TechnologyBusinessNewsTech News

Climbing Mount CMMC

Bobby Guerra

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement.

We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!

Play

Open in

25 episodes
weekly
Avg 33 min
English

Episodes 25

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

S5 · E21
Thursday · 1 hr 1 min
Understanding the 'Class Deviation' and What it Means for CMMC Compliance
In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors. Class Deviation: https://media.licdn.com/dms/document/media/v2/D561FAQGSCWrODbSmhA/feedshare-document-url-metadata-scrapper-pdf/B56aCGfVqAI8A4-/0/1788962760218?e=1789581600&v=beta&t=fLrdB7f9FoKMQJuaLxv3guuCih4B5M8Dp4DlPgARP68 CUI Categories and Abbreviations: https://www.dodcui.mil/CUI-Categories-and-Abbreviations/ Follow Koren on Linkedln: https://www.linkedin.com/in/koren-wise/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E20
September 3 · 44 min
What Does a Prime Need to See from My Self-Assessment? w/ Bo Birdwell
In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance. Resources mentioned in podcast: Bo Birdwell's LinkedIn: Michael Birdwell | LinkedIn Elbit Systems of America website: Elbit America - Aerospace & Defense Solutions 32 CFR: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program Level 2 Self-Assessment Guide: CMMC Assessment Guide Level 2 CIO DoD CMMC Resources: CIO - CMMC Resources & Documentation Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E19
August 27 · 18 min
How the CCP Prepared Me for My Day-To-Day
In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation. Resources mentioned in podcast: Sector 171 game: https://sector171.netlify.app/ CMMC Resources website: https://dodcio.defense.gov/CMMC/Resources-Documentation/ Cyber AB Website: https://cyberab.org/ Wise Technical Innovations: https://www.wtinetworks.com/ Edwards Performance Solutions: https://edwps.com/cmmc-ccp-bootcamp/ Summit 7 podcast- Sum IT Up: Summit 7 - YouTube Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E18
August 20 · 30 min
What Needs to Change in CMMC Before Moving Forward? (Part 2)
In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why industry feedback through the Request for Information (RFI) is critical, and what changes could help create a more practical and sustainable path forward for defense contractors, MSPs, and the broader cybersecurity ecosystem. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E17
August 18 · 29 min
What Needs to Change in CMMC Before Moving Forward? (Part 1)
In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their perspective as one of the first CMMC Level 2 Certified MSPs navigating these changes. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E16
August 13 · 30 min
How Do I Study for the CCP Exam?
In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success. Resources mentioned in podcast: Sector 171 game: SECTOR 171 — The Assessor's Gauntlet CMMC Resources website: CIO - CMMC Resources & Documentation Cyber AB Website: CyberAB > Home Wise Technical Innovations: CMMC CCP and CCA and Training | Authorized C3PAO | Wise Technical Innovations Edwards Performance Solutions: Certified CMMC Boot Camp-35-Hour Course-Live Online Instructor Led Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E15
July 23 · 29 min
How Do I Continue Self-Assessments Following the CMMC Phase 2 Suspension?
In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure successful certification. Resources mentioned in podcast: CMMC Phase II Suspension video:https://youtu.be/5JVbjrihSTs Ultimate Guide to a Self-Assessment video:https://youtu.be/UVyQeMRYjRA DoW CIO website: CIO - CMMC Resources & Documentation Jacob Hill video: https://m.youtube.com/watch?v=ISndYW5WbG0 Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E14
July 16 · 34 min
What Do You Need to Know About the CMMC Phase II Suspension
In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards. Sources mentioned in podcast: Vince Scott's Episode: https://youtu.be/QbhHdHM7e0c Grace in CMMC Episode:https://youtu.be/54--Ah6zod4 Matt Travis Episode:https://youtu.be/rzeumax1HqQ Link to the DoW Release: CMMC Phase II Suspended to Boost DIB Innovation Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E13
July 9 · 35 min
What Happens After I Pass My Assessment?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits. NIST 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E12
July 2 · 38 min
How To Pass CMMC The First Time
In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape. Podcast episode-The Game of Chicken with Lawrence Cruciana: https://youtu.be/NffcMSVnKUM Podcast episode-The State of CMMC Today with Matt Travis: https://youtu.be/rzeumax1HqQ Time Stamps: 00:00-04:52 Intro 04:53-11:20 The Game of Chicken 11:21-18:17 Marriage Counseling for CMMC 18:18-29:53 Comparing Apples to Oranges and Oranges to Potatoes 29:54-34:31 The Easy Bake Oven Approach 34:32-37:04 The Assessment Tango 37:05-38:55 Conclusion Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E11
June 25 · 49 min
What Every MSP Needs to Know About CMMC (feat. Matt Travis, CEO of Cyber AB)
In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance. 32 CFR Final Rule: 2024-22905.pdf Cyber AB Website: CyberAB > Home Time Stamps: 00:00-02:14 Introduction 02:15-04:03 What Is the Cyber AB? 04:04-09:27 Surviving the Early CMMC Years 09:28-12:26 CMMC Momentum Is Growing 12:27-16:13 Can the Ecosystem Scale? 16:14-21:47 How the DoD Will Manage Rollout Challenges 21:48-27:50 The MSP Capacity Problem 27:51-33:24 Why MSPs Are Essential to CMMC 33:25-35:43 New Support for MSPs & Contractors 35:44-39:54 Creating a CMMC Body of Knowledge 39:55-44:00 Policing the Ecosystem & Preventing Abuse 44:01-47:40 The Future of CAICO Under ISACA 47:41-49:29 Conclusion Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E10
June 18 · 36 min
How To Master the CCP/CCA Courses
In this episode of Climbing Mount CMMC, Bobby and Kaleigh provide an in-depth look at the CCP and CCA certifications, including preparation strategies, course insights, and industry perspectives. They discuss topics that target those aiming to understand the certification process, improve their skills, or help organizations prepare for assessments. Tara Lemieux Game: SECTOR 171 — The Assessor's Gauntlet ISACA info: CMMC: Provisional Instructor (PI) to CMMC Credentialed Instructor (CCI) Transition Overview CMMC: How can I transition from Active Provisional Instructor (PI) to CMMC Credentialed Instructor (CCI)? Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E9
June 11 · 22 min
A Deep Dive into Rev 3: Incident Response (feat. Adam Evans)
In this Spelunking episode of Climbing Mount CMMC, Kaleigh and Adams dive into the key differences between NIST 800-171 Rev2 and Rev3, focusing on incident response requirements for CMMC compliance. They share insights on preparing for Rev3, emphasizing 03.06's incident handling, reporting, and training strategies. Link to NIST 800-171 Rev 3: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E8
June 4 · 36 min
What Qualifies As a "Significant Change" in CMMC?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh explore the recent updates and implications of "significant changes" in the CMMC assessment process, focusing on how organizations can navigate reassessments, change management, and the role of C3PAOs. Link to 32 CFR Final Rule: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program Link to FAQ: CYBERSECURITY MATURITY MODEL CERTIFICATION Program (CMMC) FREQUENTLY ASKED QUESTIONS Link to Vince Scott's Article: (29) Temporary Deficiencies, Enduring Exceptions, and Operational Plans of Action: What are they and why do I care? | LinkedIn Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E7
May 28 · 29 min
What is CMMC Inheritance and How Do I Apply It? (feat. Adam Evans)
In this episode of Climbing Mount CMMC, Kaleigh speaks with Axiom's compliance officer, Adam Evans, to explore the complexities of inheritance in the context of CMMC compliance, cloud service providers, and external service providers. They discuss how inheritance works, common misconceptions, and practical tips for organizations navigating compliance assessments. Link to the CMMC Assessment Process (CAP): https://cyberab.org/Portals/0/CMMC%20Assessment%20Process%20v2.0.pdf Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E6
May 21 · 46 min
What is "The Game of Chicken" in CMMC? (feat. Lawrence Cruciana)
In this episode of Climbing Mount CMMC, Kaleigh and Bobby dive into a deep discussion on the complexities and challenges of achieving CMMC Level 2 certification for MSPs and OSCs with Lawrence Cruciana. They share insights on shared responsibility, operational maturity, and "the game of chicken" played between organizations in the cybersecurity compliance landscape. Lawrence's LinkedIn: Lawrence Cruciana | LinkedIn Corporate Information Technologies Website: Corporate Information Technologies - CorpInfoTech Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E5
May 14 · 26 min
Cyb-Her: Transitioning Your MSP to CMMC Compliance
In this episode of Cyb-Her, Kaleigh shares with Axiom employee, Maleah Adams, her journey from call coordinator to COO, speaking on her experiences in the MSP and cybersecurity space, including her work and transition to the CMMC ecosystem and her perspective as a woman in a male-dominated industry. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E4
May 7 · 42 min
Working with a C3PAO (feat. Fernando Machado)
In this episode of Climbing Mount CMMC, Fernando Machado (CCA) from CyberSec Investments shares his extensive experience with Kaleigh and Bobby about the CMMC assessment process, the journey to becoming a C3PAO, and practical insights for contractors navigating the certification landscape. They discuss the phases of assessments, scoping mistakes, and how to prepare effectively. Fernando's LinkedIn: https://www.linkedin.com/in/fernando-machado-cissp-cism-cca-ccp-5b5581124/ CyberSec Investments Website: https://cybersecinvestments.com/ ND-ISAC C3PAO Shopping Guide: https://ndisac.org/defense-news/nd-isac-releases-c3pao-shopping-guide-for-small-medium-sized-businesses/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E3
April 30 · 28 min
What Questions Should Your MSP Be Asking You?
In this episode, Kaleigh and, new to Axiom, Ashton Guerra discuss the critical questions organizations seeking CMMC Level 2 certification (OSCs) should ask their MSPs. They share insights on scope, security measures, and the importance of transparency in the certification journey. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/
S5 · E2
April 23 · 28 min
A Deep Dive into Rev 3: Awareness & Training
In this new series we like to call "Spelunking", Bobby and Kaleigh explore the updates in NIST 800-171 Revision 3, focusing on the differences from Rev 2, including control changes, assessment objectives, and preparation strategies for compliance. In this episode, they focus on control 03.02 Awareness and Training. They give valuable insights for MSPs, organizations, and assessors preparing for the upcoming changes and requirements. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

Showing 1–20 of 25 episodes