Income tax; providing credit to qualified employers for certain compensation paid and expenses incurred. Effective date.
Summary
SB236 creates a new income tax credit for certain Oklahoma employers in the aerospace and defense sector that are working toward compliance with the federal Cybersecurity Maturity Model Certification (CMMC) standard. The credit would apply for tax years 2026 through 2031 and equals 50% of qualifying compensation paid to employees while achieving CMMC compliance, plus 50% of qualifying expenses incurred to reach compliance.
To qualify, an employer must be a business in Oklahoma with a Department of Defense contract requiring CMMC compliance, have between 5 and 200 employees, be in the aerospace and defense sector, and not already be CMMC-compliant as of January 1, 2026. The credit is capped at $50,000 per employer over all tax years, is nonrefundable, and may be carried forward for up to five years. The bill also directs the Oklahoma Tax Commission to administer an annual statewide cap of $10 million beginning in tax year 2028, with proportional reductions if claims exceed that limit.
Impact
The bill would add a new section to Title 68 of the Oklahoma Statutes creating a targeted corporate income tax credit for a narrow class of employers. It affects businesses in the aerospace and defense supply chain that must invest in cybersecurity compliance to continue or obtain federal defense contracts, and it gives the Oklahoma Tax Commission responsibility for administering the credit, enforcing the annual cap, and calculating any reduction percentage. The measure does not change tax rates generally, but it would reduce state income tax liability for eligible firms and could influence compliance spending and retention of defense-related business in Oklahoma.
Sentiment
No committee transcripts or recorded votes were provided, so there is no direct evidence of debate, support, or opposition in the available materials. Based on the bill text alone, the measure appears pro-business and pro-defense-industry, with a policy goal of helping smaller aerospace and defense employers absorb the cost of meeting federal cybersecurity requirements. The structure of the credit suggests an effort to balance incentive value with fiscal limits through a per-employer cap, a nonrefundability rule, and a statewide annual ceiling.
Contention
The main potential points of contention are the bill’s narrow eligibility criteria and its fiscal cost. Supporters would likely emphasize that the credit helps Oklahoma aerospace and defense firms, especially mid-sized employers, pay for CMMC compliance and remain competitive for Department of Defense work. Critics could question whether a tax credit is the best way to subsidize what is effectively a federal contracting compliance obligation, whether the benefit is too limited to meaningfully help businesses, and whether the annual $10 million cap and $50,000 per-employer limit are sufficient or arbitrary. Another possible issue is that only noncompliant firms as of January 1, 2026 qualify, excluding businesses already compliant.