The CMMC Space Podcast

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The source material for this episode is a modified version of ATX Defense’s System Security Plan that removes operational details but retains key takeaways. This SSP successfully passed a DoD-led CMMC assessment in December 2024 on the first attempt with no deficiencies. 

Get ready for the grand finale! In this episode, we explore the trickier aspects of CMMC, like supply chain risk management and advanced data protection. Learn how ATX Defense tackles these challenges with innovative solutions and a commitment to security that sets them apart. Don't miss this final chapter in our CMMC journey!

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The source material for this episode is a modified version of ATX Defense’s System Security Plan that removes operational details but retains key takeaways. This SSP successfully passed a DoD-led CMMC assessment in December 2024 on the first attempt with no deficiencies. 

We're back for more! In this episode, we dig deeper into the ATX Defense SSP, uncovering hidden gems in configuration management, incident response, and least functionality. Discover how they go above and beyond basic compliance, tackle common CMMC challenges, and build a true culture of security.

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The source material for this episode is a modified version of ATX Defense’s System Security Plan that removes operational details but retains key takeaways. This SSP successfully passed a DoD-led CMMC assessment in December 2024 on the first attempt with no deficiencies. 

Ever wondered what a successful CMMC implementation actually looks like? Join us as we dissect a real System Security Plan (SSP) from ATX Defense, a company that aced their DoD-led CMMC assessment. We'll explore their innovative "CMMC Space" – a secure, containerized environment built on cutting-edge cloud technology. Get ready for a backstage pass to CMMC compliance!

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The source material for this episode is an ATX Defense whitepaper about secure CMMC enclaves for subcontractors.

CMMC compliance is a major hurdle for subcontractors in the defense industry, but secure enclaves might be the key to a simpler, more affordable solution. In this episode, we explore ATX Defense's CMMC Space, a platform designed to help subcontractors achieve compliance by leveraging the power of secure enclaves.

CMMC Space offers a unique combination of managed security services, a secure virtual environment (the enclave), and collaboration tools. We break down how this approach tackles the complexities of those 110 NIST controls, potentially saving subcontractors significant time and money.

But is it all smooth sailing? We analyze the potential benefits of CMMC Space, such as reduced assessment costs and increased collaboration with primes, while also addressing concerns like reliance on a single provider and the risk of a "checkbox mentality" towards cybersecurity.

Join us as we delve into the world of secure enclaves and explore whether CMMC Space is the game changer subcontractors have been waiting for.

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The source materials for this episode are:
Department of Homeland Security Review of the Summer 2023
Microsoft Exchange Online Intrusion and Google Workspace: A More Secure Alternative

In this episode of the CMMC Space Podcast, we delve into the alarming Microsoft Exchange online intrusion that occurred in the summer of 2023. We explore how the cyber-espionage group Storm-0558, suspected to have ties to China, exploited a stolen 2016 Microsoft signing key to forge tokens and access sensitive emails from top U.S. government officials. The breach went undetected until a custom alert, humorously nicknamed "Big Yellow Taxi," flagged unusual activity.

We discuss the critical findings of the Department of Homeland Security Cyber Safety Review Board (CSRB) report, which highlights a series of preventable errors and a lack of transparency in Microsoft's corporate culture. The conversation contrasts Microsoft's reactive security approach with Google Workspace's proactive zero-trust architecture, emphasizing how Google's robust security measures, like automatic key rotation and stateful tokens, make it a more secure alternative.

The episode offers practical advice for businesses on evaluating their cloud providers, stressing the importance of transparency, strong encryption, and diligent key management. Whether you're considering switching to Google Workspace or enhancing your current security setup, this episode provides valuable insights into protecting your data in the ever-evolving digital landscape.

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

ATX Defense generated the content and narration for this episode using Google's NotebookLM and this description using Gemini Advanced. The speakers are Artificial Intelligence.

The only source material is ATX Defense's Google Workspace CMMC Level 2 Implementation Guide located at https://cmmcguide.atxdefense.com

Join us as we take a deep dive into the world of Google Workspace and CMMC Level 2 compliance. In this 3-part series, we explore how Google's tools stack up against the CMMC requirements, discuss the advantages and limitations of using Google Workspace for CMMC, and provide practical advice for organizations seeking to achieve compliance.

We'll cover key topics such as:

• FedRAMP authorization, data location, and CMMC
• Supplemental configurations for enhanced security
• CMMC Space, a managed service solution from ATX Defense
• CISA's SCUBA project and SCUBA Goggles policies

Whether you're new to CMMC or already on your compliance journey, this series will provide valuable insights and guidance. Tune in and discover how Google Workspace can help you achieve your cybersecurity goals.

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space

The content for this episode was generated using Google's NotebookLM and voiced by artificial intelligence. The only source material is the CMMC Final Rule.

This episode is an essential introduction to the CMMC Final Rule for small businesses. We cover everything from self-assessments and POA&Ms to the role of C3PAOs. Get practical advice on implementing cybersecurity best practices and meeting the requirements of NIST 800-171.

For more about ATX Defense's CMMC Space, visit us at https://cmmc.space