Three Ways to Engage. One Standard of Delivery.
Every AeoliTech engagement is led by Leonard Esere, DoD Secret- and DoE Q-cleared, MITRE CMMC practitioner, LANL ATO engineer. Choose the model that matches your timeline and readiness position.
Regulatory update · July 13, 2026
CMMC Phase II is paused. Phase I is not.
The Department suspended the transition to Phase II and pending or future CMMC implementation milestones while it reviews the program. Phase I self-assessments remain in place. During the interim, NIST SP 800-171 Rev. 2 will be enforced through self-assessments and selected government-led assessments, and DFARS 252.204-7012 still requires contractors and subcontractors to safeguard covered defense information.
Tier 1
Readiness
For organizations that need to understand exactly where they stand before committing to a full program.
A comprehensive NIST SP 800-171 Rev. 2 and CMMC Level 2 gap assessment, delivered as an ATO-grade diagnostic, not a checkbox survey. We assess all 110 requirements, validate the evidence behind your SPRS position, build your initial SSP skeleton, and develop a prioritized POA&M.
Tier 2
Acceleration
For organizations that need to close real control gaps before their next affirmation, government review, prime-contractor review, or future certification assessment.
End-to-end NIST SP 800-171 and CMMC Level 2 readiness delivery, from current-state assessment through remediation and evidence-package completion. AeoliTech deploys PolicyCortex to automate evidence collection, control validation, and continuous drift monitoring, keeping the same work reusable across self-assessment, government review, and future certification.
Tier 3
Evidence Vault
For organizations that need their NIST and CMMC posture to remain accurate after the assessment work is finished.
A continuous monitoring and evidence maintenance retainer. PolicyCortex monitors your control state, flags configuration drift, and maintains your evidence library for affirmations, government reviews, and future assessments. AeoliTech provides quarterly control reviews, annual SSP updates, and on-call advisory for material changes to your CUI environment.
AeoliTech is a CMMC preparation and implementation partner, not an authorized C3PAO. We validate controls, remediate gaps, and make the evidence package review-ready. If independent certification is required under a future model or a specific contract direction, we support the handoff to an authorized assessor.
Book an SPRS & Evidence Review(469) 546-5585 | cmmcnow@aeolitech.com