Manufacturer finds export-controlled data in ordinary email and fixes it without re-tooling the whole company
A large automotive and industrial components manufacturer. Outcome verified
The problem
A large automotive and industrial components manufacturer wanted more defense-sector work, but export-controlled information arrived through ordinary email and file shares, mixed with everyday business data. Leadership could not say where regulated information lived or who could reach it. Only a few dozen people actually handled it, so bringing the whole enterprise under CMMC would have been disruptive.
Why it mattered
Defense customers were beginning to flow down CMMC Level 2 on top of existing export-control obligations. Without a defensible answer the company risked losing higher-margin work.
What we did
Vizius traced how regulated information actually entered and moved through the business, then sized a segregated compliant environment to that footprint instead of the enterprise. A build-or-buy analysis showed pre-certified government cloud services were faster and cheaper than proving compliance across existing systems. Vizius runs the environment as an outsourced compliance service, so the company needed no compliance staff.
What changed
The environment, documentation, training and user pilot were complete by mid-2026. A September 2026 readiness review found the security plan covers all 110 NIST 800-171 practices, 103 already implemented, toward a defensible Level 2 self-assessment.
- Manufacturing
- Large company
- CMMC
- NIST 800-171
- ITAR/EAR