Virginia, United States

Hampton Roads manufacturing: shipbuilding and naval defense suppliers

Hampton Roads is one of the largest naval shipbuilding and ship repair regions in the United States, centered on Newport News, Norfolk, Portsmouth and Chesapeake. Manufacturers here range from the major shipyards to small machine shops and fabricators that supply them, and nearly all face Navy-driven quality, traceability and cybersecurity requirements.

Anchor industries

Naval shipbuilding
Newport News Shipbuilding, part of Huntington Ingalls Industries, builds aircraft carriers and submarines, and a large supplier base provides castings, machined parts, pipe, cable and electronics.
Ship repair and overhaul
Private yards in Norfolk and the surrounding area, and the public Norfolk Naval Shipyard in Portsmouth, perform availabilities that generate steady demand for fast-turn machining and fabrication.
Defense and aerospace suppliers
Machine shops, fabricators and electronics assemblers supporting Navy programs, with additional aerospace and research work near NASA Langley in Hampton.
Marine and port-related manufacturing
Equipment, fabrication and repair services tied to the Port of Virginia and commercial marine operations.

The ecosystem

GENEDGE Alliance MEP center
Virginia's NIST MEP affiliated center, which provides consulting and training to small and mid-sized manufacturers and supports cybersecurity compliance work.
Newport News Shipbuilding (Huntington Ingalls Industries) prime contractor
Builds U.S. Navy aircraft carriers and, with General Dynamics Electric Boat, Virginia-class submarines.
Norfolk Naval Shipyard anchor facility
A U.S. Navy public shipyard in Portsmouth that overhauls and repairs surface ships and submarines.
The Apprentice School at Newport News Shipbuilding workforce program
A long-running company apprenticeship program training trades and designers for shipbuilding careers.
Old Dominion University university
Norfolk-based research university with engineering and maritime programs relevant to the regional defense economy.
Thomas Jefferson National Accelerator Facility (Jefferson Lab) research lab
A U.S. Department of Energy national laboratory in Newport News that sources precision components and cryogenic and vacuum equipment.
Port of Virginia port authority
Operates the deep-water terminals in Hampton Roads that move marine and industrial cargo.
Hampton Roads Alliance economic development
Regional economic development organization serving the Hampton Roads localities.

Requirements customers here expect

DFARS 252.204-7012 safeguarding of covered defense information and NIST SP 800-171CMMC 2.0 as it phases into Department of Defense contractsITAR registration and export control handling where applicable to the supplierNAVSEA technical requirements and shipyard-issued quality clauses for Navy ship workMaterial traceability and counterfeit part prevention for Navy supply chainsISO 9001 or AS9100 as a customer-specified quality system

What shops here make and for whom

Most small manufacturers in the region are second and third tier suppliers. They machine components, weld and fabricate foundations and structures, assemble cable and electronic assemblies, or provide fast-turn repair parts during ship availabilities. Their customers are shipyards, prime contractors and the Navy's own repair organizations.

Demand is lumpy. A repair availability or a submarine production milestone can send a surge of urgent requests, while gaps between awards leave capacity idle.

Quoting and estimating realities

Quotes against Navy-related work carry more than machining time. Estimators need to price first article inspection, material certifications, source inspection by a government or prime representative, special packaging and documentation packages that must travel with the part. Underestimating the paperwork is a common way to lose margin on a job that looks simple on the drawing.

Rework on specification changes is another risk. Keeping revision history tied to each quote and job in the ERP is worth the setup effort.

Price documentation and inspection hours as separate lines
Link each quote to the drawing revision it was based on
Track which customers pay on milestone versus delivery

Try it here, free

Counterfeit Parts Prevention Plan Template

Open full tool

A fill-in plan document covering approved sources, purchasing controls, receiving inspection, suspect part handling, reporting, training and records.

Fill in

Company name

Plan document number

Revision

Effective date

Primary standard referenced

Plan owner (role)

Scope

Source policy

Test and inspection resource

Record retention

Live preview

Download:

Counterfeit Parts Prevention Plan Template

Counterfeit Parts Prevention Plan

Company: Acme Precision Aerospace Inc. Document: QP-0812 Revision: B Effective: 2026-10-20 Plan owner: Director of Quality Reference: SAE AS5553 and AS6174, AS9100D clause 8.1.4 and applicable contract clauses

1. Purpose and scope

This plan defines how Acme Precision Aerospace Inc. prevents, detects, mitigates and reports counterfeit and suspect counterfeit parts so that they are not delivered to customers.

Scope: All purchased electronic parts, raw material, fasteners, hardware and finished components used in or delivered with aerospace and defense products.

2. Definitions

Counterfeit part: an unauthorized copy, imitation, substitute or modified part that is knowingly misrepresented as a specified genuine part of an original or authorized manufacturer.

Suspect counterfeit part: a part for which visual inspection, testing or other information provides reason to believe it may be counterfeit.

Use the definition in the customer contract where it differs.

3. Responsibilities

Role	Responsibility
Director of Quality	Owns this plan, approves exceptions, makes external reports
Purchasing	Buys only under the source policy, flows down requirements, keeps source records
Receiving inspection	Verifies documentation and packaging, performs inspection, quarantines suspect items
Quality engineering	Defines test requirements, investigates suspects, controls disposition
Training coordinator	Trains affected staff and keeps training records

4. Source selection and purchasing controls

Source policy: Original manufacturer or authorized distributor only.

Parts are bought from the original component manufacturer, original equipment manufacturer or their authorized distributors wherever possible. Purchase orders carry the counterfeit avoidance flowdown, require a certificate of conformance with traceability to the manufacturer, and prohibit substitution without written approval. Any purchase outside the source policy requires documented approval by Director of Quality and the customer where the contract requires it, and a defined test plan before use.

5. Receiving and inspection

Receiving verifies the purchase order, packaging, labels, date and lot codes, manufacturer markings, certificates and any anti-counterfeit features. Inspection depth is set by risk: part criticality, source, obsolescence status and past history. Where the source policy is not met, additional inspection and testing by Approved third-party lab holding ISO/IEC 17025 accreditation for the test methods used is required before release.

6. Risk-based verification

Risk level	Typical trigger	Minimum verification
Low	Manufacturer direct, full traceability	Documentation and visual check
Medium	Authorized distributor, long lead obsolescence	Documentation, enhanced visual, sample verification
High	Independent distributor or broker, obsolete part	Documentation, external visual, electrical or material test by Approved third-party lab holding ISO/IEC 17025 accreditation for the test methods used

7. Suspect and confirmed counterfeit parts

Suspect parts are tagged, quarantined and recorded as nonconforming. They are not returned to the supplier, scrapped or reworked until quality has completed its investigation and, where required, evidence is preserved. Confirmed counterfeit parts are removed from the supply chain, reported to the customer and, where applicable, to GIDEP and the relevant government authorities as the contract requires. Disposition records are retained.

8. Training

Purchasing, receiving, quality and stores personnel complete counterfeit awareness training on hire and at least annually. Training records are held by the training coordinator.

9. Flowdown to suppliers

Requirements of this plan are flowed to suppliers that furnish parts, material or assemblies. Suppliers must maintain their own controls proportionate to the risk, notify Acme Precision Aerospace Inc. of any suspect parts, and must not change source without notice.

10. Records

Source records, certificates, inspection results, test reports, training logs and reports are retained for: 10 years from final delivery, or longer if required by the contract.

11. Review of this plan

The plan is reviewed at least annually and after any confirmed incident or contract change.

Prepared by / Date

Quality manager / Date

General manager or president / Date

This is a starting point, not legal advice or a compliance certification. Government contracts may require a specific system under DFARS 252.246-7007 and 252.246-7008 and reporting under FAR 52.246-26; check your contract clauses and have counsel or your prime review the final plan.

Enforce source rules in your ERP

Want purchasing blocks and receiving holds that apply the plan automatically? We can walk through how it is built.

Optional. The tool and every export work without this. No spam.

ERP and systems seen in these shops

Small defense suppliers frequently run JobBOSS, E2, ProShop ERP or Global Shop Solutions, with some on Epicor Kinetic, Infor SyteLine or NetSuite. Larger suppliers lean on enterprise ERP with separate quality and document systems.

The practical gap is traceability: tying a lot of material, a certification, a routing step and an inspection record to a shipped part. Where that data sits in different tools, searching it for an audit or a corrective action request takes hours that a retrieval layer over those records can shorten.

Compliance, data handling and where private AI fits

Suppliers holding controlled unclassified information must protect it under NIST SP 800-171, and CMMC 2.0 adds assessment against those controls. That makes public AI chat tools a poor place for drawings, technical data packages or ERP exports. Running open-weight models on the supplier's own hardware, or in an environment the supplier controls and documents, keeps the data inside the boundary being assessed.

Netray does not hold a CMMC certification or confer one. The architecture lets the customer keep data in their own enclave and show where it goes. AI helps with document search and ERP questions, but it should not make inspection or release decisions.

Frequently asked questions

Where can a small Virginia manufacturer get help with cybersecurity compliance?

GENEDGE Alliance, Virginia's NIST MEP affiliated center, supports small and mid-sized manufacturers, including work on NIST SP 800-171 readiness. Suppliers can also work with a registered practitioner or assessor for CMMC preparation. Check current Department of Defense guidance for the rollout timeline.

What do Navy shipyard suppliers in Hampton Roads need to prove?

Requirements vary by contract, but commonly include a quality system such as ISO 9001 or AS9100, material traceability, first article inspection and flow-down clauses from the shipyard. Many contracts also require DFARS 252.204-7012 and NIST SP 800-171 for controlled unclassified information.

Can we use AI on technical data packages safely?

Only if the deployment meets your contract's data handling rules. Running a model on your own servers keeps data inside your boundary, but you still need access controls, logging and a documented system security plan. Confirm with your contracting officer or compliance lead before you load controlled data.

Does Netray work with shipyards in Hampton Roads?

Netray builds private AI on top of ERP and manufacturing systems and works remotely or on site at the customer's location. This page is a regional guide and does not imply any existing relationship with a particular shipyard or supplier.

Tools and guides for manufacturers in Hampton Roads, Virginia

Free tools

ERP fixes and how-tos

Costpoint Cloud or On-Prem for a Contractor Handling CUI?Deciding between Deltek Costpoint cloud and self-hosted for a defense contractor with CUI: scope, shared responsibility, cost, control, what to verify.

Guides

AI on your ERP

Manufacturing hubs

TermsDFARS 252.204-7012 NIST SP 800-171 CMMC (Cybersecurity Maturity Model Certification)AS9100 ITAR Traceability

All manufacturing hubs