Season 5
Understanding CMMC Across Physical and Cloud Environments
In this episode, Bobby and Kaleigh delve into the complexities of physical and cloud environments in the context of CMMC compliance. They share practical insights on managing physical assets, access control, and security baselines to help contractors and MSPs navigate the physical security landscape...
What Will NIST 800-171 Rev 3 Look Like in Practice?
In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of implement...
How to Spot a Great Compliance Candidate
In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss: - Planning for CMMC hirin...
Tips and Tricks for Cybersecurity Assessment Readiness
In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance. They discuss: Role of SPRS website ...
How Will the CMMC Pause Affect My Third-Party Assessment?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement. Website: https://www.axiom.tech/ YouTube: https://www...
10 Things You Should Know Before Your CMMC Assessment
In this pro tip episode of Climbing Mount CMMC, Bobby shares essential tips for preparing for and navigating a cybersecurity assessment, focusing on practical strategies to ensure a smooth process Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axio...
Understanding the 'Class Deviation' and What it Means for CMMC Compliance
In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors. Class Deviation: htt...
What Does a Prime Need to See from My Self-Assessment? w/ Bo Birdwell
In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain ...
How the CCP Prepared Me for My Day-To-Day
In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation. Resources mentioned in podcast: Sector 171 game: https://sector171.netlify.app/ CMMC...
What Needs to Change in CMMC Before Moving Forward? (Part 2)
In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why i...
What Needs to Change in CMMC Before Moving Forward? (Part 1)
In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their pe...
How Do I Study for the CCP Exam?
In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success. Resources mentioned in podcast: Sector 171 game: SECTOR 171 — The Assessor's Gauntlet CMMC Resour...
How Do I Continue Self-Assessments Following the CMMC Phase 2 Suspension?
In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure success...
What Do You Need to Know About the CMMC Phase II Suspension
In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards. Sources ment...
What Happens After I Pass My Assessment?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits. NI...
How To Pass CMMC The First Time
In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape. Podcast episode-The Game of Chicken wit...
What Every MSP Needs to Know About CMMC (feat. Matt Travis, CEO of Cyber AB)
In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance. 32 C...
How To Master the CCP/CCA Courses
In this episode of Climbing Mount CMMC, Bobby and Kaleigh provide an in-depth look at the CCP and CCA certifications, including preparation strategies, course insights, and industry perspectives. They discuss topics that target those aiming to understand the certification process, improve their skil...
A Deep Dive into Rev 3: Incident Response (feat. Adam Evans)
In this Spelunking episode of Climbing Mount CMMC, Kaleigh and Adams dive into the key differences between NIST 800-171 Rev2 and Rev3, focusing on incident response requirements for CMMC compliance. They share insights on preparing for Rev3, emphasizing 03.06's incident handling, reporting, and trai...
What Qualifies As a "Significant Change" in CMMC?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh explore the recent updates and implications of "significant changes" in the CMMC assessment process, focusing on how organizations can navigate reassessments, change management, and the role of C3PAOs. Link to 32 CFR Final Rule: Federal Regis...