What Needs to Change in CMMC Before Moving Forward? (Part 2)

In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance.Resources mentioned in podcast: Bo Birdwell's LinkedIn: Michael Birdwell | LinkedInElbit Systems of America website: Elbit America - Aerospace & Defense Solutions32 CFR: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) ProgramLevel 2 Self-Assessment Guide: CMMC Assessment Guide Level 2CIO DoD CMMC Resources: CIO - CMMC Resources & DocumentationWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation.Resources mentioned in podcast: Sector 171 game: https://sector171.netlify.app/CMMC Resources website: https://dodcio.defense.gov/CMMC/Resources-Documentation/Cyber AB Website: https://cyberab.org/Wise Technical Innovations: https://www.wtinetworks.com/Edwards Performance Solutions: https://edwps.com/cmmc-ccp-bootcamp/Summit 7 podcast- Sum IT Up: Summit 7 - YouTubeWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why industry feedback through the Request for Information (RFI) is critical, and what changes could help create a more practical and sustainable path forward for defense contractors, MSPs, and the broader cybersecurity ecosystem.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their perspective as one of the first CMMC Level 2 Certified MSPs navigating these changes. Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success.Resources mentioned in podcast: Sector 171 game: SECTOR 171 — The Assessor's GauntletCMMC Resources website: CIO - CMMC Resources & DocumentationCyber AB Website: CyberAB > HomeWise Technical Innovations: CMMC CCP and CCA and Training | Authorized C3PAO | Wise Technical InnovationsEdwards Performance Solutions: Certified CMMC Boot Camp-35-Hour Course-Live Online Instructor LedWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure successful certification.Resources mentioned in podcast:CMMC Phase II Suspension video:https://youtu.be/5JVbjrihSTsUltimate Guide to a Self-Assessment video:https://youtu.be/UVyQeMRYjRADoW CIO website: CIO - CMMC Resources & DocumentationJacob Hill video: https://m.youtube.com/watch?v=ISndYW5WbG0Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards.Sources mentioned in podcast:Vince Scott's Episode: https://youtu.be/QbhHdHM7e0cGrace in CMMC Episode:https://youtu.be/54--Ah6zod4Matt Travis Episode:https://youtu.be/rzeumax1HqQLink to the DoW Release: CMMC Phase II Suspended to Boost DIB InnovationWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits.NIST 800-171: Protecting Controlled Unclassified Information in Nonfederal SystemsWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape.Podcast episode-The Game of Chicken with Lawrence Cruciana: https://youtu.be/NffcMSVnKUMPodcast episode-The State of CMMC Today with Matt Travis: https://youtu.be/rzeumax1HqQTime Stamps:00:00-04:52 Intro04:53-11:20 The Game of Chicken11:21-18:17 Marriage Counseling for CMMC18:18-29:53 Comparing Apples to Oranges and Oranges to Potatoes29:54-34:31 The Easy Bake Oven Approach34:32-37:04 The Assessment Tango37:05-38:55 ConclusionWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance.32 CFR Final Rule: 2024-22905.pdfCyber AB Website: CyberAB > HomeTime Stamps:00:00-02:14 Introduction02:15-04:03 What Is the Cyber AB?04:04-09:27 Surviving the Early CMMC Years09:28-12:26 CMMC Momentum Is Growing12:27-16:13 Can the Ecosystem Scale?16:14-21:47 How the DoD Will Manage Rollout Challenges21:48-27:50 The MSP Capacity Problem27:51-33:24 Why MSPs Are Essential to CMMC33:25-35:43 New Support for MSPs & Contractors35:44-39:54 Creating a CMMC Body of Knowledge39:55-44:00 Policing the Ecosystem & Preventing Abuse44:01-47:40 The Future of CAICO Under ISACA47:41-49:29 ConclusionWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/