Do we need CMMC Level 2?▼
It depends on whether you handle Controlled Unclassified Information on DoD contracts, and what your contracts actually require. If you only receive Federal Contract Information, Level 1 may apply. If you get drawings or specs marked CUI, you're likely looking at Level 2, which maps to the security requirements in NIST SP 800-171. The contract clauses and your customer's flowdowns are the final word, and your contracts team should read them. We can review the data you receive with you, help you understand which level the work points to, and plan from there instead of guessing.
Is Microsoft 365 GCC High required?▼
Not always, but it's a common choice. DFARS 252.204-7012 expects cloud services storing covered defense information to meet FedRAMP Moderate equivalency and support incident reporting, and ITAR data needs U.S.-person controlled handling. GCC High is built for both, which is why many suppliers use it for at least the CUI enclave. Some shops instead keep CUI on tightly controlled on-premises systems, or use other cloud services that meet the requirements. We'll walk through the tradeoffs in cost, licensing and user impact, and build whichever approach fits your contracts and how your engineers work.
Can you secure our CNC machines?▼
We can secure the network around them, not the machines themselves. Many CNC controls and DNC servers run older operating systems that can't take endpoint agents or regular patches without the OEM's approval. We put them on an isolated segment, allow only the program transfer traffic they need, control and log vendor remote access, and back up programs and configurations. Changes inside the control, such as firmware updates or parameter changes, stay with the machine OEM or your integrator. That approach protects production without risking a crashed spindle or a voided service agreement.
How do you handle foreign nationals and ITAR data?▼
Your export compliance lead and export counsel decide who may access ITAR-controlled data and whether licenses are needed. Our job is to make IT enforce those decisions reliably. We set up access groups for authorized users, keep controlled data in U.S.-hosted storage, block sharing to unauthorized external parties, and log who opened what. We'll also make sure IT support staff touching that environment are U.S. persons. When someone's status changes or a new hire starts, there's a clear process to update access, which beats discovering months later that a shared drive was open to everyone.
What does a System Security Plan actually involve?▼
An SSP describes your environment, where CUI lives, who has access and how you meet each NIST SP 800-171 requirement. Assessors and primes read it closely, so generic templates don't hold up well. We write it with your team based on what's really configured, attach diagrams and evidence, and list anything not yet done in a POA&M with owners and dates. Then we keep it current as systems change. A good SSP doubles as an operating manual: a new IT person or auditor can read it and understand how your environment is protected.
We also do commercial aerospace work. Does all this still matter?▼
Yes, even without DoD contracts. Commercial primes and tier-one suppliers send proprietary models and specs under strict NDAs and increasingly ask suppliers about cybersecurity in their onboarding and audits. Some commercial parts are export-controlled under the EAR, which brings its own handling rules. The same basics apply: know where customer data lives, limit who can reach it, protect CAD systems and segment the shop floor. If you do both defense and commercial work, a scoped enclave lets you apply the heaviest controls only where the contracts require them.
Do you provide Aerospace Manufacturing IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers aerospace manufacturing IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Aerospace Manufacturing IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.