Climbing Mount CMMC

Bobby Guerra
  • 5.0 (2)
  • 科技
  • 一周一更

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We are also excited to announce that we will have guests on our podcast who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more. 

  1. How the CRM Powers CMMC Compliance

    3天前

    How the CRM Powers CMMC Compliance

    In this episode, Kaleigh and Bobby delve into the intricacies of Customer Responsibility Matrices (CRMs) within the context of CMMC compliance. They discuss the importance of having a well-defined CRM, the relationship between CRMs and service agreements, and how these elements play a crucial role in assessments. The conversation emphasizes the need for clarity in responsibilities, the role of Managed Service Providers (MSPs), and the expectations of auditors. The hosts provide insights on how to effectively create and utilize CRMs to ensure compliance and avoid potential pitfalls during assessments. 32 CFR: https://www.govinfo.gov/content/pkg/FR-2024-10-15/pdf/2024-22905.pdf The CAP: https://cyberab.org/Portals/0/CMMC%20Assessment%20Process%20v2.0.pdf?ver=fEk1pUK1Fg26fVtopxv_DA%3d%3d Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    37 分钟
  2. Breaking Down the CMMC System Security Plan

    8月28日

    Breaking Down the CMMC System Security Plan

    This protips podcast episode is extra special! It includes clips from our webinar delving into the intricacies of system security plans (SSPs), emphasizing their critical role in organizational security and compliance with NIST 800.171 and CMMC standards. The discussion covers the importance of scoping, defining system boundaries, managing data flow, and detailing security controls. It also highlights the necessity of well-defined policies and procedures, as well as the clear outlining of user roles and responsibilities. We share insights on building comprehensive SSPs, the challenges faced by Managed Service Providers (MSPs), and the importance of documentation management in maintaining effective security practices. Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Bobby's Linkedln: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/ Want to take part in our upcoming webinar? Register now: https://events.teams.microsoft.com/event/6b7074f6-f21c-4884-ae24-d06f5f5be94c@edee3165-cd1d-46a0-9efe-d70636e1f49b LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    47 分钟
  3. CMMC Implementation from a Contractor's Perspective

    8月21日

    CMMC Implementation from a Contractor's Perspective

    In this episode, Kaleigh interviews Dy Edington, the Director of Information Security at AV (formally BlueHalo), about her journey through the CMMC Level 2 assessment. Dy shares insights on the importance of leadership buy-in, team collaboration, and the challenges faced during implementation. She emphasizes the significance of documentation, training, and continuous improvement in maintaining compliance. She also offers valuable advice for those starting their CMMC journey, highlighting the need for communication and understanding across all departments. Dy Edington's Linkedln: https://www.linkedin.com/in/dy-edington/ AV Website: https://www.avinc.com/ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Kaleigh Floyd's Linkedln: https://www.linkedin.com/in/kaleigh-floyd-079a52190/ LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    34 分钟
  4. What Is a POA&M? (And What It Isn't)

    8月14日

    What Is a POA&M? (And What It Isn't)

    In this first episode of Season 4 of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of Plans of Action and Milestones (POA&Ms) in the context of compliance with CMMC and NIST standards. They explore the historical misuse of POA&Ms, the new regulations that have been implemented, and the importance of creating effective POA&Ms. The conversation also touches on the role of operational plans of action (OPAs) and the implications of involving external service providers in the remediation process. The episode concludes with insights on navigating changes in compliance and assessments. LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    24 分钟
  5. Are You Wasting Your Time With CMMC?

    7月24日

    Are You Wasting Your Time With CMMC?

    *Spoiler Alert*  CMMC is real and it's happening right now. In this episode, Kaleigh Floyd and Bobby Guerra discuss the critical aspects of CMMC compliance for contractors, addressing common questions and concerns. They explore the differences between CMMC Level 1 and Level 2, the importance of legal guidance, and the necessity of understanding controlled unclassified information (CUI). The conversation emphasizes the need for proactive planning, leadership buy-in, and the creation of a Plan of Action and Milestones (PoAM) to ensure successful compliance. They also touch on the implications of NIST 800-171 Rev 3 and the risks associated with delaying compliance efforts. Ryan Bonner's Video: https://www.youtube.com/watch?v=IEy-TkmKMt8 Ryan Bonner's Linkedln: https://www.linkedin.com/in/rybonner/ Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    35 分钟
  6. 5 Things We Would Change About CMMC

    7月17日

    5 Things We Would Change About CMMC

    In this episode, Bobby and Kaleigh discuss five significant changes they believe could be made to the CMMC ecosystem. They explore the thought of C3PAOs to providing recommendations after assessments, the possibility of allowing organizations to pass with a score of 88, and the importance of having a C3PAO assessment process for MSPs. They also emphasize the need for yearly reviews instead of full assessments and the challenges posed by FIPS regulations. The conversation highlights the importance of flexibility and clarity in the certification process. Just a reminder that no one is claiming CMMC Jesus in this episode. Our words are not scripture, just conversation. Axiom Linkedln: https://www.linkedin.com/company/axiomtech/ Link to upcoming webinar: https://events.teams.microsoft.com/event/3f0f1447-834f-438b-9b81-74bc9eed8298@edee3165-cd1d-46a0-9efe-d70636e1f49b LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    32 分钟
  7. Everything You Need to Know About CMMC Implementation

    7月10日

    Everything You Need to Know About CMMC Implementation

    In this episode, Kaleigh Floyd and Bobby Guerra discuss the complexities of adopting CMMC (Cybersecurity Maturity Model Certification) from both the MSP and client perspectives. They explore the challenges organizations face in implementing CMMC, the importance of client education, and the need for a structured approach to change management. The conversation emphasizes the necessity of leadership buy-in and the scalability of processes to ensure compliance without compromising efficiency. The hosts also highlight the ongoing nature of refining CMMC processes within MSPs and the importance of continuous improvement in this area. Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Webinar Registration: https://events.teams.microsoft.com/event/3f0f1447-834f-438b-9b81-74bc9eed8298@edee3165-cd1d-46a0-9efe-d70636e1f49b LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    30 分钟
  8. How to Build Your CMMC Documents the RIGHT Way

    7月3日

    How to Build Your CMMC Documents the RIGHT Way

    In this episode, Kaleigh and Bobby discuss the complexities of CMMC documentation with Tom Conkle from Optic Cyber Solutions. They explore the challenges of writing effective System Security Plans (SSPs) and Customer Responsibility Matrices (CRMs), emphasizing the importance of viewing these documents as management tools rather than mere compliance checkboxes. The conversation highlights common pitfalls organizations face, the significance of clear communication between service providers and clients, and practical tips for creating effective documentation that enhances cybersecurity practices. Tom Conkle on Linkedln: https://www.linkedin.com/in/tomconkle/ Kelly Hood on Linkedln: https://www.linkedin.com/in/kellyhoodoc/ Optic Cyber Solutions Links Linkeldn: https://www.linkedin.com/company/opticcyber/posts/?feedView=all Website: https://www.opticcyber.com/index.html YouTube: https://www.youtube.com/@OpticCyber Optic Cyber Resources Page:  https://www.opticcyber.com/resources.html Customer Responsibilities Matrix Template: https://43828014.hs-sites.com/shared-responsibilities-matrix-srm-download LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    36 分钟
查看全部 90 集

预告

评分及评论

5
共 5 分
2 个评分

关于

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We are also excited to announce that we will have guests on our podcast who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more. 

信息

  • 创作者
    Bobby Guerra
  • 活跃年份
    2023年 - 2025年
  • 单集
    90
  • 分级
    儿童适宜
  • 版权
    © 2025 Climbing Mount CMMC
  • 节目网站
    Climbing Mount CMMC

你可能还喜欢