CMMC Pathfinder Tool | In 5 minutes or less, this free tool will give you a clear path from where you are now to CMMC confidence: https://www.summit7.us/pathfinder

Special guest host Daniel Akridge walks us through a visual of Procurement Administrative Lead Time compared to the CMMC rulemaking timelines. Daniel also walks us through Summit 7's CMMC Pathfinder Tool - a free resource companies can use to know exactly what steps they should take and what solutions might work best.

Connect with Daniel on LinkedIn: https://www.linkedin.com/in/danielakridge/

Connect with Jacob on LinkedIn: https://www.linkedin.com/in/jacob-evan-horne/

PALT Podcast: https://www.youtube.com/watch?v=NZs4f5voyrg

CMMC Pathfinder Tool: https://www.summit7.us/pathfinder

The team is back from Navy Gold Coast 2024, and we have some thoughts and takeaways from one of the largest defense industry conferences of the year. The DoD and small businesses are looking ahead to 2025 acquisition calendars while CMMC inches closer by the day.

Follow Hollie: https://www.linkedin.com/in/hollieflanner/

48 CFR Rule: https://youtu.be/Fzi3SFEs92U?si=HrOU9ZnlrSd_-hPr

PALT: https://youtu.be/NZs4f5voyrg?si=RNq22xmwbd7oZUxZ

National Defense Strategy Pod: https://youtu.be/TZtNQ8rg8eI?si=UKMscIx6tlkjKKuL

The DIB Cyber Strategy Pod: https://youtu.be/JYsmwcWzglU?si=veyhdqi0T2Dnhpsc

The National Defense Industrial Strategy Pod: https://youtu.be/ZKKkyK5PeOc?si=109D07JfcZFSVaXf

CMMC isn't a requirement to bid on defense contractors, but CMMC is a requirement to take award of DoD contracts. That means the most important metric is how much time you have between bidding and taking award. Turns out that “PALT” times are rarely long enough to go from zero to certified and that's a big, big problem for companies who are waiting on CMMC.

Episode Links:

48 CFR Proposed Rule: https://youtu.be/Fzi3SFEs92U?si=jUpnHDQvFiiqOuc8

GAO report on PALT: https://www.gao.gov/products/gao-24-106528

Secure the DIB replay: https://www.summit7.us/securethedib

1,417 days after the original CMMC contract clause was created and 1,003 days after the announcement of CMMC 2.0 here we are – the proposed rule revising DFARS clause 252.204-7021. This is the piece of the puzzle that will actually show up in your RFPs, contracts, awards, orders, etc. What does it say? Who does it affect? When will it show up? We step through it line-by-line.

If you haven't caught a Cyber AB Town Hall lately, then you're missing out on valuable information. This week we give our take on the AB's rulemaking timeline, what the FY25 NDAA says about CMMC, the upcoming DoD IG report on the Cyber AB, and more!

Cyber AB Town Halls: https://cyberab.org/News-Events/Town-Halls

Secure the DIB replay: https://www.summit7.us/securethedib

Register for Secure the DIB: Summer Camp for FREE here: https://www.securethedib.us/

You're not crazy. According to a new inspector general report the federal CUI Program has been in hibernation for the last few years. But the story goes much deeper than run-of-the-mill findings. Desperately overworked civil servants, stubbornly non-compliant federal agencies, the lofty heights of the National Security Council, and even rumors of a new CUI executive order. This story might seem a world away from the day-to-day concerns of defense contractors, but what happens on top of the mountain inevitably rolls downhill.

ISOO IG Report: https://naraoig.oversight.gov/reports/audit/audit-naras-information-security-oversight-office

History of CMMC (2010 – 2020): https://youtu.be/jbY2irZ1ePg?si=bGiInfLCpr-WFvcF

Register for Secure the DIB: Summer Camp for FREE here: https://www.securethedib.us/

Summer is coming to a close and that means it's time for our annual Secure the DIB Summer Camp webinar. Summit 7's Daniel Akridge joins the show this week to share what he's seeing and hearing from defense contractors regarding market dynamics, what the primes are up to, and how companies are dealing with the cost of compliance.

Episode Links:

DIB Summer Camp: https://www.summit7.us/securethedib

Big Dan: https://www.linkedin.com/in/danielakridge/

Register for Secure the DIB: Summer Camp for FREE here: https://www.securethedib.us/

The DoD's Center for Manufacturing Cybersecurity has released a report documenting the level of confidence that defense contractors have in their cybersecurity posture. The conclusion? There is a systemic cybersecurity overconfidence problem in the DIB.

Episode Links:

DIB Summer Camp: https://www.summit7.us/securethedib

MxD Report: https://www.mxdusa.org/cyber/cyberreport/

Register for Secure the DIB: Summer Camp for FREE here: https://www.securethedib.us/

The 32 CFR CMMC final rule has officially left the DoD and is currently undergoing final regulatory review. This is the last step before publication in the Federal Register. Based on what we know, CMMC should be a reality before the end of 2024.

Episode Links: Proposed Rule Webinar: https://www.summit7.us/webinars/proposed-cmmc-rule

Now that SP 800-171 revision 3 is official, organizationally defined parameters (ODPs) are officially a part of our the rest of our lives. Like most things in SP 800-171 there are great details in SP 800-53 that help explain what's going on. In this episode we take a deep dive in requirement 3.1.8 through the lens of ODPs.

Episode Links:

SP 800-53: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final

FedRAMP baselines: https://www.fedramp.gov/baselines/