Issue link: https://iconnect007.uberflip.com/i/1546025
18 SMT007 MAGAZINE I AUGUST 2026 Naprotek brings deep expertise in complex, high- reliability PCBA and RF/microwave assembly for defense, space, medical, semiconductor capital equipment, and test and instrumentation markets. SemiGen serves defense, SATCOM, space, and advanced communications customers as Napro- tek's dedicated RF Assembly & Components Center of Excellence. Together, they represent a manufac- turing partnership with two distinct specializations and one shared, verified security posture. For procurement teams already under pressure from supplier vetting requirements, that consoli- dation has real value. Naprotek and SemiGen are pre-certified, audit-ready, and prepared to provide compliance documentation on request, reducing supply chain risk and simplifying onboarding for programs with CMMC requirements. CMMC Among a Broader Compliance Portfolio CMMC Level 2 joins an existing set of quality and compliance credentials, including ISO 9001, AS9100D, ISO 13485, and ITAR registration, that cover the defense, aerospace, and medical markets. Maintaining that range of certifications simultaneously requires its own discipline, docu- mentation culture, and internal ownership. Each standard demands ongoing investment, not a one- time achievement. That portfolio spans defense, aerospace, and medical markets, each with its own documentation requirements, audit cycles, and internal ownership. We wanted to proactively meet the mandatory requirements for DoD contracts and demonstrate our continued commitment to quality, security, and compliance. As CMMC requirements become standard prac- tice across the DIB, suppliers who are certified early will enter competitive procurements with documen- tation already in order. Inside the Certification Process Colby Cail, director of information technology, led the certification effort at Naprotek and SemiGen and is candid about what companies should expect when they begin. "Getting to Level 2 took sustained effort across the entire organization until the controls became part of how we operate," Cail says. "When you implement 110 controls, you quickly learn that the calendar doesn't care that you're also running production." Start With an Honest Gap Assessment The path to Level 2 certification begins with a gap assessment, mapping where the organization currently stands against each required control. For most companies, that assessment is more sobering than anticipated. Controls that appear manageable on paper—access management, incident response, audit logging—frequently reveal systemic gaps in documentation, process, or infrastructure when examined in practice. "Don't assume you're closer than you are," Cail advises. "The gap between where most organiza- tions start and where Level 2 requires them to be is wider than expected. Build a realistic timeline, and then add a buffer, particularly if the effort will run alongside active production." Building the Discipline From there, the work is sustained and multi- phase: policy rewrites, system hardening, physical Naprotek's Facility in San Jose, California. SemiGen's Londonderry, New Hampshire facility.