July 13, 2026: the Department of War suspended CMMC Phase II pending a 60-day review — but NIST SP 800-171 obligations still stand. What it means for you
For Prime Contractors & Supply-Chain Leaders

Your suppliers can put
your contracts at risk.

A recompete doesn't care whose fault it was. Lionfish helps primes map where CUI flows, identify which suppliers fall under CMMC and NIST SP 800-171, track supplier readiness in one console, and document the flow-down diligence contracting officers expect.

CMMC Phase II is suspended — flow-down obligations and supplier self-assessments are not. The primes using the pause to rank supplier readiness will own the recompetes.

Service-Disabled Veteran-Owned Cyber AB Accredited Training Provider We train the assessors

Sound familiar?

You can't defend what you can't see.

  • !Flow-down is your obligation. DFARS clauses flow to your subs — but the government holds the prime accountable for the program.
  • !Supplier posture is opaque. A self-reported SPRS number with no evidence behind it is a risk you're carrying, not managing.
  • !One weak sub, one lost recompete. Award decisions increasingly weigh supply-chain security — your bid inherits your weakest supplier.

With Lionfish

  • One console for your whole supplier book. The multi-tenant Cyber Tackle Box™ tracks each supplier's readiness, gaps, and evidence in one place.
  • We get your subs ready, too. Lionfish & partner consultants work directly with your suppliers — by, with, and through their teams.
  • We train the assessors. As a Cyber AB Accredited Training Provider, we prepare supplier evidence for readers we taught.

How it works

Know. Fix. Prove.

Know

Know which suppliers matter. Map CUI flow across your supply chain and identify exactly which subs fall under CMMC and 800-171 scope.

Fix

Raise supplier readiness. A standardized program to move your critical suppliers from unknown to ready — without you staffing it.

Prove

Document your diligence. Flow-down records, supplier evidence, and readiness reporting that stand up in a recompete or an audit.

The Supply-Chain Readiness Briefing — free

Thirty minutes. Straight answers.

Thirty minutes. We map your supplier risk picture and show you what visibility looks like — even if you never hire Lionfish.

Get in touch

See your supply-chain risk clearly

Tell us about your contracts and your timeline. We reply within one business day — and you leave the briefing with answers either way.

  • 1We reply within one business day — usually faster.
  • 2A 30-minute call with someone who can actually answer your questions.
  • 3A straight recommendation — even if it's that you don't need us yet.

Prefer to skip the form? Book a time directly or call 1-877-732-6772. Information you submit is handled per our Privacy Policy.

Find Out Where I Stand