Tech Woke

🚨 Want to break into DoD cybersecurity but don't have eMASS experience? Gain hands on experience with RMF Academy eMASS Lab Access and build the confidence employers are looking for. Link below 👇

https://www.rmfacademy.io/courses/RMF-Academy-eMASS-Lab-Access

🚀 Ready to break into DoD cybersecurity? RMF Academy gives you the hands on training, practical resources, and real world guidance to build the skills employers are looking for. Link below 👇

https://www.rmfacademy.io/

Timestamps:

00:00 Introduction

00:59 Meet CMMC Assessor Carter Schoenberg

02:23 What Is CMMC and Who Actually Needs It?

05:49 What Is CUI?

06:40 CMMC Levels Explained

09:03 The Problem With CUI and Government Contracts

10:43 CMMC Phase 1 and Phase 2 Explained

11:38 What Happened to CMMC Phase 2?

14:28 The Real Cost of CMMC Compliance

16:54 Why Protecting CUI Matters

19:42 How Companies Should Start Preparing for CMMC

24:04 Understanding Your CUI Data Flow

24:24 What CMMC Assessors Look for in Documentation

25:36 What Actually Happens During a CMMC Assessment

27:50 How to Prepare Your CMMC Evidence and Artifacts

29:27 Common CMMC Documentation Mistakes

31:11 How CMMC Controls Are Actually Assessed

32:31 What Happens After the Assessment?

33:18 What Happens When Evidence Is Missing?

36:33 Should You Get a CMMC Mock Assessment?

38:06 Why So Many Companies Use Microsoft Intune for CMMC

40:11 CMMC Implementation Mistakes to Avoid

42:50 What It Takes to Pass a CMMC Assessment

46:29 CMMC Assessment Preparation Checklist

48:40 How to Use the CMMC Assessor Guides

49:24 Understanding CUI Assets and Assessment Scope

50:40 Why Universities May Need CMMC

52:03 Universities Already Being Required to Meet CMMC Level 2

53:01 CMMC vs Other Cybersecurity Assessments

54:49 The Future of CUI Requirements

57:34 CMMC Level 2 Certification Requirements

59:57 The Cost of CMMC Implementation and Certification

01:01:49 How to Choose a Good CMMC Assessor

01:04:00 Final Thoughts

VIdeo Description:

What does a CMMC assessor actually look for during an assessment? In this episode of the Tech Woke Podcast, Christopher Okpala sits down with CMMC assessor Carter Schoenberg to break down the CMMC assessment process, what organizations should expect, and how defense contractors can properly prepare before an assessor arrives.

We discuss CMMC, Controlled Unclassified Information (CUI), CMMC Level 2, assessment scope, security controls, evidence, artifacts, documentation, and implementation. Carter explains why simply having policies isn't enough and what organizations need to demonstrate to show that their cybersecurity practices are actually implemented. We also discuss common documentation mistakes, missing evidence, mock assessments, Microsoft Intune, the cost of CMMC compliance, and what happens when an assessor identifies gaps.

If you're an ISSO, GRC professional, cybersecurity professional, government contractor, CMMC consultant, MSP/MSSP, or business operating within the Defense Industrial Base (DIB), this conversation provides a practical look at how CMMC assessments work and how organizations can prepare.

In this episode:

What CMMC is and who needs it

What CUI is and why it must be protected

CMMC levels and assessment requirements

How to prepare for a CMMC assessment

What CMMC assessors actually look for

How to prepare controls, evidence, and artifacts

CMMC documentation requirements

How assessors validate control implementation

What happens when evidence is missing

Common CMMC preparation mistakes

Why companies use Microsoft Intune for CMMC environments

CMMC assessment scope and CUI data flows

Whether companies should conduct mock assessments

The cost of preparing for CMMC

How to choose a CMMC assessor or consultant

How cybersecurity professionals can get involved in the CMMC ecosystem

If your organization is preparing for a CMMC assessment, don't wait until assessment day to figure out whether your documentation, evidence, and technical implementation align. This episode gives you an assessor's perspective on what preparation actually looks like.

Subscribe to Tech Woke for more conversations about CMMC, RMF, GRC, ISSO careers, federal cybersecurity, GovTech, eMASS, NIST 800-53, and cybersecurity compliance.

Question for you: Is your organization currently preparing for CMMC?

#CMMC #Cybersecurity #GRC

🚨 Want to break into DoD cybersecurity but don't have eMASS experience? Gain hands on experience with RMF Academy eMASS Lab Access and build the confidence employers are looking for. Link below 👇

https://www.rmfacademy.io/courses/RMF-Academy-eMASS-Lab-Access

🚀 Ready to break into DoD cybersecurity? RMF Academy gives you the hands on training, practical resources, and real world guidance to build the skills employers are looking for. Link below 👇

https://www.rmfacademy.io/

Timesstamps:

00:00 Introduction

00:41 Meet Emmanuel and His Cybersecurity Journey

02:12 How Emmanuel Earned a Top Secret Clearance at 23

04:04 Using AI and LinkedIn to Land an ISSO Role

05:08 Does a Security Clearance Increase Your Salary?

07:28 How Employers Verify Your Background

10:42 How to Become an ISSO with No Experience

12:55 Networking Tips That Actually Work

14:55 What ISSOs Really Do vs. Common Misconceptions

17:08 Building Hands-On RMF Experience

19:25 Best Resources to Learn RMF and Cybersecurity

22:18 How to Stand Out in Cybersecurity Interviews

24:15 What Hiring Managers Are Really Looking For

27:18 Why Continuous Learning Matters

30:12 How to Grow Into a Senior ISSO

33:21 Teaching Cybersecurity vs. Working in the Field

36:12 The Biggest Problems with Cybersecurity Education

39:40 Should You Get a Cybersecurity Degree?

42:48 Certifications vs. Skills: What Matters Most?

45:15 Cloud Security, AI, and the Future of Cybersecurity

47:31 The Skills Every Cybersecurity Professional Should Learn

50:12 Advice for Breaking Into Federal Cybersecurity

52:18 Where to Connect with Emmanuel

53:05 Final Thoughts

Video description:

How Emmanuel Went From No Experience to a Federal Cybersecurity Career | ISSO, RMF & Security Clearance

How do you break into federal cybersecurity if you have little or no experience? What does it really take to become an Information System Security Officer (ISSO), earn a security clearance, and build a successful career in Risk Management Framework (RMF)?

In this episode of Tech Woke, I sit down with Emmanuel to discuss his journey into federal cybersecurity, how he landed an ISSO role, the importance of networking, certifications, LinkedIn, and the strategies that helped him build a career in one of the fastest-growing areas of cybersecurity.

Whether you're trying to land your first cybersecurity job, transition into Governance, Risk, and Compliance (GRC), or understand how to get into the federal space, this episode is packed with practical advice and real-world lessons.

In this episode, we discuss:

How Emmanuel broke into federal cybersecurity

What an Information System Security Officer (ISSO) actually does

How to gain RMF experience without already working in RMF

The role of security clearances in cybersecurity careers

Networking strategies that lead to job opportunities

How LinkedIn can help you land interviews

The certifications that helped Emmanuel succeed

Common mistakes new cybersecurity professionals make

Federal cybersecurity career advice

AI, cloud security, and the future of cybersecurity

How to grow from entry-level to senior cybersecurity roles

If you're serious about building a career in RMF, ISSO, GRC, NIST 800-53, CMMC, or federal cybersecurity, this episode is for you.

🎥 Watch the full episode and let us know in the comments:

What is the biggest challenge you're facing in your cybersecurity career?

🚨 Want to break into DoD cybersecurity but don't have eMASS experience? Gain hands on experience with RMF Academy eMASS Lab Access and build the confidence employers are looking for. Link below 👇

https://www.rmfacademy.io/courses/RMF-Academy-eMASS-Lab-Access

🚀 Ready to break into DoD cybersecurity? RMF Academy gives you the hands on training, practical resources, and real world guidance to build the skills employers are looking for. Link below 👇

https://www.rmfacademy.io/

Timestamps:

00:00 Intro

00:43 What Is the Risk Management Framework (RMF)?

04:15 Why RMF Is So Important in Government Cybersecurity

08:32 Common Misconceptions About RMF Careers

12:18 How to Prepare for RMF & ISSO Interviews

17:20 Losing My Job and Rebuilding My Career

18:42 Why I Doubled Down on RMF Academy

21:38 The Biggest Gap in RMF & GRC Training

22:20 How to Actually Succeed in an RMF Interview

26:10 Why Security+ and a Clearance Aren't Enough

28:05 Why I Built the eMASS Lab

28:50 The 7 Steps of RMF Explained

31:28 What You'll Actually Do as an ISSO

33:05 How RMF Academy Prepares You for the Job

36:21 The Future of RMF Careers

38:44 AI, Government Cybersecurity & RMF

40:08 How Quantum Computing Will Impact Cybersecurity

42:32 Future Skills Every RMF Professional Needs

43:30 Cloud, Automation & the Future of GRC

45:45 Why I Moved to New Mexico

46:35 What's Next for RMF Academy

47:50 Final Advice for Future ISSOs

48:20 Outro

Video description:

What does it really take to build a successful career in RMF and federal cybersecurity?

In this special episode of Tech Woke, the roles are reversed. Instead of interviewing a guest, I'm in the hot seat as Osasu Asaji interviews me about my journey from working as an Information System Security Officer (ISSO) to building RMF Academy, overcoming career setbacks, and helping thousands of cybersecurity professionals break into GovTech.

We dive deep into what the Risk Management Framework (RMF) really is, why it's one of the fastest-growing areas in federal cybersecurity, and what aspiring ISSOs, GRC professionals, and cybersecurity practitioners need to know to stay competitive in today's market.

Whether you're trying to land your first cybersecurity job, transition into an RMF role, or understand where AI, cloud security, and quantum computing are taking federal cybersecurity, this conversation is packed with practical advice and real-world lessons.

In this episode, we discuss:

What the Risk Management Framework (RMF) is

How to become an Information System Security Officer (ISSO)

My journey into federal cybersecurity

Losing my job and rebuilding through entrepreneurship

Why I created RMF Academy

The biggest mistakes aspiring ISSOs make

Why Security+ and a clearance aren't always enough

The importance of hands-on RMF and eMASS experience

AI's impact on RMF and GRC careers

How quantum computing could reshape cybersecurity

The future of government cybersecurity careers

Advice for anyone looking to break into GovTech

If you're serious about building a career in federal cybersecurity, this episode will give you the roadmap and mindset to move forward.

 If you enjoyed this conversation, be sure to Like, Subscribe, and turn on notifications for more interviews with cybersecurity leaders and career experts.

Check out RMF Lab: https://rmfpro.ai/

🚨 Want to break into DoD cybersecurity but don't have eMASS experience? Gain hands on experience with RMF Academy eMASS Lab Access and build the confidence employers are looking for. Link below 👇

https://www.rmfacademy.io/courses/RMF...

🚀 Ready to break into DoD cybersecurity? RMF Academy gives you the hands on training, practical resources, and real world guidance to build the skills employers are looking for. Link below 👇

https://www.rmfacademy.io/

Video Description:

In this episode of the Tech Woke Podcast, Christopher Okpala sits down with David McIltrot, founder of RMF Pro, to discuss one of the biggest challenges facing cybersecurity professionals in the federal GovTech space: the lack of hands-on RMF experience. While many professionals have Security+, IT experience, or even a security clearance, very few have the opportunity to practice working through real RMF workflows before stepping into an ISSO or GRC role. David demonstrates how RMF Pro helps bridge that gap by providing an interactive platform where users can practice NIST SP 800-53 controls, create POA&Ms, develop implementation statements, build SSPs, and gain practical experience with the RMF process.

Whether you're trying to break into an ISSO, GRC, or RMF role, preparing for interviews, or looking to strengthen your skills as a current cybersecurity professional, this conversation will show you why hands-on practice matters. We also discuss David's career journey, why he built RMF Pro, the future of RMF training, and how practical experience can help cybersecurity professionals become more confident and job-ready in today's federal cybersecurity workforce.

#RMF #GRC #ISSO

RMF Academy: https://www.rmfacademy.io/

Free Break into cybersecurity guide: https://www.rmfacademy.io/products/digital_downloads/breaking-into-cybersecurity

Decription:

In this episode of the Tech Woke Podcast, Christopher Okpala sits down with cloud engineer and content creator Jhante Henderson to discuss how aspiring technology professionals can break into cloud engineering and position themselves for success in today's competitive job market. We cover the skills employers are looking for, certifications versus hands-on projects, building a portfolio, preparing for interviews, and the steps beginners can take to stand out when applying for cloud engineering roles.

Whether you're coming from help desk, system administration, cybersecurity, or another IT background, this conversation provides a practical roadmap for landing your first cloud engineering job. We also discuss personal branding, LinkedIn strategies, AI's impact on hiring, and how building real-world projects can help you demonstrate your skills and attract opportunities in cloud computing.

RMF Academy: https://www.rmfacademy.io/

Timestamps:

00:00 Intro

01:18 From NSA Engineer to Cybersecurity Entrepreneur

02:12 How Ajay Got Started in RMF

03:30 Building a FedRAMP Business

04:06 Starting a Cybersecurity Company

08:28 Career Advice for Cybersecurity Professionals

12:45 What a FedRAMP Engineering Company Does

15:24 How Companies Prepare for FedRAMP

19:45 FedRAMP Explained

23:52 Common FedRAMP Mistakes

25:35 Continuous Monitoring Explained

28:05 How to Break Into FedRAMP Careers

32:02 AI Governance, GRC Engineering & Cybersecurity

40:13 FedRAMP 20x & OSCAL Explained

44:10 Skills Needed for Future Cybersecurity Careers

47:50 Entrepreneurship & Building a Team

50:20 Career Advice for the Next Generation

52:00 Closing Thoughts

In this episode of the Tech Woke Podcast, Christopher Okpala sits down with Ajay Chandhok, CEO of Stratus Cyber, to discuss his journey from engineering and cybersecurity into building a company that manages FedRAMP and CMMC environments for government and commercial clients. Ajay shares how he got started in RMF, transitioned into the FedRAMP space, built a cybersecurity business, and what it takes to support cloud environments operating at FedRAMP Moderate and High authorization levels.

We also dive into FedRAMP careers, continuous monitoring, cloud compliance, FedRAMP 20x, OSCAL, AI's impact on cybersecurity, and the future of compliance engineering. Whether you're interested in RMF, GRC, FedRAMP, cloud security, government contracting, or building a cybersecurity business, this conversation provides valuable insights into one of the fastest-growing areas of cybersecurity and compliance.

RMF Academy: https://www.rmfacademy.io/

Timestamps:

00:00 Introduction & Meet Richard Tarity

00:53 From Warehouse Worker to Tech Entrepreneur

02:30 Breaking Into the Technology Industry

03:21 Why Companies Make Bad Technology Decisions

05:15 The Biggest Mistake Leaders Make During Digital Transformation

07:18 Why End Users Are Often Ignored in Tech Projects

09:30 How Poor Communication Kills Technology Implementations

11:02 The Disconnect Between Sales, Engineering, and Customers

14:41 How Richard's Platform Helps Organizations Make Better Decisions

16:45 Why Technology Projects Fail

18:30 The Importance of Planning Before Implementation

20:45 Technology Risk, Cybersecurity, and Business Impact

22:15 AI Adoption: How Organizations Are Using AI Today

24:30 AI as a Force Multiplier for Business

25:54 Why AI Gives Smaller Companies a Competitive Advantage

28:05 How to Make Better Business Decisions

29:48 Slow Down to Speed Up: A Key Leadership Lesson

31:45 Advice for Entrepreneurs Building a Tech Business

33:32 Why Networking Still Matters More Than Social Media

36:45 Building Relationships in Business and Technology

38:30 Lessons Learned from 27 Years in Business

40:35 How to Create Value for Customers

43:55 Ask Better Questions, Get Better Answers

45:00 Final Thoughts & Closing Remarks

How do you build a technology business that lasts for decades in an industry that never stops changing?

In this episode of the Tech Woke Podcast, Christopher Okpala sits down with Richard Tarity, entrepreneur, advisor, speaker, and bestselling author, to discuss lessons learned from more than 27 years in the technology industry. Richard shares insights on entrepreneurship, leadership, technology adoption, customer success, artificial intelligence, and what it takes to build a business that continues to grow and deliver value over time. Whether you're a tech professional, business owner, or aspiring entrepreneur, this conversation offers practical advice for navigating today's rapidly evolving technology landscape.

RMF Academy: https://www.rmfacademy.io/

Trying to break into cybersecurity but confused about GRC vs RMF?

Everybody online says “get into GRC,” but most people never explain how different these paths actually are.

In this live Tech Woke conversation, we break down:

• What GRC actually is

• What RMF really looks like in the real world

• Federal vs commercial cybersecurity careers

• Which path is better for beginners

• Salary potential and career growth

• Real job titles to target

• Interview questions you should expect

• AI, cloud compliance, and where cybersecurity compliance is going next

If you’re trying to get into cybersecurity, GovTech, compliance, audit, risk, or RMF, this conversation will save you time.

Hosted by Christopher Okpala | Tech Woke Podcast

Subscribe for real cybersecurity career conversations, RMF insights, GovTech training, and practical tech career advice.

#Cybersecurity #GRC #RMF

RMF Academy: https://www.rmfacademy.io/

Video Description:

Cybersecurity compliance is changing fast.

AI, cloud computing, automation, DevSecOps, and continuous monitoring are reshaping what RMF and compliance work actually look like in real environments.

In this live conversation, we’ll break down the future of RMF, cybersecurity compliance, and the skills professionals need to stay relevant in 2026 and beyond.

Topics include:

• The future of RMF and cybersecurity compliance

• How AI is changing GRC, ISSO, and RMF roles

• Cloud compliance and FedRAMP environments

• cATO and compliance automation

• Why “paper compliance” is dying

• The cybersecurity jobs nobody talks about

• Hidden careers in GRC, audit, risk, and cloud compliance

• What skills people should actually be learning right now

• Will AI replace compliance jobs?

• How cybersecurity is becoming more technical

This conversation is designed for people trying to break into cybersecurity, grow in GovTech, understand RMF, or stay ahead of where the industry is heading.

Host: Christopher Okpala

Guest: Osasu Osagie

#Cybersecurity #RMF #GRC

RMF Academy: https://www.rmfacademy.io/

Timestamps:

00:00 Intro

01:12 Meet Peju Adedeji – GRC & Cybersecurity Audit Expert

03:45 What Is Cybersecurity Audit & GRC? (Beginner Breakdown)

07:28 Why So Many People Overlook GRC Careers

11:10 Fastest Way to Break Into GRC With No Experience

15:42 Certifications vs Real Skills (CISA, CISM, Security+)

20:30 Why Certifications Alone Won’t Get You Hired

25:18 Top Skills Needed to Succeed in GRC & Audit

30:44 How to Reposition Your Current Experience Into GRC

35:12 Beginner Roles to Target in Cybersecurity Compliance

39:50 Day in the Life of a Cybersecurity Auditor

44:06 Common Audit Findings Organizations Keep Failing

48:35 How Frameworks Like NIST & ISO Work in Real Life

52:10 Career Advice for Breaking Into Cybersecurity

53:26 Keep Moving Forward (Closing Motivation)

53:56 RMF Academy / Final Thoughts

Description:

Welcome back to the Tech Woke Podcast.

In this episode, Christopher Okpala, host of Tech Woke and cybersecurity professional in the GovTech space, sits down with Peju Adedeji to break down how to successfully transition into GRC (Governance, Risk, and Compliance) and cybersecurity auditing—even if you have no prior experience.

If you’ve been trying to break into cybersecurity, getting certifications, applying for jobs, and still not getting interviews, this conversation is for you.