Climbing Mount CMMC

(Season 2 Episode 10) Bobby Guerra and Amira Armond discuss various cybersecurity challenges and solutions. They emphasize the need for strong physical defenses, proper training, and encryption when dealing with external media. They also highlight the importance of securing contractor-managed assets and implementing security measures across the entire network. It is critical for organizations to have a clear understanding of their entire network and the assets within it, even if they are not considered CUI assets. Lastly, Bobby and Amira have a discussion on the reporting requirements for cyber incidents in the defense contracting industry.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season 2 Episode 9) Alright Climbers, let's get real. We are ready to share our truth and honest opinions of our CMMC journey. Bobby and Kaleigh will be specifically breaking down the cost, resource, impact, and time. If you're interest in our journey and the things that we've learned along the way, make sure to tune in to this miniseriesLinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season 2 Episode 8) Koren Marie Wise, CEO of Wise Technical Innovations, and Bobby Guerra emphasize the importance of having a skilled and knowledgeable team, conducting thorough gap assessments, and understanding the flow of Controlled Unclassified Information (CUI). Koren also highlights the need for proper scoping, accurate network diagrams, and the right skill sets to ensure compliance with the NIST 800-171 framework. In this conversation, they discuss the challenges and considerations for Managed Service Providers (MSPs) in the context of the Cybersecurity Maturity Model Certification (CMMC). They emphasize the importance of engaging with experienced and knowledgeable MSPs who understand the requirements and complexities of CMMC.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

In this conversation, Bobby Guerra, Adam Evans and Brian Hubbard discuss the challenges faced by MSPs in meeting compliance requirements, particularly in relation to the CMMC. They explore the concept of Joint Surveillance Voluntary Assessments (JSVAs) and the benefits they offer in terms of getting a jumpstart on certification. They also discuss the importance of MSPs staying engaged with the Defense Industrial Base (DIB) and the need for clarity and guidance from the DOD on various aspects of compliance. The conversation highlights the critical role of MSPs in supporting the DIB and the potential consequences of not having enough MSPs to meet the demand.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

In today's episode, Bobby is joined by Amira Armond, President of Kieri Solutions. They discuss scoping in the CMMC landscape and the things that can help or hinder your journey. Amira breaks down the difference between in scope and out of scope, is your work email able to be on a personal device, and more. We hope you enjoy today's episode!LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

If you are on your CMMC journey, like us, you've noticed the MANY acronyms that come with the landscape. We are here to breakdown the different acronyms and how they connect to each other. We hope that you enjoy todays podcast!LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season Two Episode 4) Bobby is joined by Joy Beland, Stuart Itkin, and George Perezdiaz to discuss the changes happening in the MSP industry, due to these new compliance regulations and frameworks. Is it for the better? How can we prepare our businesses for this change?LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season Two Episode 3) Bobby is joined by Matt Hoeper, from Edwards Performance Solutions, to discuss the educational piece of the CMMC world. They discuss the CCP and CCA courses and how to prepare for testing.He highlights the role of certifications like CCP (Certified CMMC Professional) and the knowledge of IT and NIST standards in preparing for CMMC assessments. Matt emphasizes the need for consultants and assessors to have a deep understanding of the CMMC requirements to ensure successful assessments and contract wins. He also recommends following industry experts on LinkedIn for valuable insights and staying updated on CMMC developments.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season Two Episode 2) Bobby is joined by Mark Berman, CEO of FutureFeed.co, to discuss his connection to Cyber AB and why GRC tool are so important to your security and compliance journey. We hope you enjoy today's episode and make sure to comment any questions you may have.The conversation also touches on the concept of security protection data (SPD) and the challenges it poses for GRC tools. The need for clarity and regulation in handling SPD is highlighted, along with the importance of choosing a GRC tool that prioritizes data security.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ

(Season Two Episode 1) Bobby sits down with Shel Phillips and Brian Hubbard to discuss an RFP and how to read and break it down. During a CMMC journey, many will come across RFPs, and it is critical to know and understand how to read and review them properly.They emphasize the importance of MSPs/MSSPs and organizations working together to ensure compliance and avoid potential risks. In this conversation, Brian Hubbard and Shel Philips discuss the importance of understanding and complying with cybersecurity requirements in government contracts. They explore topics such as the Federal Acquisition Regulation (FAR), Defense Federal Acquisition Regulation Supplement (DFARS), and the National Institute of Standards and Technology (NIST) publications. They also touch on the significance of certifications, such as the Medium Level of Assurance (MLOA) certificate, and the consequences of non-compliance, including the False Claims Act. The conversation emphasizes the need for MSPs to be knowledgeable about these requirements and to engage with the cybersecurity community for support and guidance.LinkedIn: https://www.linkedin.com/in/bobbyguerra/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ