What Does Proper CMMC Self-Attestation Look Like?

In this episode of "Climbing Mount CMMC," hosts Kaleigh Floyd and Bobby Guerra delve into the intricacies of preparing for a CMMC Level 2 assessment, particularly focusing on the role of external service providers (ESPs) and Managed Service Providers (MSPs). They emphasize the importance of selecting a provider who not only understands the CMMC requirements but has also successfully guided clients through the assessment process. Kaleigh shares her personal experiences with contractors who have been misled by providers, likening the situation to being an Uber driver rather than a coach in a race. Bobby adds that understanding the CMMC controls at a referee level is crucial for any provider aiming to assist clients effectively. The conversation progresses to practical advice on how to vet potential providers, including asking about their experience with assessments, their understanding of NIST 800-171 controls, and the tools they use. Kaleigh and Bobby stress the necessity of having a customer responsibility matrix and a clear agreement that outlines the roles and responsibilities of both the provider and the client. They conclude by encouraging listeners to ask the right questions to avoid wasting time and resources, ensuring they choose a provider who can genuinely support them through the CMMC certification journey.Link to see our upcoming events: https://www.axiom.tech/upcoming-events/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, hosts Bobby and Kaleigh discuss the critical topic of self-attestation for CMMC level two requirements. They explore the evolution of self-attestation, the risks associated with misrepresentation, and the importance of accountability in the self-assessment process. The conversation emphasizes the need for organizations to prepare adequately for self-attestation, including having a solid system security plan and the necessary evidence to support their claims. The hosts also highlight the potential consequences of failing to comply with these requirements, including the role of whistleblowers and the importance of leadership taking these matters seriously.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and Bobby discuss the significant changes and challenges that companies will face in 2026 regarding CMMC compliance. They delve into the implications of new CMMC Level 2 requirements, the importance of self-assessments versus third-party assessments, and the potential consequences of non-compliance. The conversation also touches on the risks of false claims and whistleblowing, the expected timeframes for achieving compliance, and the impact of resource contention on costs. Finally, they emphasize the importance of finding the right Managed Service Provider (MSP) to navigate these challenges effectively.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh Floyd and Bobby Guerra discuss the intricacies of change management within Managed Service Providers (MSPs) and its critical role in ensuring compliance with CMMC standards. They emphasize the importance of leadership buy-in, effective training for both client and internal staff, and the necessity of a structured change approval process. The conversation also highlights the challenges MSPs face in navigating client expectations while maintaining compliance, and the need for thorough tracking of change requests to prepare for assessments.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this conversation, Dy Edington discusses the essence of CMMC, emphasizing that it is not merely about following specific procedures but about achieving results with consistency and transparency. She highlights the significance of managing change effectively to prevent unexpected disruptions, linking it to broader organizational processes.Dy's LinkedIn: https://www.linkedin.com/in/dy-edington/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Bobby interviews Axiom's Marketing Coordinator, Maleah Adams, about her experience taking the CCP (CMMC Certified Professional) course. In a brief conversation, they touch on what CMMC looks like from a beginner's perspective and how the CCP course helped shaped that knowledge. She shares what surprised her, what concepts were easier to grasp than expected, and how the training gave her a clearer picture of why compliance matters not just for IT teams but for an entire organization. If you've ever wondered what the first steps into CMMC look like or how the CCP course can build a solid foundation even for non-technical professionals, this episode is for you.Maleah's Linkedln: https://www.linkedin.com/in/maleah-adams-1433211bb/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh Floyd and Kelly Hood discuss the essential steps for small businesses to navigate the complexities of CMMC compliance. They emphasize the importance of understanding the foundational reasons behind CMMC, the necessity of leadership involvement, and the identification of internal roles and responsibilities. The conversation also covers practical strategies for implementing NIST 800-171 controls, the significance of scoping, and tips for writing an effective System Security Plan (SSP). Throughout the discussion, they highlight the need for a cultural shift towards security and the importance of collaboration across departments.Kelly Hood's Linkedln: https://www.linkedin.com/in/kellyhoodoc/Optic Cyber Solutions: https://www.opticcyber.com/Optic's CMMC (L2) Progress Tracker: https://43828014.hs-sites.com/cmmc-l2-progress-trackerCAP: https://cs2.cloud/hubfs/CS2%202022/CS2%20DC/Resources/DRAFT%20CMMC%20Assessment%20Process%20(CAP)%20v1.0%20.pdfTimestamps: Intro 00:00 02:40The "Why" Behind NIST 800-171 02:41 07:35The Importance of Leadership Buy-In 07:36 10:39Defining Internal Roles 10:40 17:06Working Through Domain Controls 17:07 24:55Building Your SSP 24:56 31:29Take Scoping Seriously 31:30 39:04Write Something Down 39:05 41:15Closing Remarks 41:16 42:53Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

This webinar discussion provides an in-depth exploration of the CMMC Level 2 assessment process, including the phases of assessment, methodologies, and the importance of media sanitization and risk assessments. The speakers share their experiences and insights, emphasizing the need for thorough preparation and understanding of compliance requirements to ensure successful outcomes in assessments. Bobby and Kaleigh walk listeners through the nuances of a CMMC mock assessment and give a glimpse into what you can expect on assessment day. Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh Floyd, Bobby Guerra, and Vincent Scott discuss the upcoming rollout of the Cybersecurity Maturity Model Certification (CMMC) and the challenges facing the defense industrial base. They explore the readiness of organizations seeking certification, the role of implementers, and the potential impact on major defense systems. The conversation emphasizes the importance of preparation and accountability in achieving cybersecurity goals while addressing the complexities of the CMMC implementation process.Vincent Scott's Linkedln: https://www.linkedin.com/in/vincent-scott-cybersecurity/Defense Cyber Security Website: https://www.cybersecgru.com/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh interviews Logan Therrien from Kieri to discuss the role of C3PAOs in the CMMC ecosystem. They explore the importance of proper preparation for CMMC Level Two certification, common pitfalls organizations face during self-assessments, and the critical nature of documentation. The conversation also delves into the assessment process, the significance of system security plans, and the ongoing responsibilities after certification.https://cyberab.org/https://cyberab.org/Resources/Downloadshttps://www.youtube.com/@kierilfhttps://www.nist.gov/https://www.linkedin.com/in/logan-therrien/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/