- Aethon Guide supports small and midsized defense industrial base companies preparing for CMMC Level 2
- Aethon Security’s new offering provides NIST SP 800-171 control implementation, gap remediation and compliance documentation
- Aethon Guide is designed for CUI environments involving engineering, manufacturing and hybrid architectures
Aethon Security has launched Aethon Guide to support small and midsized defense industrial base companies in attaining and maintaining Cybersecurity Maturity Model Certification, or CMMC, Level 2 readiness, according to a press release the company sent to GovCon Wire.
What Is Aethon Guide?
Aethon Guide is a managed cybersecurity and compliance service that bundles four capabilities under one managed service, including IT management, cybersecurity, secure collaboration tools and automated compliance tracking. CMMC Level 2 certification requires a specific set of NIST SP 800-171 technical controls, which the service is built to implement.
The offering covers three areas: closing security gaps, implementing NIST SP 800-171 controls and preparing documents needed for assessment, including policies, a system security plan and an incident response plan.
The company said Aethon Guide is tailored to each customer’s business requirements and establishes a client-owned information security program.
Aethon Security CEO Derek Kernus said the service is intended to give small and midsized contractors a practical way to prepare for CMMC requirements while keeping the process manageable in terms of cost, deployment and ongoing compliance.
The launch follows Aethon Security’s recent promotion of Noël Vestal to president, a move that expanded the leadership role of an executive who has helped advance the company’s NIST SP 800-171 and DFARS 252.204-7012 programs.
What Technologies Does Aethon Guide Use?
Aethon Security said Aethon Guide uses technologies from AvePoint and IntelliGRC, along with internally developed automation.
AvePoint Baseline Management handles configuration settings, policy enforcement and ongoing compliance checks for Microsoft 365 GCC and GCC High environments. IntelliGRC is used for compliance workflows and evidence management.
Aethon Guide also integrates PreVeil to support encrypted email and file sharing involving controlled unclassified information. Organizations running PreVeil alongside Microsoft 365 Commercial can use the service, as can those on Microsoft GCC or GCC High.
How Does Aethon Guide Address CMMC Requirements?
The service supports compliance with Defense Federal Acquisition Regulation Supplement 252.204-7012 and NIST SP 800-171. Aethon Security said it is designed for organizations whose CUI environments include engineering systems, manufacturing systems or other workloads requiring a hybrid architecture.
