Overview
What is ControlStack?
A managed cybersecurity and compliance service that brings IT management, security, secure collaboration, and automated compliance tracking together in one offering.
Built for small and mid-sized defense contractors protecting Controlled Unclassified Information (CUI), ControlStack helps implement NIST SP 800-171 Rev. 2 controls and prepare for assessment.
Keep your existing Microsoft 365 or Google Workspace environment, with a separately scoped workflow for CUI.
Key benefits
- Build toward CMMC Level 2 readiness
- Work with the tools you already own
- Reduce risk and close security gaps
- Prepare assessment documentation
- A practical fit for small and mid-sized contractors
One service
Four capabilities in one service
IT management
A secure, managed IT environment
Cybersecurity
Threat prevention, detection and response
Secure collaboration
Work securely with your team and partners
Automated compliance tracking
Continuous monitoring and reporting
How it works
From your existing workspace to assessment readiness
- 1
Your existing environment
or
Familiar tools. A defined CUI workflow.
- 2
ControlStack
- Close security gaps
- Implement NIST SP 800-171 controls
- Prepare required documentation
- 3
Assessment readiness
- Policies & procedures
- System Security Plan
- Incident Response Plan
- Supporting evidence
Technology ecosystem
Established security technologies, brought together with Braxton-Grant’s proprietary automation.
- Compliance management, IT management & monitoring
- Cloud security & data protection
- Network security & infrastructure
- Encrypted email & file sharing for CUI
- Proprietary automation for compliance, monitoring & reporting
Why it matters
Support for NIST SP 800-171 and DFARS 252.204-7012, built around the way your business operates.
Designed for hybrid environments across business development, engineering, manufacturing, and operational technology.
Technology, documentation and guidance
What’s included
A cybersecurity program tailored to your mission, operations, and risk profile, with ongoing support after implementation.
Gap assessment & remediation
Review your environment against NIST SP 800-171 Rev. 2 and plan the work to close identified gaps.
SPRS score support
Support your self-assessment using the DoD Assessment Methodology and preparation of the score for SPRS submission.
Technical & administrative controls
Implement security controls and the policies and procedures that support them.
Documentation & evidence
System Security Plan (SSP), Incident Response Plan (IRP), Plan of Action & Milestones (POA&M), and supporting artifacts.
A mobile laptop
A self-contained mobile laptop is included in the base package.
Expert guidance & ongoing tracking
Work with our compliance and security team to maintain controls, monitor progress, and prepare for assessment.
“The cost of licensing, documentation, and operational support puts compliance out of reach for many small contractors. ControlStack delivers enterprise-grade security on the Microsoft 365 or Google Workspace environment you already own.”
Protect
Your people and data
Enable
Mission growth
Prepare
For assessment
Focus
On what you do best
Let’s move your mission forward.