check-in with your SAA program officer, or an on-site visit to confirm that funded equipment was installed as described. Larger awards and awards with construction components are more likely to draw an on-site visit. The organizations that find monitoring painless are the ones that already have their procurement files, EHP approval, invoices, and equipment photos organized in one place — monitoring becomes a matter of handing over a folder, not scrambling to reconstruct one.
Funds not obligated and spent by the end of your period of performance are de-obligated — returned to FEMA — rather than rolled over to a future year or reassigned to a different purpose. This is a hard deadline, and it applies even if the delay was caused by a vendor backorder, a permitting delay, or a slow EHP review rather than anything your congregation did wrong. There's no partial credit for money that was committed but not fully spent when the clock runs out; either the work is complete and documented, or the funds go back.
If it becomes clear partway through your project that you won't finish inside your current period of performance, ask your SAA about a no-cost time extension well before the deadline — not after it. Extensions aren't automatic and generally require a written justification (a documented reason for the delay, like a permitting holdup or an EHP review that took longer than expected, plus a revised completion timeline). SAAs are typically far more receptive to an extension request submitted with weeks or months of runway remaining than to one submitted after the period of performance has already lapsed, at which point the options narrow considerably.
A clean application sets up a clean compliance process later. Start with a free eligibility review to see which security grant programs fit your congregation.
Check Your Grant Eligibility →None of this should discourage a congregation from applying — NSGP funds a meaningful security upgrade for most houses of worship, and the compliance steps above are manageable with basic organization. If you're earlier in the process and still building your application, our church security grants overview and state nonprofit security grants guide cover eligibility and the state-level programs that run alongside NSGP.
Everything above is specific to NSGP. If your congregation also holds — or is applying for — a different federal award, like a USDA facilities grant or an FTA vehicle grant, those obligations sit on top of the general federal rulebook every award has to follow. See our federal grant compliance guide for the Uniform Guidance requirements — audits, time-and-effort reporting, recordkeeping — that apply across programs, not just NSGP.