In this new series we like to call "Spelunking", Bobby and Kaleigh explore the updates in NIST 800-171 Revision 3, focusing on the differences from Rev 2, including control changes, assessment objectives, and preparation strategies for compliance. In this episode, they focus on control 03.02 Awareness and Training. They give valuable insights for MSPs, organizations, and assessors preparing for the upcoming changes and requirements.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In the season 5 premiere of Climbing Mount CMMC, Kaleigh and Bobby share practical, boots-on-the-ground insights on implementing CMMC self-assessments, especially for MSPs supporting multiple clients. They break down how to approach self-assessments with the discipline of a formal audit, while still building a process that can scale.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In the season 4 finale of Climbing Mount CMMC, Kaleigh and Bobby share their extensive experience navigating the complexities of achieving CMMC Level 2 certification as an MSP. They discuss the importance of commitment, education, strategic planning, and the realities of scaling support for government contractors.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the concept of grace within the CMMC framework, particularly focusing on the NIST 800-171 controls, the role of C3PAOs, and the importance of mock assessments. They emphasize the need for proper training and certification, the significance of daily reviews during assessments, and the opportunities provided by the 10-day remediation period. The conversation highlights the human element in assessments and the importance of communication between contractors and assessors.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Adam discuss the implications of Rev3 for MSPs in the context of CMMC. They explore the challenges MSPs face in achieving compliance, the role of external service providers, and the importance of documentation and shared responsibilities. They highlight the evolving landscape of cybersecurity requirements and the necessity for MSPs to fully commit to compliance to effectively support their clients.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Adam discuss the intricacies of Plan of Action and Milestones (POAM) in the context of cybersecurity assessments. They explore the importance of having a clear understanding of what constitutes a POAM, the distinction between operational plans and assessment findings, and the necessity of being prepared for assessments to ensure compliance. The conversation emphasizes the need for organizations to maintain clarity and organization in their documentation to avoid complications during assessments.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mounts CMMC, hosts Kaleigh Floyd and Bobby Guerra discuss the five stages of grief related to the CMMC compliance journey. They share personal experiences and insights on denial, anger, bargaining, depression, and acceptance, emphasizing the importance of understanding these emotions as organizations navigate the complexities of CMMC compliance. The conversation highlights the challenges faced by both service providers and contractors, offering encouragement and practical advice for overcoming obstacles in the compliance process.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh Floyd, Bobby Guerra, and Adam Evans discuss the complexities surrounding Cloud Service Providers (CSPs) and Managed Service Providers (MSPs) in the context of CMMC compliance. They clarify the definitions, roles, and responsibilities of MSPs and CSPs, particularly in relation to handling Controlled Unclassified Information (CUI) and navigating FedRAMP requirements. The conversation emphasizes the importance of understanding the distinctions between these roles to avoid unnecessary confusion and compliance issues.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, the hosts discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in compliance. They emphasize the need for System Security Plans (SSPs) to be living documents that adapt to evolving security needs and the necessity for contractors to prepare for the upcoming changes to avoid complications during assessments.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and Bobby are joined by Axiom's own, Adam Evans, to discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in compliance. They emphasize the need for System Security Plans (SSPs) to be living documents that adapt to evolving security needs and the necessity for contractors to prepare for the upcoming changes to avoid complications during assessments.

Link to NIST 800-171 Rev 3: https://csrc.nist.gov/pubs/sp/800/171/r3/final

Adam's Linkedln:  https://www.linkedin.com/in/grcadame/

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/

Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/