CMMC Proof

Derrich Phillips

Welcome to the CMMC Proof Podcast, strategically commanded by Derrich Phillips, a battle-hardened cybersecurity veteran, Certified CMMC Assessor, and Provisional Instructor. Our mission: to navigate the complex battleground of Cybersecurity Maturity Model Certification (CMMC), with a tactical focus on the unique challenges and breakthrough strategies within the academies of higher education. Each episode is a strategic operation, featuring elite conversations with the foremost commanders in cybersecurity – CIOs, CTOs, and CISOs from prestigious research universities. We strategize on crucial topics, including: - Maneuvering through the intricate terrains of CMMC and NIST SP 800-171 compliance in the academic sector. - Decoding encrypted messages of best practices and lessons from the cybersecurity trenches in higher education. - Outflanking cyber threats to protect sensitive research data and intellectual property. - Deploying AI and cutting-edge tech for fortified cybersecurity defenses. At the CMMC Proof Podcast, our goal is to transform compliance from a battlefield into a training ground for cybersecurity excellence in academia. We equip university leaders and IT warriors with the intelligence and arsenal needed to turn cybersecurity challenges into opportunities for victory and innovation. Join us in the CMMC Proof Podcast for mission-critical insights and actionable intelligence that prepare you for a future where cybersecurity is the stronghold of academic and research success. Salute to a future where cybersecurity compliance is your university's shield and spear in the digital age.

  1. From Help Desk to CMMC Certified Assessor (CCA): A 25-Year Career Blueprint

    4D AGO

    From Help Desk to CMMC Certified Assessor (CCA): A 25-Year Career Blueprint

    We often hear that the cybersecurity talent gap is a "shortage of people." The truth? It is a shortage of professionals who can bridge the gap between technical theory and assessment-ready rigor. I recently sat down with Rene Ferrier, CCA, to discuss his journey from 25 years in IT and RMF (Risk Management Framework) to becoming a newly minted CMMC Certified Assessor. What makes Rene's story unique isn't just his tenure—it's his tactical approach to the learning curve. During a two-hour daily commute, Rene used Generative AI (ChatGPT and Gemini) to turn his car into a classroom, breaking down complex NIST 800-171 controls into "molecular" concepts he could master while on the road. Key highlights from our conversation: The RMF Transition: Why 25 years of experience is an asset, but "scoping discipline" and "evidence rigor" require a complete mindset shift. The AI Tutor: How to use modern tools to simulate high-level compliance dialogues and prepare for the CCA exam. The Cloud Frontier: Why specializing in GCC High is the next major career multiplier for assessors. Breaking the "Exclusive" Barrier: How we are making CMMC training attainable for the next generation of the workforce. Rene's journey proves that the "Experience Paradox" is solvable if you are willing to use new tools to master old fundamentals. As he says, "Don't get stagnant. Right now, the sky is the limit." Ready to launch your CMMC career? Schedule a free consultation today- https://cmmccopilot.aspirecyber.com/booking

    26 min

  2. 09/29/2025

    How a Small Business Achieved CMMC Level 2 Certification in Record Time and at Low Cost

    This is a powerful CMMC success story that proves compliance doesn't have to take 12-18 months or break your budget. Join your host, Derrich Phillips, as he interviews Josh Hedeby, CPA, Director of Finance at Intertec Engineering, about their journey to CMMC Level 2 certification. Josh shares the shock of receiving quotes for traditional solutions (like Microsoft GCC High MSPs) that exceeded $250,000 for just the first year. Discover the disruptive, fully managed solution that turned their 12-18 month project into a rapid success, giving them a crucial competitive advantage now that the final CMMC rule is published. In this video, you will learn: - The Cost Trap: Why traditional solutions were a non-starter and how quotes reached six figures for a small business. - The Game-Changing Solution: How the CMMC Space solution by ATX Defense provided a 100% managed, affordable alternative. - Rapid Compliance: Intertec went from signing up to being assessment-ready within 30 to 45 days, avoiding a grueling 12-18 month timeline. - Inheritance is Key: How inheriting the policies and documentation allowed Intertec to skip the pain of writing an 80-page System Security Plan (SSP). Ready to accelerate your CMMC readiness? Aspire Cyber is committed to helping small businesses find affordable CMMC solutions. ➡️ Contact us to start your compliance journey: www.aspirecyber.com

    43 min
  3. How a Small Business Saved Over $100k getting CMMC Level 2 Certified

    09/22/2025

    How a Small Business Saved Over $100k getting CMMC Level 2 Certified

    Is CMMC Level 2 certification a nightmare of confusing requirements and sky-high costs? Not anymore. In this CMMC Proof podcast, Derrich Phillips sits down with the leadership team of Quadyster—Hari Banda, CBL Rao, and Biju Ninan—to share their incredible journey from feeling overwhelmed by traditional CMMC solutions to achieving their certification in record time and for a fraction of the expected cost. This is a powerful case study for any small business struggling with CMMC. Quadyster openly discusses the challenges they faced, the fears around extensive documentation and high costs, and how a strategic partnership network delivered a groundbreaking, affordable solution. Ready to accelerate your CMMC readiness? Aspire Cyber is on a mission to save small businesses $1 million by December 31, 2025, by helping them to identify affordable CMMC solutions. ➡️ Contact us to start your compliance journey- www.aspirecyber.com

    39 min
  4. Get CMMC Assessment Ready in a Week for Under $1,500 | ATX Defense Space Powered by Google

    02/25/2025

    Get CMMC Assessment Ready in a Week for Under $1,500 | ATX Defense Space Powered by Google

    Join Derrich Phillips on the CMMC Proof Podcast as he sits down with Zach Walker, co-founder of ATX Defense. Discover how their revolutionary CMMC solution is helping small defense contractors avoid the CMMC expensive nightmare.

    39 min
  5. Google Workspace & CMMC Compliance: Secure, Scalable Solutions for Defense Contractors

    02/18/2025

    Google Workspace & CMMC Compliance: Secure, Scalable Solutions for Defense Contractors

    In this engaging episode of the CMMC Proof Podcast, host Derrich Phillips sits down with Jeff Brown, Google US Public Sector Workspace Lead, to explore how Google Workspace is transforming CMMC compliance for defense contractors. Discover how Google Assured Controls and U.S.-based data centers empower organizations to meet CMMC Level 2 requirements with ease and confidence. What We Cover in This Episode: - Google Workspace for Defense: Tailored solutions for the defense industrial base (DIB) Whether you're a prime contractor, subcontractor, or IT lead, this conversation offers valuable insights to streamline your compliance process. Watch now to learn how Google Workspace can make your CMMC journey more secure, scalable, and cost-effective. 🔔 Subscribe for the latest updates and expert tips on CMMC compliance and more! Visit the Google Workspace landing page-https://workspace.google.com/learning/content/cybersecurity-maturity-model-certification?e=48754805 🌐 Visit www.cmmcproof.com for additional resources and expert insights.

    27 min
  6. Inside the CMMC Assessment Handbook with Its Author, Doug Landoll

    01/19/2025

    Inside the CMMC Assessment Handbook with Its Author, Doug Landoll

    In this episode of the CMMC Proof Podcast, host Derrich Phillips sits down with Doug Landoll, CEO of Lantego and the author of the bestselling CMMC Assessment Handbook. Doug shares his journey into cybersecurity, offering a unique perspective on the importance of collaboration within the cybersecurity community. What you'll learn in this episode: Doug's experience as an author, focusing on CMMC and its impact on organizations. Insights into the CMMC assessment process, its challenges, and how it compares to frameworks like SOC 2 or ISO 27001. The future of CMMC compliance and why proactive preparation is essential for organizations. The value of CISSP training and clear success definitions in building a fulfilling cybersecurity career. Why consulting should center on empowering organizations for better assessments.                                                                                                                                                            Whether you're a defense contractor preparing for CMMC compliance, a cybersecurity professional seeking expert advice, or someone exploring a career in the field, this episode is packed with actionable insights and inspiration. Subscribe for the latest CMMC updates and insights. Visit www.cmmcproof.com

    39 min
  7. Building a Security-First Culture: Lessons from Kruze Consulting | SOC 2 Compliance

    01/03/2025

    Building a Security-First Culture: Lessons from Kruze Consulting | SOC 2 Compliance

    Join Derrich Phillips, Lead Certified CMMC Assessor (CCA), as he interviews Tatiana Marin, Director, Information Security at Kruze Consulting. In this episode, Tatiana shares her unique journey into cybersecurity, her strategies for building a strong security culture, and valuable insights on navigating SOC 2 compliance. Key Topics Covered: Transitioning from operations management to cybersecurity leadership Practical tips for managing SOC 2 audits and selecting the right tools The importance of leadership support and fostering a security-first mindset Leveraging external partners to enhance cybersecurity for small businesses Balancing rapid growth with robust security in a remote work environment    Takeaways: Tatiana highlights the critical role of collaboration, effective communication, and leadership buy-in in creating a resilient cybersecurity posture. Her insights offer actionable advice for companies of all sizes.  Whether you're tackling SOC 2 compliance or looking to improve your cybersecurity practices, this episode is packed with practical guidance and inspiration. Visit www.cmmcproof.com

    40 min

  8. 12/18/2024

    CMMC for Manufacturers: Turning Compliance Into a Competitive Edge

    In this episode of the CMMC Proof Podcast, host Derrich Phillips interviews Melissa Burant, a supply chain project manager at Iowa State University CIRAS, to uncover the compliance challenges defense contractors face under the Cybersecurity Maturity Model Certification (CMMC).  Melissa shares insights into bridging the gap between federal requirements and current compliance practices, emphasizing the importance of simplifying complex regulations and providing actionable steps for small and medium-sized manufacturers. She sheds light on the shortcomings of the current CMMC ecosystem, such as the lack of resources mapping back to federal requirements and the overwhelming information contractors must navigate. The conversation dives into: The effectiveness of virtual boot camps in empowering companies to implement cybersecurity practices. How false claims and noncompliance cases impact small businesses. The importance of connecting cybersecurity efforts to revenue. Collaborative strategies to support manufacturers in the cybersecurity industry. Building targeted resources and simplifying the compliance journey for contractors. Melissa's practical advice and passion for helping small businesses make this episode a must-watch for anyone navigating the complexities of CMMC compliance.    Subscribe  Visit www.cmmcproof.com

    42 min
See All (32)

About

Welcome to the CMMC Proof Podcast, strategically commanded by Derrich Phillips, a battle-hardened cybersecurity veteran, Certified CMMC Assessor, and Provisional Instructor. Our mission: to navigate the complex battleground of Cybersecurity Maturity Model Certification (CMMC), with a tactical focus on the unique challenges and breakthrough strategies within the academies of higher education. Each episode is a strategic operation, featuring elite conversations with the foremost commanders in cybersecurity – CIOs, CTOs, and CISOs from prestigious research universities. We strategize on crucial topics, including: - Maneuvering through the intricate terrains of CMMC and NIST SP 800-171 compliance in the academic sector. - Decoding encrypted messages of best practices and lessons from the cybersecurity trenches in higher education. - Outflanking cyber threats to protect sensitive research data and intellectual property. - Deploying AI and cutting-edge tech for fortified cybersecurity defenses. At the CMMC Proof Podcast, our goal is to transform compliance from a battlefield into a training ground for cybersecurity excellence in academia. We equip university leaders and IT warriors with the intelligence and arsenal needed to turn cybersecurity challenges into opportunities for victory and innovation. Join us in the CMMC Proof Podcast for mission-critical insights and actionable intelligence that prepare you for a future where cybersecurity is the stronghold of academic and research success. Salute to a future where cybersecurity compliance is your university's shield and spear in the digital age.

Information

  • Creator
    Derrich Phillips
  • Years Active
    2023 - 2026
  • Episodes
    32
  • Rating
    Clean
  • Show Website
    CMMC Proof

You Might Also Like