Climbing Mount CMMC
Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!
Episodes
In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of implementation, and the potential implications for government contractors. They also discuss:
- Impact of Rev3 on cybersecurity complianc...
In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss:
- Planning for CMMC hiring: from scratch vs. maintaining an existing system
- The importance of defining roles and expectations before hiring
<...
In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance.
They discuss:
- Role of SPRS website and attestation process
- Common misconceptions about self-assessment and internal bias
- Best practices for preparing for a CMMC ass...
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement.
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/
Bobby's LinkedIn: https://w...
In this pro tip episode of Climbing Mount CMMC, Bobby shares essential tips for preparing for and navigating a cybersecurity assessment, focusing on practical strategies to ensure a smooth process
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/
Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/
In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors.
Class Deviation: https://media.licdn.com/dms/document/media/v2/D561FAQGSCWrODbSmhA/feedshare-document-url-metadata-scrapper-pdf/B56aCGfVqAI8A4-/0/1788962760...
In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance.
Resources mentioned in podcast:
Bo Birdwell's LinkedIn: Michael Birdwell | LinkedIn
Elb...
In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation.
Resources mentioned in podcast:
Sector 171 game: https://sector171.netlify.app/
CMMC Resources website: https://dodcio.defense.gov/CMMC/Resources-Documentation/
Cyber AB Website: https://cyberab.org/
Wise Technical Inn...
In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why industry feedback through the Request for Information (RFI) is critical, and what changes could help create a more practical and sustain...
In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their perspective as one of the first CMMC Level 2 Certified MSPs navigating these changes.
Website: https://www.axiom.tech/
YouTube: h...
In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success.
Resources mentioned in podcast:
Sector 171 game: SECTOR 171 — The Assessor's Gauntlet
CMMC Resources website: CIO - CMMC Resources & Documentation
Cyber AB Website: CyberAB > Home
Wise Technical Innovations: CMMC CCP a...
In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure successful certification.
Resources mentioned in podcast:
CMMC Phase II Suspension video:https://youtu.be/5JVbjrihSTs
In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards.
Sources mentioned in podcast:
Vince Scott's Episode: https://youtu.be/QbhHdHM7e0c
Grace in CMMC Episode:https://youtu.be/54--Ah6zod4
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits.
NIST 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems
Website: https://www.axiom.tech/
YouTube: https://www...
In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape.
Podcast episode-The Game of Chicken with Lawrence Cruciana: https://youtu.be/NffcMSVnKUM
Podcast episode-The State of CMMC Today with Matt Travis: https://youtu.be/rzeumax1HqQ
T...
In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance.
32 CFR Final Rule: 2024-22905.pdf
Cyber AB Website: CyberAB > Home
Time Stamps:
00:00-02:14 Introduction
02:15-04:03 What Is the Cyber AB?
04:...
In this episode of Climbing Mount CMMC, Bobby and Kaleigh provide an in-depth look at the CCP and CCA certifications, including preparation strategies, course insights, and industry perspectives. They discuss topics that target those aiming to understand the certification process, improve their skills, or help organizations prepare for assessments.
Tara Lemieux Game: SECTOR 171 — The Assessor's Gauntlet
ISACA info: CMMC: Provis...
In this Spelunking episode of Climbing Mount CMMC, Kaleigh and Adams dive into the key differences between NIST 800-171 Rev2 and Rev3, focusing on incident response requirements for CMMC compliance. They share insights on preparing for Rev3, emphasizing 03.06's incident handling, reporting, and training strategies.
Link to NIST 800-171 Rev 3: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf
Website: https:/...
In this episode of Climbing Mount CMMC, Bobby and Kaleigh explore the recent updates and implications of "significant changes" in the CMMC assessment process, focusing on how organizations can navigate reassessments, change management, and the role of C3PAOs.
Link to 32 CFR Final Rule: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program
Link to FAQ: CYBERSECURITY MATURITY MODEL CERTIFICATION Progra...
In this episode of Climbing Mount CMMC, Kaleigh speaks with Axiom's compliance officer, Adam Evans, to explore the complexities of inheritance in the context of CMMC compliance, cloud service providers, and external service providers. They discuss how inheritance works, common misconceptions, and practical tips for organizations navigating compliance assessments.
Link to the CMMC Assessment Process (CAP): https://cyberab.org/Portals...
Popular Podcasts
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!
The Clay Travis and Buck Sexton Show. Clay Travis and Buck Sexton tackle the biggest stories in news, politics and current events with intelligence and humor. From the border crisis, to the madness of cancel culture and far-left missteps, Clay and Buck guide listeners through the latest headlines and hot topics with fun and entertaining conversations and opinions.
Does hearing about a true crime case always leave you scouring the internet for the truth behind the story? Dive into your next mystery with Crime Junkie. Every Monday, join your host Ashley Flowers as she unravels all the details of infamous and underreported true crime cases with her best friend Brit Prawat. From cold cases to missing persons and heroes in our community who seek justice, Crime Junkie is your destination for theories and stories you won’t hear anywhere else. Whether you're a seasoned true crime enthusiast or new to the genre, you'll find yourself on the edge of your seat awaiting a new episode every Monday. If you can never get enough true crime... Congratulations, you’ve found your people. Follow to join a community of Crime Junkies! Crime Junkie is presented by Audiochuck Media Company.