I have a surprise for you --- the last GRC Academy podcast!

In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moderate (GCC-M).

And let me tell you, it's quite a story: changes in the control baseline, new policy from the DoW, and lessons learned.

Here are some of the biggest takeaways:

• The real-world implications of DoW's equivalency definition
• How the absence of continuous monitoring shapes the trust model
• How Deltek developed a customer responsibility matrix that reduces friction for their customers
• Should the DoW blow up FedRAMP moderate equivalency?

We also discussed improvements that can be made by the DoW, the Cyber AB, and more!

We recorded this months ago, but this conversation is still very relevant.

On another note, it is kind of surreal to think this is the last episode of the GRC Academy podcast. I hope you've enjoyed listening!!

What were your biggest takeaways? Let me know in the comments.

Follow Michael on LinkedIn: https://www.linkedin.com/in/michael-greenman-94952a3/

Deltek Costpoint GCC-M: https://www.deltek.com/en/government-contracting/costpoint/cloud

-----------

Online GRC Training: https://tekfused.com/marketplace/?utm_source=podcast&utm_medium=s2-12&utm_campaign=marketplace

#cmmc