01 // CMMC Level 2 Readiness

CMMC Level 2 Readiness.

For small defense contractors. Built for 2–10 person teams.

3.5WKS
Fixed Timeline
14DOCS
Full Package
110CTRL
NIST 800-171
02 // Why Kastle

Built around the engagement, not the retainer.

01 // Scoped

Everything in. Nothing TBD.

Scope, deliverables, and decisions are locked before the engagement starts. No billing surprises.

02 // Sized

Built for 2–10 person teams.

No enterprise IT department required. Engineered for a small business with a single owner-operator point of contact.

03 // Owned

A clean handoff. Not a dependency.

You receive the complete package, the source files, and a runbook to maintain it. We leave when the work is done.

03 // Your Security Stack

Microsoft-native. Audit-ready.

01
M365 Business Premium
Productivity Baseline

The licensing foundation. Email, collaboration, and the security floor every other control inherits from.

02
Entra ID
Identity & Conditional Access

Identity, MFA enforcement, and conditional access policies. The gate every user passes through to reach CUI.

03
Intune
Endpoint & Mobile Management

Device enrollment, compliance policies, and security baselines. BitLocker, Defender posture, app control.

04
Defender for Endpoint
EDR & Threat Monitoring

Endpoint detection and response, threat and vulnerability management, and the alert pipeline that feeds the IRP.

05
Purview
Data Classification & DLP

CUI labeling, retention, and data loss prevention. Activated on day one of the tenant build.

06
DoD SAFE / Virtru
Authorized CUI Channel

The sanctioned external transfer mechanism for controlled unclassified information. Configured, documented, and trained.

04 // Engagement

Ready to get compliant?

Contact Us