Do we need CMMC if we only machine a few defense parts?▼
It depends on what data you receive. If a prime sends you Controlled Unclassified Information, such as drawings with CUI markings, the DFARS clauses in your purchase order generally require NIST SP 800-171 controls and a posted SPRS score, and CMMC requirements are being phased into new contracts. If you only receive Federal Contract Information, a lighter level may apply. Ask your customer which level they’ll flow down. We help you scope the smallest environment that meets it, often a separate enclave just for defense jobs.
Are ITAR and CUI the same thing?▼
No, though they overlap. ITAR is an export control regulation covering defense articles and technical data on the U.S. Munitions List, and it limits access by foreign persons. CUI is a broader government category for sensitive unclassified information, and export-controlled data is one type of it. A drawing can be both. In practice, ITAR data needs access limited to authorized U.S. persons and careful handling of where it’s stored, including the cloud region. Your customer and your counsel decide classification; we build the environment that enforces it.
Can our CNC machines stay on the network?▼
Often yes, on their own segment. Networked controls and DNC transfers save a lot of walking and USB sticks. We put them behind a firewall that only allows the program transfer traffic they need, block internet access, and keep the front office off that segment entirely. Some older controls only accept RS-232 or USB, and we build a safe routine for those. Anything involving firmware, control parameters or the builder’s own remote service tool stays with the machine tool builder; we secure the network path.
How do you protect our proven G-code?▼
We store programs in a structured library on a server with permissions, version history and immutable backups. Programmers publish approved versions; operators load from the library through DNC or a controlled kiosk. If someone overwrites a proven file, you can roll back to the exact version that passed first article. Backups are kept somewhere ransomware can’t reach, and we test restores. For shops that use a PDM or program management tool, we support that system and its database instead of building something parallel.
Our programmers like to work from home. Is that allowed with CUI?▼
It can be, with the right setup. Controlled data shouldn’t live on a personal computer or travel through personal email. A common approach is a company-managed laptop or a virtual desktop inside the enclave, with MFA and logging, so the data never lands on a home PC. CAM licensing sometimes adds wrinkles, which we sort out with the vendor. We document remote access in your system security plan so it holds up when a prime or assessor asks how it works.
What does a CMMC assessor actually look for?▼
They want to see that each required control is implemented and that you can prove it. That means a system security plan describing your environment, network diagrams, policies, and evidence like access lists, MFA settings, patch reports, audit logs and training records. They’ll interview staff about how things really work. The most common trouble spots are poorly scoped environments and controls that exist on paper only. We help you build the controls into daily operations so the evidence is already there when the assessment is scheduled.
Do you provide Machine Shops IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers machine shops IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Machine Shops IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.