//services.html Services — enLight10 Solutions

Services

We help DoD contractors get secure, compliant, and audit-ready on Microsoft 365 GCC High and Azure. Today we provide cleared subcontracting support and packaged compliance & Zero Trust foundations. In parallel, we’re developing Agentic AI–enabled SOC and advanced data protection services you’ll see in our roadmap below.

Available Now — Subcontracting & Packages

Contractor Solutions (Subcontracting)

Cleared staff augmentation to help primes and DIB subs deliver.

  • Roles: SOC analyst, cloud security engineer, systems admin.
  • Models: time & materials, surge support, backfill.
  • Clearance: veteran-owned; eligibility for SDVOSB teaming.

Compliance Accelerator

Control mapping, evidence generation, and audit prep (CMMC L2 focus).

  • Gap assessment: mapped to NIST 800-171/172.
  • SSP, SPRS, POA&M: living documents, not shelfware.
  • Dashboards: control coverage, exceptions, residual risk.
  • Pre-audit: interview prep and artifact staging.
  • Inheritance: leverage GCC High platform controls appropriately.

Zero Trust Foundations (Entra + Defender)

Identity-first hardening aligned to DoD Zero Trust pillars.

  • MFA everywhere: phishing-resistant options for privileged roles.
  • Conditional Access: device compliance, geo, risk, and session controls.
  • PIM: just-in-time access, approval flows, access reviews.
  • Device posture: Defender/Intune baselines for endpoints.
  • Privileged workstations: admin tiering and PAW patterns.

Starter Bundles

Note: Additional bundles for SOC and CUI classification are in development (see Roadmap).

In Development — Roadmap

CUI Classifier (Purview)

Real-world CUI labeling and classification services.

  • Custom Sensitive Info Types: regex, keyword dictionaries, proximity rules.
  • Trainable classifiers: curated positives/negatives for prose-heavy content.
  • Auto-labeling policies: SharePoint, OneDrive, Exchange, Teams.
  • Markings: headers/footers and designation block automation.
  • Evidence: exportable events mapped to CMMC / NIST 800-171.

SOC-as-a-Service (Sentinel + Agentic AI)

Managed detection and response tailored for GCC High.

  • Rapid stand-up: data connectors, normalization, retention.
  • Use cases: CUI exfil, insider threat, account/device risk.
  • Automation: playbooks for triage, enrichment, containment.
  • Roadmap: Microsoft Security Copilot (agentic AI) for accelerated triage.
  • Coverage: 8×5 with on-call initially; 24×7 as we scale.

Zero Trust Ready (Full ZTA)

Beyond foundations — a complete DoD-aligned Zero Trust environment.

  • Privileged workstations (PAWs): tiered admin and isolation models.
  • Continuous access evaluation: session risk and adaptive controls.
  • Network segmentation: app proxies, conditional access by location.

Managed Compliance & IT-as-a-Service

Continuous compliance + secure IT operations for DIB SMBs.

  • CMMC-as-a-Service: ongoing evidence collection and dashboards.
  • Managed M365/Azure: patching, posture, policy governance.
  • Audit support: artifact staging and interview prep year-round.

Agentic AI for Data Protection

AI-assisted classification & DLP triage across Microsoft Purview.

  • Classifier agent: dynamic risk labeling of content/events.
  • DLP triage agent: reduce noise, escalate true exfil risks.
  • Insider risk: behavioral context to spot anomalous activity.

Multi-Tenant SOC Hub (Azure Lighthouse)

Central analyst view with strict tenant isolation.

  • Delegated access: manage customer workspaces without co-mingling data.
  • Aggregated incidents: central dashboard, per-tenant drill-down.
  • Runbook factory: reusable detections, playbooks, and reports.

How We Deliver

Readiness Checklist