Overview
ControlStack
Secure · Scalable · Always on
What is ControlStack?
A managed cybersecurity and compliance service that brings IT management, security, secure collaboration, and automated compliance tracking together in one offering.
Built for small and mid-sized defense contractors protecting Controlled Unclassified Information (CUI), ControlStack helps implement NIST SP 800-171 Rev. 2 controls and prepare for assessment.
Keep your existing Microsoft 365 or Google Workspace environment, with a separately scoped workflow for CUI.
Key benefits
- Build toward NIST SP 800-171 Rev. 2 readiness while reducing risk and closing security gaps.
- Keep the tools you already own without migrating to GCC or GCC High.
- Get turnkey delivery built for hybrid environments.
- Prepare for assessment with documentation templates ready to tailor to your organization.
- Keep evidence current through continuous evidence collection and compliance tracking.
- Lower your per-user cost as you grow with tiered pricing.
- Scalable solution that grows from one user to hundreds.
Security Operations & Monitoring
- Endpoint Detection& Response
- Remote Monitoring& Management
- 24/7 SOCMonitoring
- VulnerabilityManagement
- SaaS Health& Alerting
- AutomatedRemediation
Identity & Access
- Multi-Factor Authentication
- Security Awareness Training
- Secure Web Gateway & ZTNA
SaaS & Cloud Security
- Device & Productivity Management
- SaaS Data Loss Prevention
- Documentation & Knowledge
- Email Security & Data Classification
- Dark Web Monitoring
Testing & Validation
ControlStack Endpoint
- Device Hardening
- Threat Detection
- Remote Management
- Vulnerability Scanning
Data Protection & Compliance
How it works
We make the pieces work together.
Protect the information your contracts depend on. Show how you protect it.
ControlStack combines a managed laptop, security operations and protected collaboration with Braxton-Grant’s experience and software in one cybersecurity and compliance service for government contractors.
We help you put the controls into practice, keep them working and prepare the evidence for assessment.
- Define your CUI boundary
- Verify identity. Limit access.
- Harden every device
- Patch vulnerabilities. Block malware.
- Encrypt sensitive data
- Control sharing and USB
- Monitor and detect threats
- Respond and recover
- Train people. Secure facilities.
- Document controls. Prove readiness.
ControlStack in your workday
One document. From receipt
to assessment.
A user receives a controlled document. Here’s where ControlStack helps.
Controls in practice. Evidence carried forward.BGT helps monitor, document and track remediation throughout the workflow.
Illustrative workflow. Select a step to explore; the story continues automatically. The CUI boundary, controls and responsibilities are defined for your engagement.
The business requirement
Doing the work means protecting the information.
When your contract requires NIST SP 800-171 Rev. 2, protecting Controlled Unclassified Information (CUI) is part of doing business. You need security controls that work in daily operations—and documentation and evidence that show how they work.
ControlStack connects
the requirement
to the way you work.
Technology, documentation and guidance
What’s included
A cybersecurity program tailored to your mission, operations, and risk profile, with ongoing support after implementation.
Gap assessment & remediation
Review your environment against NIST SP 800-171 Rev. 2 and plan the work to close identified gaps.
SPRS score support
Support your self-assessment using the DoD Assessment Methodology and preparation of the score for SPRS submission.
Technical & administrative controls
Implement security controls and the policies and procedures that support them.
Documentation & evidence
System Security Plan (SSP), Incident Response Plan (IRP), Plan of Action & Milestones (POA&M), and supporting artifacts.
A mobile laptop
A self-contained mobile laptop is included in the base package.
Expert guidance & ongoing tracking
Work with our compliance and security team to maintain controls, monitor progress, and prepare for assessment.
Technology ecosystem
Established security technologies, brought together with Braxton-Grant’s proprietary automation.
Compliance management, IT management & monitoring
Cloud security & data protection
Network security & infrastructure
Encrypted email & file sharing for CUI
Vulnerability lifecycle management
Enterprise AI implementation partner
Automation for compliance, monitoring & reporting
Why it matters
Support for NIST SP 800-171 and DFARS 252.204-7012, built around the way your business operates.
Designed for hybrid environments across business development, engineering, manufacturing, and operational technology.
The cost of licensing, documentation, and operational support puts compliance out of reach for many small contractors. ControlStack delivers enterprise-grade security on the Microsoft 365 or Google Workspace environment you already own.
Protect
Your people and data
Enable
Mission growth
Prepare
For assessment
Focus
On what you do best
Frequently asked questions
Working with ControlStack
How the managed laptop protects CUI while supporting your day-to-day work.
How are continuous compliance and software managed?
Every laptop is locked down before it ships, configured against NIST SP 800-171 Rev. 2 and the DISA Windows 11 security standard. Users do not have administrator access, data on the device is encrypted, sign-in requires multifactor authentication, and USB ports are restricted until approved. Braxton-Grant monitors and patches every device.
Users cannot install software locally. Software requests go through the configuration management process, which includes user management.
Can I work offline, and how often must the device connect?
Yes. Offline work is allowed. The laptop is configured to process and store CUI data.
Each device should connect to the internet at least every 14 days and stay on for a full business day so updates, security scans and logs can run. Any internet connection works, including your office or an employee’s home.
A device that goes 30 days without connecting is locked until support reactivates it.
How do USB drives and peripherals work?
USB ports are blocked by default. To use a flash drive, external hard drive, license dongle or other peripheral, submit a request describing the device and the business justification. Storage devices must come from an approved list of devices capable of storing CUI.
Braxton-Grant Operations reviews the request and, if approved, configures the laptop for that specific device. Each new USB device requires its own request.
Can I use a network printer or scanner?
No. Only directly connected printers are allowed.
Are email, browsing and applications restricted?
No. Normal operations are allowed. An approved encrypted email and file-sharing service is used for sending, receiving and storing CUI documents.
Data loss prevention (DLP) controls are used to prevent emailing or uploading CUI from the laptop to unapproved locations. The approved encrypted CUI service is the default permitted destination.
Economically Disadvantaged Women-Owned Small Business
