Send us a text

Representative Gary Palmer introduced a resolution to overturn a Pentagon rule establishing the Cybersecurity Maturity Model Certification (CMMC) program. This Congressional Review Act resolution aims to allow Congress a vote on significant regulatory actions. The Department of Defense completed the necessary steps to implement the CMMC rule, which adds third-party assessments to existing cybersecurity standards for contractors. While some stakeholders support CMMC for improving cybersecurity and enabling more efficient compliance, the resolution's success is uncertain due to limited legislative support. The resolution's goal is to ensure Congressional oversight of major rules impacting the public, not necessarily to oppose CMMC itself. Opponents warn that halting CMMC could jeopardize the defense industrial base's efforts toward cybersecurity compliance.

Ref: https://insidedefense.com/insider/lawmaker-introduces-resolution-roll-back-cmmc-program-final-rule

Support the show

Send us a text

In this episode of CMMC News, we dive into the guidance for defining the scope of a Level 3 Cybersecurity Maturity Model Certification (CMMC) assessment. We discuss the asset categories—CUI Assets, Security Protection Assets, Specialized Assets, and Out-of-Scope Assets—and their specific requirements. Learn how to categorize and document assets in an inventory and network diagram, and understand the role of External Service Providers (ESPs) and Cloud Service Providers (CSPs) in the assessment scope. We also highlight the critical prerequisite of completing a Level 2 assessment, with all POA&M items resolved, before undertaking Level 3 certification.

Preparing for a Level 3 CMMC assessment? Jun Cyber offers expert support to ensure you meet every requirement with confidence. Contact us today and let us help you succeed!

Ref: CMMC Level 3 Scoping Guidance

Website: www.juncyber.com
Email: [email protected]

Support the show

Send us a text

In this episode of CMMC News, we explore the Cybersecurity Maturity Model Certification (CMMC) Assessment Guide for Level 2, Version 2.13. This comprehensive guide provides instructions for conducting both self-assessments and certification assessments, detailing security requirements across key domains like access control, awareness and training, audit and accountability, and configuration management. We break down the assessment criteria, methodologies, and compliance objectives, offering practical examples for achieving alignment with CMMC standards. Additionally, we discuss how to use the included appendix of acronyms and abbreviations to navigate the document effectively.

Need expert guidance on your Level 2 CMMC assessment? Jun Cyber’s team is ready to help you achieve compliance with confidence. Contact us today to get started!

Ref: CMMC Level 2 Assessment Guide

Website: www.juncyber.com
Email: [email protected]

Support the show

Send us a text

In this episode of CMMC News, we unpack the Level 1 Cybersecurity Maturity Model Certification (CMMC) Assessment Guide, designed to help organizations self-assess their compliance with 15 basic cybersecurity requirements for protecting Federal Contract Information (FCI). We cover key aspects of the guide, including how to define the scope, clarify custom terms, apply assessment criteria and methodologies like examining, interviewing, and testing, and document findings as MET, NOT MET, or NOT APPLICABLE. Detailed guidance for each requirement is discussed, along with tips on using the appendix of acronyms and abbreviations effectively. Whether you're an organization or a professional supporting CMMC efforts, this episode has valuable insights for you.

Need assistance with your CMMC self-assessment? Jun Cyber is here to help you navigate the process and ensure compliance with confidence. Contact us today to get started!

Ref: CMMC Level 1 Self-Assessment Guide

Website: www.juncyber.com
Email: [email protected]

Support the show

Send us a text

In this episode of CMMC News, we provide an in-depth overview of the Cybersecurity Maturity Model Certification (CMMC), the Department of Defense’s framework for enhancing the cybersecurity posture of contractors and subcontractors. We explore the three maturity levels and their requirements, which are derived from FAR 52.204-21, NIST SP 800-171 Rev 2, and NIST SP 800-172. Listen as we break down the 14 security domains and the specific mandates for protecting Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). We’ll also touch on additional resources available to guide you through CMMC compliance.

Ready to strengthen your cybersecurity and meet CMMC requirements? Jun Cyber offers expert services to help you navigate compliance with confidence. Contact us today to get started!

Ref: https://dodcio.defense.gov/Portals/0/Documents/CMMC/ModelOverviewv2.pdf

Website: www.juncyber.com
Email: [email protected]

Support the show

Send us a text

In this episode of CMMC News, we explore the key guidance for conducting a Level 1 Cybersecurity Maturity Model Certification (CMMC) self-assessment. We discuss how to define the scope, including which assets—such as those processing, storing, or transmitting Federal Contract Information (FCI)—are included, and which, like IoT devices and Government Furnished Equipment, are excluded. Learn why no formal documentation is required for Level 1 and how to evaluate people, technology, and facilities involved in handling FCI. We also clarify the conditions for reassessments and the role of annual affirmations in maintaining compliance.

Need help with your CMMC self-assessment? Jun Cyber is here to guide you every step of the way. Contact us today for expert support in achieving and maintaining compliance with confidence!

Ref: https://dodcio.defense.gov/Portals/0/Documents/CMMC/ScopingGuideL1v2.pdf

Website: www.juncyber.com
Email: [email protected]

Support the show

Send us a text

In this episode of CMMC News, we break down the essential guidance on defining the scope of a Level 2 Cybersecurity Maturity Model Certification (CMMC) assessment. We explore the key asset categories—CUI Assets, Security Protection Assets, Contractor Risk Managed Assets, and Specialized Assets—and provide insights into categorizing and documenting them effectively. Learn about the assessment requirements for each category, the critical role of System Security Plans (SSPs) and network diagrams, and what you need to know about working with External Service Providers (ESPs). We also touch on handling classified and unclassified information to ensure compliance.

Need help navigating the complexities of your CMMC assessment? Contact Jun Cyber today for expert guidance and support tailored to your organization. Don't leave compliance to chance—let us help you succeed!

Email: [email protected]
Website: www.juncyber.com

Ref: CMMC Level 2 Scoping Guidance

Support the show

Send us a text

In this episode of CMMC News, we explore the proposed CMMC Tax Credit and its potential to provide financial relief for small defense contractors navigating the complexities of Cybersecurity Maturity Model Certification (CMMC) compliance. Discover how this tax credit could offset costs like technology upgrades, staff training, and third-party assessments, helping small businesses stay competitive in the defense supply chain. Tune in to learn why this proposal could be a game-changer for contractors working to protect sensitive information and secure DoD contracts.

Website: www.juncyber.com
Email: [email protected]

Ref: https://www.juncyber.com/cmmc-tax-credit-a-lifeline-for-small-defense-contractors/

Support the show

Send us a text

Certainly! Here’s a polished description for your podcast episode:

🎙️ Episode Title: Demystifying the CMMC Final Rule: What It Means for Defense Contractors

In this episode of CMMC News, we delve into the recently unveiled CMMC Final Rule by the Department of Defense. Join our AI hosts as they unpack the critical updates, explain what’s new in the compliance landscape, and provide actionable insights for defense contractors navigating these changes.

Whether you’re a small business in the defense supply chain or a compliance professional looking to stay ahead, this episode offers practical advice, expert commentary, and strategies to align your organization with the latest cybersecurity standards.

💡 What you’ll learn:

• Key changes in the 2024 CMMC Final Rule
• How these updates impact contractors of all sizes
• Steps you can take today to prepare for certification

Don’t miss this engaging conversation that cuts through the jargon and delivers clarity on what the CMMC means for you.

Website: www.juncyber.com
Email: [email protected]

Reference: https://www.juncyber.com/final-cmmc-program-rule-unveiled-by-dod/

Support the show