Climbing Mount CMMC

In the most recent episode of Climbing Mount CMMC, Kaleigh and Bobby explain how to get real value from CMMC conferences, whether you’re new to the field or an experienced MSP or contractor. They share practical ways to set goals, find useful conversations and sessions, learn from peers, and use the current CMMC pause to prepare rather than disengage.

https://www.protiviti.com/us-en
https://cyberab.org/News-Events/CS5-Conference

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh Floyd and Bobby Guerra from MSP Axiom discuss the complexities of achieving and maintaining CMMC Level 2 compliance. They share insights on training, data flow, documentation, and client management to help MSPs navigate this challenging landscape. 

Hiring for CMMC Compliance: https://www.youtube.com/watch?v=4dgCAtQfFLM&t=3s

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Bobby and Kaleigh delve into the complexities of physical and cloud environments in the context of CMMC compliance. They share practical insights on managing physical assets, access control, and security baselines to help contractors and MSPs navigate the physical security landscape effectively.

Other takeaways include:

• Differences between physical and cloud environments
• Managing physical assets and access control
• Security baselines and configuration management for physical devices
• Physical environment assessment and defense strategies
• Physical change management and incident response in security protocols

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of implementation, and the potential implications for government contractors. They also discuss: 

• Impact of Rev3 on cybersecurity compliance
• Role of FAR clauses in adoption of Rev3
• Assessment and documentation changes with Rev3
• Supply chain security and new control families
• Potential government and DOD policy adjustments

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss:

- Planning for CMMC hiring: from scratch vs. maintaining an existing system

- The importance of defining roles and expectations before hiring

- Support systems needed for successful CMMC implementation

- Cost considerations and budgeting for CMMC professionals

- Realistic expectations for knowledge and experience in CMMC roles

Dy Eddington's Linkedln: https://www.linkedin.com/in/dy-edington/

Axiom's Website: https://www.axiom.tech/

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance.

They discuss: 

• Role of SPRS website and attestation process
• Common misconceptions about self-assessment and internal bias
• Best practices for preparing for a CMMC assessment
• The value of a comprehensive System Security Plan (SSP)
• Differences between C3PAO and DIBCAC assessments

Follow Kelly Hood on Linkedln: https://www.linkedin.com/in/kellyhoodoc/

Follow Tom Conkle on Linkedln: https://www.linkedin.com/in/tomconkle/

Optic Cyber: https://www.linkedin.com/company/opticcyber/posts/?feedView=all

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this pro tip episode of Climbing Mount CMMC, Bobby shares essential tips for preparing for and navigating a cybersecurity assessment, focusing on practical strategies to ensure a smooth process

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors.

Class Deviation: https://media.licdn.com/dms/document/media/v2/D561FAQGSCWrODbSmhA/feedshare-document-url-metadata-scrapper-pdf/B56aCGfVqAI8A4-/0/1788962760218?e=1789581600&v=beta&t=fLrdB7f9FoKMQJuaLxv3guuCih4B5M8Dp4DlPgARP68

CUI Categories and Abbreviations: https://www.dodcui.mil/CUI-Categories-and-Abbreviations/

Follow Koren on Linkedln: https://www.linkedin.com/in/koren-wise/

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance.

Resources mentioned in podcast: 

Bo Birdwell's LinkedIn: Michael Birdwell | LinkedIn

Elbit Systems of America website: Elbit America - Aerospace & Defense Solutions

32 CFR: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program

Level 2 Self-Assessment Guide: CMMC Assessment Guide Level 2

CIO DoD CMMC Resources: CIO - CMMC Resources & Documentation

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/