Understanding CMMC Requirements with DefCerts CEO Ryan Bonner | Part 2

Send us a text

We’re back with Ryan Bonner for part two of his sit-down with Mike Shelah on DTC’s Cyber Savvy podcast. 

In this episode, we breakdown the Cybersecurity Maturity Model Certification (CMMC) and its implications for government contractors. They explore the importance of CMMC, the certification process and the critical role of action plans in achieving compliance. You’ll also hear insights on the challenges companies face during gap assessments and why strategic planning is essential.  Plus, they discuss how CMMC could reshape the industry, potentially leading to major consolidation.   

Whether you're a contractor navigating compliance or just curious about the future of cybersecurity standards, this episode is packed with valuable takeaways  

Key Takeaways: 

• CMMC is a mandate that organizations must comply with. 
• Plans of action can be misleading and should be approached cautiously. 
• Understanding the CMMC certification process is crucial for contractors. 
• Organizations need to justify CMMC certification as part of a strategic plan. 
• Gap assessments should be conducted iteratively to maintain context. 
• Managing bandwidth and resource constraints is essential for compliance. 
• Organizations should focus on the areas that handle controlled unclassified information (CUI). 
• Consolidation in the industry will require a strategic approach to compliance. 
• Documentation and process management are key to maintaining compliance. 
• CMMC is about more than just compliance; it should align with business strategy. 

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!