In this episode, Kaleigh Floyd and Bobby Guerra discuss what CMMC readiness looks like, focusing on the necessary steps for organizations and Managed Service Providers (MSPs) to prepare for compliance. They emphasize the importance of having a solid system security plan, understanding the roles of MSPs, and the need for clear communication and documentation throughout the process. The conversation also highlights the challenges faced by smaller businesses in navigating CMMC requirements and the critical role of MSPs in supporting their clients through this journey.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

Are you new to CMMC and want to know where to start? This is a good place for you. Derrich has a lot of training, resources, and opportunities for others. The CMMC ecosystem is full of resources that will help you along the CMMC journey. Make sure to check them out and get involved!

Derrich Phillips: (32) Derrich Phillips, Lead CMMC Certified Assessor (CCA) | LinkedIn
CPN Page: https://www.linkedin.com/groups/14523710/

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

(Season Three Episode 1) It's less than 30 days from our CMMC Level 2 assessment and our MSP has done A LOT of preparation. We'd love to share our experience with all of you. We prepared our MSP to not only service ourselves, but also our clients. Axiom's goal is to be open and transparent with our audience and we hope you all get a lot from this episode.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

You're a business that has two options: Commercial or CMMC?

It's hard to fully see the path ahead when you're only at the beginning. Bobby and Kaleigh give a 12 Step process of climbing the CMMC Mountain ahead. This is focused more towards MSPs, but any business, especially SMBs, can get a lot out of this.

We hope you enjoy this final episode of Season Two! Stay tuned for Season Three in two weeks.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

In this episode, Kaleigh Floyd, Bobby Guerra, and Vincent Scott discuss the critical aspects of self-assessments in the context of CMMC compliance. They explore the different types of self-assessments, the importance of having a System Security Plan (SSP), and practical strategies for conducting effective self-assessments. The conversation emphasizes the need for thorough preparation, understanding assessment objectives, and the necessity of collecting evidence to support self-assessment scores. The episode also highlights the importance of continuous monitoring and the use of self-assessment tools to streamline the process.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

We sat down with Dr. Ron Ross about his story and how he got to where he is today. He shares what his first job was out of the Army and his health battle while writing publications for NIST. His journey is incredibly inspiring, and we feel such gratitude to be able to share this with all of you.

To hear about the man behind the publications, was something truly special.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

You can't have NIST SP 800-171 without the 800-53 that came before it. In today's episode, Bobby sat down with FedRAMP expert, Karen Stanford, to discuss the connection between the two publications and how you can use this to your advantage when preparing for an assessment. Many of the 800-171 controls can be traced back to 800-53 and it helps give more clarity to the requirements. We hope you enjoy today's episode!

Karen's LinkedIn: (2) Karen Stanford | LinkedIn

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

Today, Bobby and Kaleigh are joined by Dr. Ron Ross from NIST, an author of SP 800-172 and MUCH MORE. He shares the true purpose behind the document and what the new draft brings to the table. The draft was published on 11/13/24 and public comments are now being accepted until January of 2025.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

In this podcast episode, Bobby Guerra, Kaleigh Floyd, and Vince Scott discuss the complexities of the Cybersecurity Maturity Model Certification (CMMC) and its phases. Vince shares his extensive background in cybersecurity, transitioning from offense to defense, and the challenges faced by small businesses in achieving compliance. The conversation delves into the realities of implementing CMMC standards, the importance of incident response, and the future implications of these regulations on businesses. They explore the phases of rollout, the importance of self-assessments, and the risks associated with not being certified. The discussion also highlights the capacity issues that may arise as the certification process unfolds and emphasizes the need for proactive measures to ensure compliance and readiness.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn

In this conversation, Kaleigh Floyd, Bobby Guerra, and Adam Evans discuss the distinctions between Cloud Service Providers (CSPs) and other service providers (ESPs), the significance of Controlled Unclassified Information (CUI), and the importance of vendor assessments in the context of the 32 CFR rule. They delve into the necessary audits, risk management strategies, and the implications of security protection data versus security protection assets for contractors and subcontractors in the defense industry.

They discuss the importance of selecting the right vendors for compliance, emphasizing the need for vendors to be prepared and knowledgeable. The conversation also highlights the ongoing nature of compliance, stressing that businesses must continually assess and update their practices.

LinkedIn: https://www.linkedin.com/in/bobbyguerra/
Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ
Kaleigh's: (1) Kaleigh Floyd | LinkedIn