In this episode, Kaleigh Floyd and Bobby Guerra discuss the challenges and considerations for internal IT staff tasked with achieving CMMC compliance. They explore the importance of knowledge, leadership buy-in, and organizational maturity in successfully navigating the CMMC process. The conversation emphasizes the need for collaboration between internal teams and managed service providers (MSPs) to effectively implement necessary controls and policies. Additionally, they highlight the risks associated with non-compliance and the importance of legal counsel in ensuring proper adherence to regulations.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this conversation, Bobby Guerra and Ryan Bonner discuss the evolving landscape of the CMMC ecosystem, focusing on the implications of a recent memo from the DOD. They explore the roles of program managers, the importance of understanding CUI, and the challenges faced by contractors and MSPs in achieving compliance. The discussion emphasizes the need for proactive strategies and the potential impact of these changes on the defense industrial base.

Ryan's CS2 Session: https://www.youtube.com/watch?v=IEy-TkmKMt8
Ryan's LinkedIn: https://www.linkedin.com/in/rybonner/

Key Takeaways:
-The recent DOD memo clarifies requirements for CMMC compliance.
-Program managers play a crucial role in determining CMMC levels for contracts.
-Understanding CUI is essential for contractors to navigate compliance.
-Subcontractors need to be proactive in understanding their CUI obligations.
-MSPs must prepare for increased demand for CMMC compliance services.
-The defense industrial base will see consolidation as a result of CMMC requirements.
-Organizations that adapt to CMMC will have a competitive advantage.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this conversation, Bailey Reichelt, a trade and regulatory attorney, discusses the complexities of export controls and their implications for businesses in the aerospace and defense sectors. She emphasizes the importance of understanding export regulations, common misconceptions, and the need for compliance programs. Bailey also shares insights on engaging with regulatory attorneys, the costs involved, and real-world examples of navigating export compliance challenges. The discussion highlights the significance of integrating export compliance into existing workflows and the ongoing journey of maintaining compliance in a changing regulatory landscape.

Bailey's Talk at CS2: Practical ITAR Skills for Businesses

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mounts CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome Andy Sauer from Sentinel Blue. They discuss the challenges and experiences of navigating CMMC compliance as managed service providers (MSPs). The conversation covers the entrepreneurial journey, the importance of leadership and scaling in MSPs, and the preparation required for assessments. They also touch on the future of CMMC and the evolving landscape for MSPs, emphasizing the need for certification and proactive engagement with clients.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh Floyd and Bobby Guerra discuss the critical considerations for OSCs choosing an MSP for their CMMC journey and Managed Service Providers (MSPs) contemplating CMMC Level 2 certification. They explore the importance of selecting a qualified MSP, the preparation required for assessments, the necessity of proper documentation, and the implications of client agreements. The conversation emphasizes the mindset needed for MSPs to effectively support their clients through the certification process, highlighting the potential risks of inadequate preparation and the benefits of a committed approach.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

Axiom passed their assessment! In this episode, Kaleigh Floyd, Bobby Guerra, and Adam Evans discuss their journey to passing a CMMC Level 2 assessment. They share insights from their mock and real assessments, the challenges they faced, and the importance of preparation and self-assessment. The conversation highlights the role of auditors, handling findings, and the continuous nature of compliance in cybersecurity. In this conversation, Axiom discusses their experiences and challenges in achieving a CMMC certification as Managed Service Providers (MSPs). They reflect on the emotional and logistical hurdles faced during the assessment process, the importance of adapting their systems to meet client needs, and the commitment required to succeed.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

Kaleigh Floyd hosts three prominent women in the CMMC ecosystem: Joy Beland, Amy Williams, and Carley Salmon. They discuss their backgrounds, the importance of cybersecurity compliance, and the evolving landscape of CMMC. Each guest shares their personal motivations for working in this field, highlighting the mission-driven nature of their roles. The conversation also touches on the shift in how organizations view cybersecurity, moving from a cost center to a strategic imperative, especially in light of recent regulatory changes. As they look ahead to 2025, the experts emphasize the urgency for companies to prepare for compliance and the challenges they face in doing so.

-Organizations Mentioned-
Stem for Her: https://stemforher.org/
Microsoft Software & Systems Academy (MSSA): https://military.microsoft.com/mssa/
The Cyber Guild: https://thecyberguild.org/
The MSP Collective: https://www.mspcollective.org/

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

Are you starting your CMMC and don't know where to begin? Let's talk about the foundation of your control implementation, which is the System Security Plan. This is not only critical to your business's compliance journey, but it's also a requirement for CMMC Level 2. Adam Evans, Axiom's Compliance Officer, shares what an SSP is and how he created theirs.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this conversation, Bobby Guerra and Kaleigh Floyd discuss the critical role of agreements in the CMMC compliance journey. They emphasize the importance of well-structured agreements to mitigate risks and ensure clarity in responsibilities between Managed Service Providers (MSPs) and their clients. The discussion covers various aspects, including the significance of service level agreements, guarantees, handling assessment failures, exit strategies, and preparing for changes in requirements. The conversation aims to equip business owners and leaders with insights to navigate the complexities of CMMC compliance effectively.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

(CybHER: Women in CMMC) In this inaugural episode of CybHER: Women in CMMC, Kaleigh Floyd and Koren Wise discuss the significant contributions of women in the CMMC ecosystem. Koren shares her journey from being a network engineer to becoming a licensed training provider and C3PAO. The conversation delves into the challenges and cultural shifts within organizations as they adapt to CMMC standards, the importance of training, and the balance between motherhood and a demanding career in cybersecurity. Koren emphasizes the resilience and capabilities that motherhood brings to professional life, and they both celebrate the increasing presence of women in the IT and cybersecurity fields.

Website: https://www.axiom.tech/
YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/

Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/

Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/