AS9100D, ITAR, and CMMC 2.0 cert-readiness consulting for Northern Kentucky job shops graduating into aerospace work — anchored on Safran Walton, Mazak Florence, Starrag Hebron, HDT Florence, Amazon Air, and DHL maintenance demand for an expanded Kentucky-side Tier-2 supplier bench.

Three things converge here. First, the demand is named, public, and growing. Safran's $65 million Walton expansion implies a carbon-brake capacity ramp from about 140,000 to 210,000 disks per year, and landing-gear assemblies require qualified NADCAP processing across the supplier tier — chemical processing under AC7108, non-destructive testing under AC7114, heat treatment, and surface enhancement. Mazak built its 40,000th machine in August 2025; its customer base of Northern Kentucky and Ohio aerospace job shops is the cohort that needs AS9100 readiness to move onto Safran, L2 Aviation, and HDT supplier rolls. The Tristate Aerospace Alliance and BE NKY have been publicly courting Tier-2 supply-chain expansion since 2023. The Kentucky Aerospace Industry Consortium's $1.5 million federal grant funds workforce and supplier-development programming.

Second, the Kentucky-resident AS9100 shop count is thin. The one Kentucky shop visible in machineshop.directory's public list is Victor Enterprises in the Owensboro region — 280 miles from Boone County. The authoritative IAQG OASIS pull is the verification we have not yet run, but cross-references to Kentucky Aerospace Industry Consortium member rosters and BE NKY recruitment materials match the thin reading. The competing consultancies are mostly Ohio-based — simpleQuE in Cleveland, CVG Strategy and ISO 9001 Group nationally. They serve Northern Kentucky shops across the river but do not have a Kentucky-resident specialty consultancy footprint.

Third, the regulatory tailwind is real and accelerating. AS9100D is the aerospace quality standard the prime supplier flowdown requires. NADCAP scope adds — AC7108 for chemical processing, AC7114 for non-destructive testing, AC7110 for welding, AC7102 for heat treatment — layer specialty work on top of the quality-management baseline. ITAR registration (the State Department's Directorate of Defense Trade Controls fee) is $2,500 at Tier 1 and $4,000 or more at Tier 3, effective January 9, 2025, for any defense-controlled-component supplier. CMMC 2.0 Level 2 is required for defense industrial base contractors handling controlled unclassified information by 2026, with first-year implementation cost in the range of $70,000 to $250,000 per program (small-business average about $138,000; mid-market about $210,000). A NIST SP 800-171 gap assessment runs $3,500 to $20,000 standalone. The compliance bundle is a multi-year revenue stream per client.

The customer-acquisition channel is relationship-driven and named. Kentucky Aerospace Industry Consortium member events, BE NKY industry-director introductions, registrar referrals (NQA-USA, BSI, simpleQuE adjacency, DEKRA, PRI Registrar through eAuditNet), and direct supplier-quality team relationships at Safran, Mazak, Starrag, and HDT are the entry points. Cold outreach to ISO 9001 shops does not work in this category. The pipeline comes from credentialed founders making warm introductions, which is why the talent layer — a former Boeing, GE Aviation, or Safran supplier-quality auditor with Northern Kentucky roots — is the binding constraint, not the market.

Per-engagement readiness pricing. Industry-published AS9100 certification cost (registrar + cert fees only, not consulting) runs $10,000–$30,000. Full readiness consulting engagements run $40,000–$90,000 including documentation, gap audit, internal audit, first-article preparation, DCMA pre-readiness. CMMC 2.0 Level 2 first-year implementation $70,000–$250,000 (small-business average $138,000, mid-market $210,000); SSP development $15,000–$40,000; remediation $35,000–$115,000; consultant hourly rate $250–$400. NIST SP 800-171 gap assessment $3,500–$20,000 standalone. ITAR registration is a pass-through fee (Tier-1 $2,500, Tier-2 $4,000, Tier-3 $4,000+ effective January 9, 2025), not consulting revenue.

Recurring AS9100 surveillance retainer $1,000–$2,000/month per retained client = $12,000–$24,000 ARR per client. Year-over-year, the surveillance retainer book accumulates while project engagements turn over.

Year-by-year revenue ramp for a solo founder with ex-Boeing/GE Aviation/Safran SQ background: Year 1 = 3 engagements × $55,000 average + 1–2 retainers × $20,000 = approximately $185,000 revenue, ~55% margin, ~$100,000 take-home. Year 2 = 6 engagements × $60,000 + 4 retainers × $80,000 = approximately $440,000 revenue, ~58% margin, ~$255,000 take-home. Year 3 paired with a second SQ engineer = 8–10 engagements × $65,000 + 6–8 retainers + CMMC overlay add-ons $40,000–$80,000 = approximately $650,000–$870,000 revenue, ~55% margin, ~$360,000–$480,000 combined take-home (~$180,000–$240,000 each).

Inputs: industry-published AS9100 certification cost ranges (multiple registrar sources); Secureframe CMMC certification cost guide; HHS / DOD estimates for CMMC 2.0 implementation; PMDDTC ITAR registration fee schedule (effective January 9, 2025); IBSSCORP NIST 800-171 assessment cost guide 2026; recurring-retainer industry benchmarks. The upper end of the revenue trajectory requires successful CMMC overlay stacking and ITAR retainer attachment alongside the AS9100D base engagement; the lower end is base AS9100D-only consulting.

• Safran Landing Systems Walton

  Aerospace prime — landing gear, carbon brakes (anchor demand)

  Institution

  Walton facility about 25 years old. The only Safran carbon-brake plant in North America. About $48.4 million across 25 Department of Defense awards, plus $1.84 million through Wheel & Brake Services LLC. A $65 million Boeing-driven expansion is announced. Customers include UPS, FedEx, United, Allegiant, and the Boeing 737, 777, and 787 plus the C-17 and KC-135. Reference benchmark and prime supplier-flowdown source.
• Mazak Corporation (Yamazaki Mazak)

  Aerospace machine tools — anchor demand (machine-tool customer base is the AS9100 cohort)

  Institution

  Florence headquarters since 1974. A 518,320-square-foot iSmart Factory. About $5.33 million in NASA-tagged awards. The 40,000th machine was built in August 2025. The customer base of Northern Kentucky and Ohio aerospace shops is the addressable cohort.
• Starrag USA Inc

  Aerospace 5-axis machine tools (Hebron)

  Institution

  Skyport Business Park, 2379 Progress Drive, Hebron. 5-axis turbine-blade machining centers for impellers, blisks, and blades. About $27.9 million across 31 Department of Defense awards. Recently expanded the Kentucky facility.
• HDT Expeditionary Systems Inc

  Military expeditionary systems (Florence)

  Institution

  7375 Industrial Road, Florence. ISO 9001:2015 certified. Department of Defense programs of record include SICPS-CPP, THAAD, AMEDDS, IBCS, Force Provider Camps, and PMUAS. About $26.25 million across four Department of Defense awards.
• AQW Inc

  Female-owned CNC shop (Walton)

  Active in market

  Founded 1983. Female-owned. Department of Defense and aerospace clients. About $1.37 million across 44 Department of Defense awards in specialty industrial chemical and machinery codes.
• Desma USA Inc

  Injection-molding systems (Hebron)

  Active in market

  2195 Arbor Tech Drive, Hebron. Injection-molding systems for rubberized military track. About $2.21 million in Department of Defense awards.
• Victor Enterprises Inc (Paducah/Owensboro)

  Single Kentucky AS9100D-cert shop visible in public directory

  Out-of-county

  Paducah and Owensboro region. AS9100D(2016)-certified CNC. The only Kentucky shop in machineshop.directory's public AS9100 list — far western Kentucky, 280 miles from Boone. Reference benchmark.
• Kentucky Aerospace Industry Consortium (KAIC)

  Industry consortium — workforce and supplier-development programming

  Institution

  Seeded with a $1.5 million Office of Local Defense Community Cooperation grant. Member directory and monthly newsletter to more than 400 readers. The primary channel for warm introductions to Kentucky aerospace primes.
• BE NKY (Tri-ED) Aerospace Industry Director

  Regional EDO — aerospace cluster recruiter

  Institution

  Tri-County Economic Development Corporation, doing business as BE NKY. Aerospace recruitment and Tier-2 supplier-development programming for Boone, Kenton, and Campbell. Documents about 30 aerospace companies and 11,000 residents in aerospace.
• simpleQuE / CVG Strategy / ISO 9001 Group

  Out-of-area competing consultancies

  Out-of-county

  simpleQuE (Cleveland); CVG Strategy (national); ISO 9001 Group (national). Serve Northern Kentucky shops across the river. The Kentucky-side gap is in physical presence and resident relationships, not in market access.

This is structurally a non-acquisition lane. The category is a startup/consultancy lane — the realistic operator path is build, not buy. The bottleneck is the founder's credentialed pedigree and personal book of relationships, not capital or assets. An ex-Boeing/GE Aviation/Safran/P&W supplier-quality auditor with 10+ years of practice and named relationships across Cincinnati-area aerospace firms is the launch profile.

Adjacent acquisition target: a senior auditor at a regional registrar (NQA-USA, BSI, simpleQuE, DEKRA, PRI Registrar) with a non-compete window expiring or a book-of-business carve-out opportunity. These are typically the source of a founder's pipeline rather than a target. No specific named target.

Outside-region partnership: a Cincinnati-side AS9100/ITAR consultancy that doesn't currently maintain a Kentucky-resident physical presence might consider a Kentucky-resident partner or affiliate to capture the post-Safran-expansion supplier-development opportunity. Speculative; relationship-driven.

• — We have not pulled the authoritative IAQG OASIS aerospace certification directory. The one-Kentucky-shop reading from machineshop.directory is single-source. The OASIS pull is the verification we need before the headline claim ships.
• — We have not talked to the BE NKY aerospace industry director. The named supplier-tier expansion plan for Safran, Mazak, Starrag, and HDT, and the count of Kentucky shops in active supplier onboarding, is the demand verification we are missing.
• — We have not talked to Safran Walton supplier quality. Whether the $65 million expansion increases or decreases Tier-2 outsourcing depends on the in-house versus outsource split for the carbon-brake ramp.
• — We have not pulled the Kentucky Secretary of State entity directory for Boone, Kenton, and Campbell shops under NAICS 332710, 333xxx, and 336xxx. The cohort of ISO 9001-only shops the consultancy could serve emerges from that pull plus a chamber roster cross-reference.
• — We have not talked to Kentucky Aerospace Industry Consortium member services or the Tristate Aerospace Alliance director. Their workforce and supplier-development programming intersects this consultancy's customer-acquisition channel directly.
• — We have not pulled PRI Registrar and eAuditNet NADCAP scope adjacency for Kentucky-resident shops. Which Northern Kentucky shops hold any NADCAP scope but not AS9100 is the prime upgrade-path cohort.
• — Public AS9100 directories are known to be incomplete and lag six to twelve months on new certifications. Cross-references to Kentucky Aerospace Industry Consortium, BE NKY, and chamber rosters are needed before the thin-bench claim ships.

Tonight, this week, this month — in that order. Each step produces a yes/no or a number, not a deeper understanding.