Waukee, IA — August 17, 2026 — Okahara and Associates, Inc., the Hawaii-based engineering firm behind decades of civil, mechanical, and infrastructure work for federal, state, and local government clients across the islands, has achieved CMMC Level 2 certification; a rigorous, independently verified stamp of approval on its ability to safeguard Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) across the systems supporting its government project work. The assessment was conducted by ecfirst, an Authorized CMMC Third-Party Assessment Organization (C3PAO).
“A CMMC certification doesn’t happen by accident; it’s proof that the Okahara program was built to ensure cyber resilience for FCI and CUI,” said Ali Pabrai, Chief Executive of ecfirst. “It was evident that Okahara and Associates was disciplined and rigorous in its preparation.”
“Protecting the information our government clients trust us with isn’t optional; it’s part of the job,” said Matthew Fujioka, Vice President at Okahara and Associates “ecfirst performed a meticulous exercise to review assets and artifacts, the SSP and more across all the domains and objectives. Our team put in several months getting ready, and the assessment confirmed we’d built it right.”
The certification caps a preparation effort that reached into nearly every corner of Okahara and Associates’ operation, from IT infrastructure and access controls to the policies governing how project data moves between its Hilo and Honolulu offices and the government agencies it serves. For a firm built on multi-generational relationships with Hawaii’s public sector, the achievement sharpens a reputation more than four decades in the making: that Okahara and Associates treats its clients’ information with the same rigor it brings to the projects themselves.
The Competitive Edge This Certification Unlocks
For Okahara and Associates, CMMC Level 2 isn’t a compliance checkbox — it’s a competitive edge. The certification strengthens the firm’s ability to win and retain federal contracts that demand the highest level of information safeguarding, particularly in defense-adjacent infrastructure work, and it validates something the firm has long believed: that engineering excellence and information security are inseparable.
Behind the Assessment
ecfirst, an Authorized C3PAO, conducted the assessment on a fixed-fee basis using multiple senior Lead CMMC Certified Assessors (LCCAs), applying the CMMC CAP specifications throughout.
About Okahara and Associates, Inc.
With over 47 years of service in Hawai‘i, Okahara and Associates, Inc. has built a strong reputation for delivering practical, cost-effective, and sustainable civil and mechanical engineering solutions to both public and private sector clients. Established in 1979, we are a Hawai‘i-based, multidisciplinary consulting firm with offices on O‘ahu and Hawai‘i Island, supported by a staff of 40 professionals. Our mission is rooted in engineering excellence and client satisfaction, and we foster a team-oriented culture that emphasizes quality, efficiency, and continuous professional growth.
About ecfirst
Founded in 1999, ecfirst is a leading provider of AI, cyber defense, and compliance services across the United States and globally. ecfirst delivers end-to-end services in the areas of HITRUST, CMMC, HIPAA, NIST, Privacy, Pen tests, and AI (ISO 42001 and NIST AI RMF). With ecfirst, you, the client, always have complete flexibility with our fixed-fee services across our On-Demand Consulting and the customized Managed Compliance Services Program. Complimentary with every engagement comes the ecfirst experience of delivering thousands of assessments, ensuring you receive deep industry insight and best practices implemented.
ecfirst is a HITRUST Authorized External Assessor, a CMMC Authorized C3PAO, APP, ATP, and RPO. ecfirst is also an ISACA ATO and delivers CMMC CCP CCA programs on a regular schedule, both virtually and at conferences such as CS5 East. ecfirst has established industry-leading credentials in training, including CHP, CSCS, CCSA, and aiCRP. Learn more: www.ecfirst.com • www.ecfirst.biz • https://ecfirst.com/cmmc/
Client Executive Contact
Contact Peter Harvey, Peter.Harvey@ecfirst.com, to learn more about CMMC Readiness, Assessment, and Certification Training.
