Cyber Savvy

Send us a text

We’re back with Ryan Bonner for part two of his sit-down with Mike Shelah on DTC’s Cyber Savvy podcast. 

In this episode, we breakdown the Cybersecurity Maturity Model Certification (CMMC) and its implications for government contractors. They explore the importance of CMMC, the certification process and the critical role of action plans in achieving compliance. You’ll also hear insights on the challenges companies face during gap assessments and why strategic planning is essential.  Plus, they discuss how CMMC could reshape the industry, potentially leading to major consolidation.   

Whether you're a contractor navigating compliance or just curious about the future of cybersecurity standards, this episode is packed with valuable takeaways  

Key Takeaways: 

• CMMC is a mandate that organizations must comply with. 
• Plans of action can be misleading and should be approached cautiously. 
• Understanding the CMMC certification process is crucial for contractors. 
• Organizations need to justify CMMC certification as part of a strategic plan. 
• Gap assessments should be conducted iteratively to maintain context. 
• Managing bandwidth and resource constraints is essential for compliance. 
• Organizations should focus on the areas that handle controlled unclassified information (CUI). 
• Consolidation in the industry will require a strategic approach to compliance. 
• Documentation and process management are key to maintaining compliance. 
• CMMC is about more than just compliance; it should align with business strategy. 

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

In this episode,  Mike Shelah, host of the Cyber Savvy Podcast, interviews Ryan Bonner, CEO of DefCerts, for an insightful discussion about cybersecurity and CMMC in government contracting. The conversation explores how cybersecurity has evolved from a luxury to a business necessity, common misconceptions in the industry, and the challenges organizations face in meeting security requirements. Ryan shares valuable insights from his extensive experience in the field and hints at important changes coming in 2025 that will affect government contractors. 

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

 Join host Mike Shelah and guest Tasha Cornish, Executive Director of Cybersecurity Association, Inc., as they dive into cybersecurity legislation and initiatives planned for 2025.

Tasha discusses their advocacy efforts to expand and modernize the Buy Maryland Cyber Tax Credit, making it more accessible to hospitals, nonprofits, and businesses of all sizes. The conversation explores the financial challenges organizations face in implementing cybersecurity measures, particularly in healthcare settings where margins are tight, and resources limited. 

Mike and Tasha also share insights about various cybersecurity frameworks, upcoming events including a CMMC symposium in May 2024, and the association's efforts to build a stronger cybersecurity community in Maryland. Learn about the real costs of cyber-attacks, the importance of proactive security measures, and how businesses can get involved with the Cybersecurity Association's initiatives. 

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

Join host Mike Shelah as he sits down with Tasha Cornish, Executive Director of the Cybersecurity Association Inc., to discuss her journey from Maine to Maryland, from medicine to cybersecurity, and her mission to make cyber education more accessible. 

Learn about the Association's three centers of excellence, their approach to workforce development, and how they're helping businesses become more cyber resilient. Whether you're a seasoned cyber professional or just starting to think about cybersecurity for your business, this episode offers valuable insights into the evolving cyber landscape. 

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

In this episode of the Cyber Savvy Podcast, host Mike Shelah interviews Amira Armond from Kieri Solutions, a Certified Third Party Assessing Organization (C3PAO), about the complexities of achieving Cybersecurity Maturity Model Certification (CMMC). Amira provides deep insights into the challenges government contractors face when preparing for CMMC certification, emphasizing that it's not just about passing an initial assessment, but maintaining ongoing compliance and understanding the nuanced requirements.

The conversation highlights key challenges such as implementing comprehensive documentation, following rigorous change management procedures, and addressing technical requirements like multifactor authentication. Amira stresses the importance of working with qualified practitioners who truly understand the intricate details of CMMC requirements, rather than simply checking boxes. She also discusses the difference between registered practitioners and certified assessors, and offers practical advice for companies looking to navigate the CMMC certification process effectively.

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

In this podcast episode, Mike Shelah interviews Amira Armond, founder of Kieri Solutions, about the Cybersecurity Maturity Model Certification (CMMC). They discuss the program's role in protecting sensitive defense contractor information and its impact on cybersecurity standards for government contractors.

The conversation also offers a brief personal insight into Amira's background, revealing her interest in search and rescue work with her German Shepherd, adding a human touch to the technical discussion.

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

This episode discusses the importance of compliance frameworks like HIPAA and CMMC in cybersecurity. Cybersecurity expert Loren Larson explains how these standards help organizations secure their systems and data.

The conversation covers the challenges businesses face in meeting compliance requirements, such as the perceived high costs. Loren and host Mike Shelah share examples of companies that ignored compliance only to face serious consequences later.

The episode emphasizes the business need to take a proactive, framework-driven approach to cybersecurity, rather than relying on hoping you won't get hacked. Loren provides guidance on conducting assessments and developing a plan to cost-effectively achieve compliance.

The key points are the importance of compliance frameworks, the challenges of implementing them, and the need for businesses to take cybersecurity seriously instead of hoping for the best.

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

We are excited to announce the Cyber Savvy Podcast season 3 with our very own Mike Shelah! 

Mike has taken the reins delivering education to business owners and sharing what they need to know about cybersecurity. On this episode, Mike sits down with Loren Larson, cybersecurity specialist at Dell. Loren talks about the difference between cybersecurity and traditional IT support - it's not just firewalls and software updates. Follow us on our YouTube channel as well! 

We will be posting new interviews twice a month. Buckle up it's going to be a wild ride!

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

In this special episode, we're marking a significant transition in our podcast's journey. With a mix of gratitude and anticipation, we bid farewell to our beloved host, Andrew Rose, and warmly welcome our new host, Mike Shelah.

We cannot express enough appreciation for Andrew's dedication and passion as the host of this podcast. His insightful conversations, thought-provoking questions, and warm personality have been instrumental in shaping our show and building our wonderful community of listeners. Andrew's contributions have left an unmistakable mark, and his presence will be deeply missed.

As we turn this new page, we're thrilled to introduce Mike Shelah as our new host. Mike brings a fresh perspective and a wealth of experience to the role. We're excited for you to get to know him and experience the unique energy he'll bring to our conversations.

In this episode, you'll hear from both Andrew and Mike as we celebrate the past and look forward to the future. Join us for this special transition and be part of this new chapter in our podcast's history.

Thank you, Andrew, for everything you've done. And welcome aboard, Mike – we can't wait to see where you'll take us next!

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!

Send us a text

In today's episode, we will be discussing the main cyber threats against medical professionals with Scott Leister, a Dev Sec Ops engineer who has been in the MSP industry working for DTC for over 20 years.

Andrew Rose began a cybersecurity awareness program in 2016 while at a major agricultural bank after recognizing that the ag sector wasn’t getting the attention it needed about the risks posed by cybercriminals and other adversaries. He helped coordinate several symposiums and events focusing on the topic. He is now an independent contractor and volunteers his time to bringing cybersecurity awareness, education, mitigation, and response to the ag and food supply chain (and other special projects). His focus is on mitigating emerging threats. In addition to his experience in cybersecurity, he has a deep understanding of banking/finance, risk management, and other professional service sectors related to food, agriculture, and climate.  

Want to hear more? Past episodes are all posted, including on YouTube! Follow and subscribe on your favorite podcast app to ensure you don’t miss out on the conversation!