CMMC Compliance Guide

Submit any questions you would like answered on the podcast!

Are you trying to navigate CMMC and NIST 800-171 with a small team and limited resources?

You're not alone. In this episode of the CMMC Compliance Guide, we’re breaking down six of the most common and confusing questions small DoD contractors ask—and giving you clear, practical answers you can act on immediately.

Join Brooke & Stacey from Justice IT Consulting as they unpack risks of misinterpreting controls, mobile device scope, admin account misuse, CUI data flow diagrams, remote access, and more. Whether you’re prepping for a CMMC Level 2 assessment or just trying to stay ahead, this episode is packed with actionable advice.

Submit any questions you would like answered on the podcast!

Happy 4th of July from the team at CMMC Compliance Guide Podcast! While you're celebrating freedom, hot dogs, and fireworks — don’t forget about safeguarding the data that defends that freedom. 🛡️

In this special edition, we're tackling what really works for CMMC compliance on the shop floor. From coolant-soaked travelers to ancient XP machines, this is your no-nonsense guide to staying compliant in real-world CNC and aerospace manufacturing environments.

Skip the theory. Get the real-world playbook. Because you can't afford to shut down production just to pass an audit.

 📞 Need help with CMMC or NIST 800-171?
We fast-track defense manufacturers to compliance — or give you the tools to do it yourself.

 👉 Visit https://www.cmmccomplianceguide.com to download free resources or schedule a discovery call. 

Submit any questions you would like answered on the podcast!

🆓 Need help getting your SPRS score to 110?
Schedule your free SPRS Roadmap Session and get a step-by-step plan to close gaps and stay defensible:
👉 https://cmmccomplianceguide.com/free-sprs-roadmap

The Department of Defense just issued a critical cybersecurity memo—and it's not just for the Lockheeds and Raytheons. In this episode, we break down what small and mid-sized DoD contractors must do now to respond to rising cyber threats—even amid headlines of ceasefire. From multi-factor authentication and patching systems to cloud security guidance and SPRS score readiness, we walk you through the exact steps your organization needs to take.

Resources Mentioned:
Memo: https://media.licdn.com/dms/document/media/v2/D561FAQFbAPookqu2zw/feedshare-document-pdf-analyzed/B56ZefAj13HoAY-/0/1750719415748?e=1751500800&v=beta&t=O6aY3UDi5ijLTGOa6RP4xAWABMPZh-ZKRkXRikiCywg

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/news-events/directives/bod-25-01-implementing-secure-practices-cloud-services
https://www.cisa.gov/cyber-hygiene-services
https://www.nsa.gov/About/Cybersecurity-Collaboration-Center/DIB-Cybersecurity-Services/
https://www.dc3.mil/Missions/DIB-Cybersecurity/DCISE-Resources/

#CMMC #DODCompliance #CyberSecurity #SPRS #DefenseContractor #CyberThreats #NIST800171 #CMMCComplianceGuide

Submit any questions you would like answered on the podcast!

Why is CMMC compliance so expensive—especially for small businesses? 

In this episode of the CMMC Compliance Guide Podcast, Austin and Brooke from Justice IT Consulting break down what really drives up the cost of CMMC and NIST 800-171 compliance, and more importantly—how you can cut costs without cutting corners.

We cover:

• The four stages of compliance cost: paperwork, project work, ongoing maintenance, and assessments
• What assessors can and can’t help with
• Enclave strategies that can save you thousands
• Why smaller companies feel a heavier burden—and how to manage it
• Smart scoping, VDI, and how not to overspend on your CMMC journey

If you’re trying to balance compliance with a tight budget, this episode is a must-listen.

👉 Need help or have questions? Contact us for free advice at CMMCComplianceGuide.com.

🔔 Don’t forget to like, subscribe, and share!

Submit any questions you would like answered on the podcast!

Is your CMMC scope setting you up for success—or failure?

In this episode of the CMMC Compliance Guide, Brooke and Stacey from Justice IT Consulting break down one of the most misunderstood (and expensive) parts of your compliance journey: scoping.

Learn how to define your CUI boundary the right way, avoid common over-scoping mistakes, and streamline your assessment with clear documentation strategies. Whether you're prepping for a formal CMMC assessment or self-assessing for NIST 800-171, this episode gives you real-world insights that can save you time, money, and frustration.

🔍 We cover:

• What really defines your CMMC scope (it's more than just your server)
• The hidden risks of over-scoping and cloud blind spots
• Third-party service provider mistakes that can blow your scope
• Must-have documentation: data flow diagrams, network diagrams, and asset inventories
• A practical checklist to get your scope right before the audit

🛠 Need a faster path to compliance without cutting corners? Visit www.CMMCComplianceGuide.com for free resources, expert help, or to book a discovery call.

Submit any questions you would like answered on the podcast!

Missed CEIC West 2025 in Las Vegas? We’ve got your insider recap. In this episode of the CMMC Compliance Guide, Austin and Brooke break down the most critical insights defense contractors need to know—from Katie Arrington’s keynote to real-world flowdown risks, mock assessment walkthroughs, and what AI means for your CUI documentation.

If you’re a small or mid-sized DoD contractor trying to stay compliant with CMMC, NIST 800-171, and DFARS, this episode gives you the takeaways that actually matter.

 📞 Have questions? Text, call, or email us. We’ll answer them for free on the podcast.

 🔗 Visit www.cmmccomplianceguide.com for free resources

Submit any questions you would like answered on the podcast!

Are you sure you're NIST 800-171 compliant? In this episode of the CMMC Compliance Guide Podcast, Austin and Brooke break down the most overlooked NIST 800-171 requirements that continue to trip up DoD contractors—and what you can do today to avoid those costly mistakes.

From data flow diagrams to documentation pitfalls, supply chain risks, and misunderstood MFA and logging requirements, this episode is packed with practical insights and actionable takeaways. If you’re pursuing CMMC Level 2 or just trying to boost your SPRS score, this is a must-listen.

💡 You’ll Learn:

• Why poor scoping is the #1 mistake in compliance
• How to map your CUI data flow across systems and subcontractors
• What assessors really expect from your MFA, logging, and risk assessment controls
• Why your documentation strategy can make or break your assessment
• What it takes to maintain compliance after you’re “done”
• How to use the NIST 800-171A Assessment Guide to conduct a real gap analysis
• The truth about ongoing compliance vs. one-time audits
• GRC tools, POAMs, and how to build your project roadmap

This episode is your self-assessment gut check. Whether you're just starting or already deep into your compliance journey, don’t miss these expert tips.

🔗 For free resources, visit: https://cmmccomplianceguide.com
📅 Meet us at DibCon, June 3–5, in Oklahoma City!

Submit any questions you would like answered on the podcast!

Get the latest insider takeaways from CMMC Day 2025 straight from Washington D.C. In this episode of the CMMC Compliance Guide Podcast, Brooke and Austin break down the most critical updates small and midsized businesses (SMBs) in the defense supply chain need to know now.

We cover:
 ✅ Why CMMC is NOT going away (despite what skeptics think)
 ✅ Critical mistakes businesses still make with SSPs, scoping, and access control
 ✅ Real-world assessment horror stories you need to avoid
 ✅ Why subcontractors can't hide in the supply chain anymore
 ✅ Tools, technology, and zero trust lessons from the show floor

Whether you're a manufacturer, IT lead, or compliance manager, this episode delivers actionable insights to help you stay off the DoD's naughty list and win more contracts in 2025.

🎯 Need help? Get your free SPRS Score Roadmap → https://cmmccomplianceguide.com/free-sprs-roadmap

Submit any questions you would like answered on the podcast!

Feeling overwhelmed by CMMC compliance and NIST 800-171’s 110 controls? You’re not alone — but you don’t have to be stuck.

In this episode of the CMMC Compliance Guide Podcast, Brooke and Austin break down NIST 800-171 Revision 2 in plain English — no government-speak, no tech jargon — so you can finally understand what each control family means for your business.

You'll learn:

• What NIST 800-171 really requires (and why it matters for your SPRS score)
• How to tackle key control families like Access Control, Awareness & Training, and Audit & Accountability
• The critical mistakes contractors make (and how to avoid them)
• Why documentation is the #1 secret weapon for CMMC success
• Real-world tips for manufacturing, machine shop, and aerospace contractors navigating CMMC Level 2

🔥 Don’t wait until an assessor says “No Soup for You” — build a compliance system that actually protects your business and wins contracts.

👉 Need help fast-tracking your compliance journey? 

Visit https://cmmccomplianceguide.com to download free resources or schedule a discovery call.

Submit any questions you would like answered on the podcast!

Is your SPRS score putting your DoD contracts at risk? In this episode of the CMMC Compliance Guide, we break down exactly what the SPRS score is, why it matters, and how to improve it fast—before you lose out on federal work.

Whether you're stuck at -72 or hovering at 80, we’ll walk you through how to get to 110 with practical, plain-English guidance. From gap analysis to POA&Ms, system security plans, encryption, MFA, and the best GRC tools—we’re covering it all.

👉 Schedule your FREE SPRS Roadmap Session (Limited Time):  www.cmmccomplianceguide.com/free-sprs-roadmap
✅ $1,500 Value — No pitch, no pressure. Just expert help.

🎯 What You'll Learn:
✅What an SPRS score is and why it matters
✅How to assess your current score (and why most are wrong)
✅What documentation and tech controls you must have
✅How to get to 110 — even if you’re starting from a negative score