Thornhall Consulting

Thornhall Consulting provides CMMC and NIST 800-171 compliance readiness, fractional IT and cybersecurity leadership, and secure AI deployment for manufacturers in the defense and aerospace supply chain.

Founder Andrew Phillips brings 20 years of enterprise IT infrastructure and cybersecurity leadership from real, multi-site manufacturing operations — including reducing a manufacturing client's cyber risk score from 70 to 30 in under a year, cutting security incidents by 90% through modern EDR, MFA, and immutable backup deployment, and rebuilding disaster recovery programs from untested paper plans into monthly-tested, production-grade processes.

Thornhall works with manufacturers and suppliers across Brevard County and the Space Coast who handle Federal Contract Information or Controlled Unclassified Information as part of the defense and aerospace supply chain — whether they supply directly to a prime like L3Harris, Northrop Grumman, or Collins Aerospace, or sit further down the chain. Services include NIST 800-171 gap assessments and remediation, System Security Plan and POA&M documentation support, ongoing fractional IT and security leadership, and secure AI deployment that respects an existing compliance boundary. Thornhall is not an accredited C3PAO and does not perform official CMMC certification assessments — this is readiness and implementation work to get clients genuinely prepared for formal third-party assessment.

Based in Melbourne, Florida.