Climbing Mount CMMC

In this episode, Bobby and Kaleigh delve into the complexities of physical and cloud environments in the context of CMMC compliance. They share practical insights on managing physical assets, access control, and security baselines to help contractors and MSPs navigate the physical security landscape effectively. Other takeaways include: Differences between physical and cloud environmentsManaging physical assets and access controlSecurity baselines and configuration management for physical dev...

In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of implementation, and the potential implications for government contractors. They also discuss: Impact of Rev3 on cybersecurity complianceRole of FAR clauses in adoption of Rev3Assessment and documentat...

In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss: - Planning for CMMC hiring: from scratch vs. maintaining an existing system - The importance of defining roles and expectations before hiring - Support systems needed for successful CMMC implementation - Cost considera...

In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance. They discuss: Role of SPRS website and attestation processCommon misconceptions about self-assessment and internal biasBest practices for preparing for a CMMC assessmentThe value of a comprehensive System Security Plan (SSP)Di...

In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://ww...