Why Defense Primes Should Still Look For CMMC Level 2 Suppliers
By Justin Quinn, President and Owner of Focused on Machining
A buyer from a large defense prime recently reached out to us at Focused on Machining. He was looking for a new defense supplier that could take on programs that require CMMC Level 2 compliance.
We were happy to talk to him about his program and provide a quote. We are currently 95% complete with our CMMC Level 2 preparation, with a clear Plan of Action and Milestones (POA&M) in place.
But that conversation made us realize something: a major challenge is on the way across the defense manufacturing supply chain. The defense industrial base is under pressure to move faster than ever; at the same time, CMMC requirements may soon be phased into DoD contracts, even as the next phase of implementation is under review.
This combination could create real timeline issues for primes and suppliers that wait too long to act.
The Potential CMMC Supply Chain Crunch
The buyer told us that much of his recent time has been spent searching for CMMC Level 2 suppliers. Historically, his company had a large supplier base and could choose from a wide range of capable shops.
But with CMMC requirements continuing to evolve, that flexibility is beginning to shrink. And this change is happening against a broader push across the defense industrial base to strengthen supply chains and deliver critical capabilities at greater speed and scale.
Many of the suppliers this buyer currently works with are talented small shops that have supported defense work for years. But some haven’t looked deeply into CMMC, while many others intend to be compliant eventually but have not taken meaningful steps yet.
At this point, the next phase in implementation could bring CMMC Level 2 third-party assessment requirements into the award process. Even with the timeline paused, it’s risky to wait; suppliers that have not started may still be looking at a year or more of work before they are truly ready.
The buyer told us he was reaching out now to get ahead of this potential issue. He saw that we had experience with primes along with our CMMC Level 2 self-assessment, and wanted to add us as a partner before he lost other suppliers and programs experienced disruptions.
What Defense Suppliers and Machine Shops Should Do Now
At this point, even after the recent pause, I do think it’s incumbent upon suppliers to start taking concrete steps. CMMC is a serious commitment, and I understand why many small shops have been cautious. It requires time, planning, outside support, new processes, and ongoing expenses.
I also understand the financial concern. CMMC is not inexpensive, and the recurring costs are real. But in our experience, the investment did not happen all at once. The process unfolded over time, with expenses spread across multiple phases. That made it possible to manage the work piece by piece instead of treating it as one massive project.
There are also resources available from the government and from people in the industry who have already gone through the process. I have shared some of what I learned along the way in my previous articles, and I’m always happy to talk with other shops trying to understand what comes next.
What Defense Primes Should Do Now
Primes, above all, should not wait until requirements are clarified again to evaluate their supplier base.
Many suppliers may not fully understand how much work is involved in becoming CMMC Level 2 ready. If a shop isn’t already well down the road, they may not be ready in time.
The best step is to begin adding new suppliers now. Some of your existing suppliers may eventually complete the process, and primes may be able to move work back to them later. But to avoid disruption, it is better to identify CMMC-ready manufacturing partners before a program is at risk.
Where Focused on Machining Stands Today
As of July 2026, we are:
95% complete with our CMMC Level 2 preparation.
Working toward full CMMC Level 2 certification this year.
Following a clear Plan of Action and Milestones (POA&M), with remaining items scheduled for completion within the next 30 days.
Scheduled for our audit in early fall 2026.
Let’s Talk About Your CMMC Project
When I served in the Air Force as an aircraft mechanic, I would sometimes look at the parts I was installing and think about the path they took to get to me. I wondered what the markings and numbers meant and where the parts came from. Eventually, that curiosity helped lead me into manufacturing.
Because of that history, defense work is personal to me. As a defense supplier and service-disabled veteran-owned small business, I feel a patriotic obligation to take the responsibilities of CMMC seriously. I’m proud of the work we have done to prepare.
And I also want to do my part to make sure the broader defense supply base stays strong. If you are a shop trying to navigate CMMC, please reach out, because I’m happy to talk. And if you are a prime looking for manufacturing partners who can meet CMMC Level 2 requirements, let’s discuss your program.
