Infinity Fuel Cell Establishes Cybersecurity Compliance for Government Contracts

Logo for INFINITY, text in bold black with blue and green arcs.

"Thanks to CONNSTEP the compliance process was not as overwhelming as it could have been. They helped us not to overwork or over engineer things that we already had in place. They also kept us focused and provided good guidance. It’s an ongoing process which we are better prepared for now."

—Bill Davis, Controller, HR Director, Infinity Fuel Cell and Hydrogen, Inc.


Established in 2002, Infinity Fuel Cell and Hydrogen leverages its years of military and space fuel experience designing the next generation of air-independent fuel cells and regenerative fuel cells. With support from NASA and other U.S. government agencies, Infinity has achieved key breakthroughs in fuel cell design that have simplified the complexity of these systems and significantly improved performance and reliability.


Infinity Fuel is primarily focused on the aerospace and defense markets, providing technology to Unmanned Aerial Vehicles, Autonomous Underwater Vehicles, and Space programs. As a key manufacturer for NASA and military applications, cybersecurity compliance is of paramount importance.

  • Challenge

    Evolving Cybersecurity Landscape


    The defense industry and commercial businesses are increasingly concerned about cybersecurity. In most cases, to qualify as a contractor for government contracts, adherence to established cybersecurity standards is a requirement.


    Given the amount of work Infinity Fuel conducts with NASA and the federal government, the company was obligated to conform to cybersecurity requirements. To help them fulfill their cyber compliance, Infinity partnered with CONNSTEP, the Manufacturer Extension Partnership (MEP) representative in Connecticut.

  • Solution

    Initiating the Compliance Process


    As a government contractor, Infinity Fuel Cell and Hydrogen must comply with Defense Federal Acquisition Regulation Supplement (DFARS) requirements that all companies doing business with the U.S. Department of Defense (DoD) safeguard sensitive defense-related data and report cybersecurity incidents. Adequate security includes implementing the requirements of National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171.


    Infinity needed to complete a system assessment, implement new policies, conduct staff training, and strengthen their Information Technology (IT) hardware and software configurations.


    In order to improve the safeguards of defense-related data, CONNSTEP collaborated with Infinity Fuel to:

    • Perform a gap analysis to NIST SP 800-171 requirements
    • Create a Plan of Action (POA)
    • Customize policies and procedures
    • Define milestones in the POA
    • Create a System Security Plan (SSP)
    • Create an Incident Response Plan (IRP)
    • Train employees on new policies and procedures

    Infinity’s implementation of NIST SP 800-171 controls is a key step towards the development of a sustainable Cybersecurity Maturity Model Certification (CMMC) program.

  • Result

    Compliance with DoD cybersecurity measures was well-documented by Infinity management with guidance and assistance by CONNSTEP.


    Specifically, CONNSTEP conducted an assessment of Infinity’s understanding of the DFARS and NIST SP 800-171 requirements. The effectiveness of security controls was evaluated and any gaps in the performance of these controls were identified as they related to NIST SP 800-171 and delivered in a report.


    With findings from the gap analysis report, a Plan of Action was created with risk prioritization. It included policies and procedures structured to help Infinity achieve compliance with DFARS 252.204-7012 and NIST SP 800-171 cybersecurity protocols and requirements.


    The Infinity Fuel team and their IT resources worked with CONNSTEP on an SSP and IRP for the company. Infinity’s System Security Plan contains their:


    • Cybersecurity assessments
    • Network and interconnection diagrams
    • Plan of Action information
    • Policies and procedures for NIST SP 800-171 compliance

    The Incident Response Plan developed by the Infinity team prescribes timely and protective procedures for employees to handle cyber incidents at the company and their IT network, necessary to be compliant with NIST SP 800-171.


    Infinity Fuel management has taken the necessary steps and followed the processes required to achieve compliance in good standing as a contractor for federal government programs.


    Next Steps

    Infinity management will train their employees on policies and procedures to ensure cybersecurity compliance at all levels of the company.


    In addition, CONNSTEP will assist Infinity Fuel in development of a sustainable CMMC program, building on their implementation of NIST SP 800-171 controls. The program provides assurance to the DoD that Infinity has the ability to meet cybersecurity requirements and manage information risk.

Logos of State of Connecticut Governor's office and RAISE US
By Amanda Beaulieu June 29, 2026
Connecticut is one of several states partnering with a new nonprofit organization to help workers thrive in an AI world and support job growth in the new tech economy. On Monday, Governor Ned Lamont announced that Connecticut is joining Arkansas, Maryland, and Utah in partnership with RAISE US , an organization bringing together states, employers, workers, and educators to build a workforce infrastructure that supports and trains workers to succeed in a future shaped by AI and emerging technologies. “We need to ensure that Connecticut workers and Connecticut jobs benefit from these breakthroughs and do not get left behind,” said Lamont . In May, Lamont signed legislation to help prepare Connecticut’s workforce with the developing technical skills related to AI by establishing new training programs. “Through this partnership with RAISE US, we are committing to take practical next steps to ensure our state has the policies, coalitions, and resources in place to help workers gain new skills, support families through periods of change, and connect people to growing careers,” said Lamont. RAISE US was co-founded by former U.S. Secretary of Commerce and former Governor of Rhode Island, Gina Raimondo, and former Indiana Governor, Eric Holcomb, the co-chair of the organization’s board of directors. According to a press release from Lamont’s office, RAISE US recognizes that emerging technologies are reshaping the economy and require a collaborative approach that brings together state partners, employers, education and training providers, and innovative public policy. “America has a technology strategy for leading the global AI competition. It does not yet have a people strategy—and we cannot lead without one,” Raimondo said. “If we build the best AI systems in the world and leave millions of Americans behind, we won’t have won anything.” Raimondo acknowledged that while AI will create new jobs and industries, it could also bring significant workforce disruption. The RAISE US website cites projections that AI will create a net 78 million new jobs worldwide by 2030, and that workers with AI skills earn, on average, 68% more than workers without those skills. “We shouldn’t fearmonger, but we can’t pretend our training and worker support systems are ready, either. It’s time for innovative and practical solutions,” said Raimondo. “RAISE US gives state leaders a playbook that connects more Americans with the skills and careers needed in the years ahead,” said Holcomb. He emphasized that workforce development is an “all hands-on-deck moment”, not an issue divided along political lines. “I learned this work gets done at the state level, in partnership with employers—not by mandates from Washington,” said Holcomb. The press release states that RAISE US is partnering with leading global technology companies and labor groups, and is building a set of partnerships to support its research, policy, and employer-engagement work with numerous research and consulting groups. “We’ve assembled the country's leading companies, best economists, and philanthropy at a scale rarely seen—all to advance new ideas and incentives, pilot them with governors and business, and scale what works,” said Raimondo. "I want the workforce of Connecticut to look at the years ahead and see opportunity, not uncertainty,” said Lamont.  For Connecticut manufacturers, the initiative could help strengthen the pipeline of workers with AI and advanced technology skills as companies continue adopting automation and digital manufacturing tools.
CONNSTEP celebrated its 25th anniversary with a gala at Hartford's historic Bushnell in Hartford, CT
June 16, 2026
Your input will directly shape the programs, resources, and events we deliver—ensuring they reflect what matters most to you and your business.
25 Years of CONNSTEP: Celebrating the People and Partnerships Powering Connecticut Manufacturing
By Amanda Beaulieu June 4, 2026
On March 25, 2026, CONNSTEP celebrated its 25th anniversary with a memorable gala at Hartford's historic Bushnell Performing Arts Center.
WHI Global Expands Aerobond Composites Manufacturing Operations in Enfield
May 14, 2026
WHI Global, a leading vertically integrated manufacturer serving the aerospace and defense industry, announced the opening of its Aerobond Composites manufacturing facility in Enfield.
Worker using a polishing wheel on a vanity top.
By Amanda Beaulieu May 5, 2026
Manufacturers across Connecticut are navigating a rapidly evolving landscape. Your voice and your needs matter. Take The Manufacturer’s Voice Survey today.
April 29, 2026
Phoenix Manufacturing, Inc., founded in 1989, is a privately held family-operated small business in Enfield, Connecticut, specializing in precision machining for the aerospace industry. What began as a two-person operation in a 2,000-square-foot building has grown into a company with over 100 employees operating out of a 114,000-square-foot, state-of-the-art manufacturing facility. As a contract manufacturer, Phoenix specializes in complex, tight-tolerance components, supported by more than 40 CNC machines and a multi-axis mill/turn line. The company provides end-to-end manufacturing solutions—from engineering consultation through full-scale production—serving commercial aviation, spaceflight, and defense markets for both domestic and global customers, including leading aerospace and defense OEMs. A defining element of Phoenix’s growth has been its strategic investment in advanced manufacturing technology, particularly palletized machining centers. Since 2017, the company has added 11 machining centers integrated with palletized systems, enabling unattended, automated production and significantly expanding machining capacity. This automation journey has positioned Phoenix to better meet increasing customer demand while maximizing machine utilization. Phoenix’s commitment to quality is central to its operations and customer relationships. Managing more than 600 active part numbers, the company strives for 0 parts per million (PPM) defects and 99% on-time delivery (OTD) for major OEM customers. Its quality management system is certified to ISO 9001 and AS9100 Rev D standards, and Phoenix also holds NADCAP certifications in Nonconventional Machining and Nondestructive Testing, reflecting a rigorous, inspection-driven approach to delivering consistent, high-quality results.  Guided by a mission to deliver high-quality, cost-effective products through advanced technology and an uncompromising commitment to quality, Phoenix continues to invest in innovation, automation, and the next generation of manufacturing leadership.