In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance.

Resources mentioned in podcast: 

Bo Birdwell's LinkedIn: Michael Birdwell | LinkedIn

Elbit Systems of America website: Elbit America - Aerospace & Defense Solutions

32 CFR: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program

Level 2 Self-Assessment Guide: CMMC Assessment Guide Level 2

CIO DoD CMMC Resources: CIO - CMMC Resources & Documentation

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation.

Resources mentioned in podcast: 

Sector 171 game: https://sector171.netlify.app/

CMMC Resources website: https://dodcio.defense.gov/CMMC/Resources-Documentation/

Cyber AB Website: https://cyberab.org/

Wise Technical Innovations: https://www.wtinetworks.com/

Edwards Performance Solutions: https://edwps.com/cmmc-ccp-bootcamp/

Summit 7 podcast- Sum IT Up: Summit 7 - YouTube

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why industry feedback through the Request for Information (RFI) is critical, and what changes could help create a more practical and sustainable path forward for defense contractors, MSPs, and the broader cybersecurity ecosystem.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their perspective as one of the first CMMC Level 2 Certified MSPs navigating these changes. 

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success.

Resources mentioned in podcast: 

Sector 171 game: SECTOR 171 — The Assessor's Gauntlet

CMMC Resources website: CIO - CMMC Resources & Documentation

Cyber AB Website: CyberAB > Home

Wise Technical Innovations: CMMC CCP and CCA and Training | Authorized C3PAO | Wise Technical Innovations

Edwards Performance Solutions: Certified CMMC Boot Camp-35-Hour Course-Live Online Instructor Led

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure successful certification.

Resources mentioned in podcast:

CMMC Phase II Suspension video:https://youtu.be/5JVbjrihSTs

Ultimate Guide to a Self-Assessment video:https://youtu.be/UVyQeMRYjRA

DoW CIO website: CIO - CMMC Resources & Documentation

Jacob Hill video: https://m.youtube.com/watch?v=ISndYW5WbG0

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards.

Sources mentioned in podcast:

Vince Scott's Episode: https://youtu.be/QbhHdHM7e0c
Grace in CMMC Episode:https://youtu.be/54--Ah6zod4

Matt Travis Episode:https://youtu.be/rzeumax1HqQ

Link to the DoW Release: CMMC Phase II Suspended to Boost DIB Innovation

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits.

NIST 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape.

Podcast episode-The Game of Chicken with Lawrence Cruciana: https://youtu.be/NffcMSVnKUM

Podcast episode-The State of CMMC Today with Matt Travis: https://youtu.be/rzeumax1HqQ

Time Stamps:

00:00-04:52 Intro

04:53-11:20 The Game of Chicken

11:21-18:17 Marriage Counseling for CMMC

18:18-29:53 Comparing Apples to Oranges and Oranges to Potatoes

29:54-34:31 The Easy Bake Oven Approach

34:32-37:04 The Assessment Tango

37:05-38:55 Conclusion

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance.

32 CFR Final Rule: 2024-22905.pdf

Cyber AB Website: CyberAB > Home

Time Stamps:

00:00-02:14 Introduction

02:15-04:03 What Is the Cyber AB?

04:04-09:27 Surviving the Early CMMC Years

09:28-12:26 CMMC Momentum Is Growing

12:27-16:13 Can the Ecosystem Scale?

16:14-21:47 How the DoD Will Manage Rollout Challenges

21:48-27:50 The MSP Capacity Problem

27:51-33:24 Why MSPs Are Essential to CMMC

33:25-35:43 New Support for MSPs & Contractors

35:44-39:54 Creating a CMMC Body of Knowledge

39:55-44:00 Policing the Ecosystem & Preventing Abuse

44:01-47:40 The Future of CAICO Under ISACA

47:41-49:29 Conclusion

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/