Intech Hawaii attended the Society of American Military Engineers (SAME) Guam Post’s Guam Industry Forum 2026 from July 28 through 30. The event took place at the Dusit Thani Guam Resort. This year’s theme was “Delivering Indo-Pacific Readiness: Integrating Infrastructure, Innovation, and Industry Capacity”, which shaped two and a half days of sessions. Topics ranged from missile defense infrastructure to island-wide master planning. We sponsored a networking break on Day Two. We also sat in on panels with contractors, engineers, and government leaders from across Guam, the Marianas, and the broader Pacific.
The forum sent a clear message: Guam is no longer a supporting player. Instead, it’s now the center of the Indo-Pacific buildup. Billions of dollars in defense construction, utility modernization, and workforce investment are converging on the island. Importantly, the pace of this work is accelerating faster than most contractors expect.
Key Takeaways
Guam’s infrastructure is being rebuilt in real time
Power, water, wastewater, port, and airport capacity represent active, funded priorities, not future plans. The Guam Power Authority, Guam Waterworks Authority, Port Authority of Guam, and airport authority are each running modernization programs. These programs keep pace with a growing military population and a construction boom. For contractors, this creates sustained demand across every utility and civil infrastructure trade. However, it also brings tighter competition for materials, shipping capacity, and skilled labor.
Speed is now the acquisition priority, not just cost
Several sessions explored what the Department of War calls MILCON reform. This includes expanded use of Other Transaction Authority, progressive design-build, and industrialized or modular construction methods. These approaches cut years off delivery timelines. Military leadership delivered a direct message: business as usual won’t move fast enough. Contractors who master accelerated delivery models gain a clear advantage. Those who can mobilize quickly will win upcoming solicitations.
Readiness does not stop at Guam’s shoreline
Multiple panels framed Guam as the anchor of a wider regional network. This network stretches across the Second and Third Island Chains. It includes the Commonwealth of the Northern Mariana Islands, Palau, the Federated States of Micronesia, and the Marshall Islands. Contractors positioning themselves for Indo-Pacific work should think regionally. Local thinking alone won’t suffice. Logistics, workforce, and supply chain planning must account for multi-island execution.
Workforce and housing pressure is a real constraint, not a talking point
Panelists spoke candidly about strain on local housing, labor supply, and shipping costs. The military construction pace creates workforce demands that stress these systems. This represents a planning issue for every contractor bidding Guam work. It’s not merely a government problem to solve. Skilled IT staff are equally scarce on the island, which is why managed IT services have become a practical necessity rather than a luxury.
Disaster resilience is now a design requirement
Typhoons, grid instability, and fuel supply disruptions create a recurring backdrop. As a result, microgrid investment and disaster response coordination have become core infrastructure priorities. Contractors bidding energy, utility, or facilities work should prepare for resilience requirements. Expect these requirements to appear earlier in scopes of work going forward.
Cybersecurity and compliance are now infrastructure, not IT
Perhaps the most notable shift from past years: cybersecurity discussions now rank alongside power, water, and construction. Teams treat it as a core piece of Indo-Pacific readiness. Previously, it was a side conversation. This shift brings us to the topic most relevant to our clients.
What Guam Contractors Should Do Today on CMMC
The pause is not a reprieve
The Department of War paused mandatory third-party certification under CMMC Phase II earlier this year. It’s reviewing the program through a CMMC Reform Task Force. Some contractors have assumed cybersecurity compliance is on hold. It is not. The requirements remain active.
Self-assessment obligations remain unchanged
If your contract includes DFARS 252.204-7012, several obligations persist. You must safeguard covered defense information. You must report cyber incidents within 72 hours. You must maintain compliance with NIST SP 800-171. Level 1 and Level 2 self-assessments are still required. SPRS score submission and annual senior official affirmation remain active. Pausing third-party certification changed none of this.
Use this window strategically
A pause in mandatory third-party assessment is not a pause in risk. Instead, it’s an opportunity. Close gaps before certification requirements resume, without an assessor on the calendar. Run a real gap analysis against the 110 NIST 800-171 requirements. Document a current System Security Plan. Build out a Plan of Action and Milestones. Contractors who act now will be in a far stronger position when Phase II requirements return. Understanding where your CMMC compliance actually stands today is the essential first step.
Keep your SPRS score current
This is one piece that has not changed at all. An outdated or inflated score creates real exposure. It threatens both solicitations and potential False Claims Act liability. If you have not reviewed your score in the past year, that is your first priority. Getting it right and keeping it accurate often requires dedicated compliance resources that most contractors struggle to maintain alone.
Watch the Reform Task Force
The Department of War opened a public request for information on compliance burdens. Contractors have a real opportunity to weigh in. Share what is and is not working. Flag cost and assessor availability concerns—the two issues most cited when Phase II was paused.
Do not assume the requirement disappears
Every signal points to CMMC returning in some revised form. It is not going away. Contractors who treat this as a permanent reprieve are the ones who will scramble when the next deadline arrives. The timeline for Guam contractors is particularly tight given the pace of the Indo-Pacific buildup.
Guam’s cybersecurity stakes are higher
Guam sits at a genuine chokepoint for undersea cable infrastructure and regional connectivity. The island’s defense contractor base is a meaningful target in any Indo-Pacific cybersecurity conversation. For Guam contractors, the stakes are real.
What Intech Hawaii does
We work with defense contractors across Hawaii, Guam, and the broader Pacific. We build compliance programs that hold up regardless of which direction CMMC policy moves. If your gap analysis, SSP, or POA&M has not been touched in the last year, now is the time—not after the next deadline lands.
The window is open right now. The pause in mandatory certification creates space to strengthen your security posture without external pressure. Contractors who move during this period will have answers ready when Phase II resumes. Those who wait will face rushed assessments and scrambled timelines.
Managed IT. Cybersecurity. Compliance. That is what we do. We help defense contractors navigate policy uncertainty while building programs that actually work. We were in Guam this week because the Indo-Pacific buildup is real, the stakes are high, and contractors need partners who understand both the technical requirements and the regional context.
If you’re working on defense contracts in Guam or the Pacific, contact Intech Hawaii today. Let’s discuss where your compliance program stands today and what closing gaps looks like before the next wave of requirements hits. The best time to act was last year. The second-best time is now.
