Climbing Mount CMMC

Bobby Guerra
Climbing Mount CMMC

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We are also excited to announce that we will have guests on our podcast who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more. 

  1. CMMC Inheritance: Which Controls am I Responsible for?

    HÁ 3 DIAS

    CMMC Inheritance: Which Controls am I Responsible for?

    In this episode, Kaleigh Floyd and Bobby Guerra delve into the complexities of inheritance within the CMMC framework, particularly focusing on the role of external service providers (ESPs) and the responsibilities of organizations seeking assessment (OSA). They discuss the importance of system security plans, the nuances of the CMMC assessment process, and the challenges faced by managed service providers (MSPs) in navigating inheritance claims. The conversation emphasizes the need for clarity in responsibilities and the potential benefits and limitations of inheriting controls from ESPs. In this conversation, Kaleigh Floyd and Bobby Guerra delve into the complexities of CMMC compliance, focusing on the roles of Managed Service Providers (MSPs) and the concept of inheritance in assessments. They discuss the critical importance of understanding responsibilities between clients and MSPs, the nuances of service provisioning, and the need for clear communication to ensure successful compliance outcomes. The conversation emphasizes the importance of preparation, collaboration, and informed decision-making in navigating the CMMC landscape. LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    44min
  2. The Importance of Scalability as a Service Provider

    19 DE JUN.

    The Importance of Scalability as a Service Provider

    In this episode, Kaleigh and Bobby discuss the complexities of scaling CMMC for Managed Service Providers (MSPs). They explore the challenges of compliance, the importance of tools, and the necessity of having structured operational and sales strategies. The conversation also delves into the 'Four Horsemen' of compliance, which are critical for maintaining security and compliance standards. Finally, they emphasize the importance of ongoing maintenance and the long-term scalability of CMMC processes for MSPs. LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    24min
  3. Marketing in the CMMC Industry As an MSP

    12 DE JUN.

    Marketing in the CMMC Industry As an MSP

    In this episode, Bobby and Kaleigh discuss the challenges and strategies of marketing within the CMMC space. Kaleigh shares her journey of transitioning into this niche market, emphasizing the importance of building a reputation, understanding client needs, and maintaining transparency throughout the sales process. They explore the significance of effective communication, the necessity of educating clients about CMMC, and the balance between being sympathetic and correcting misconceptions. The conversation highlights the need for managed service providers to be proactive and knowledgeable in their approach to CMMC compliance. LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    30min
  4. Breaking Down the Roles in CMMC Certifications

    5 DE JUN.

    Breaking Down the Roles in CMMC Certifications

    In this episode, Bobby and Kaleigh explore the CyberAB ecosystem, focusing on the various roles and certifications within the CMMC framework. They discuss the importance of understanding the distinctions between Registered Practitioners (RP), Registered Practitioner Organizations (RPO), CMMC Certified Professionals (CCP), and CMMC Certified Assessors (CCA). The conversation also highlights the role of C3PAOs in conducting assessments and the significance of external service providers in the certification process. The hosts emphasize the need for organizations to navigate these certifications effectively to ensure compliance and security in the cybersecurity landscape. Axiom's Linkedln: https://www.linkedin.com/company/axiomtech/ Link to Cyber AB certification requirements: https://cyberab.org/CMMC-Ecosystem/Ecosystem-Roles LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    30min
  5. The CMMC Compliance Sidekick You Didn't Know You Had

    22 DE MAI.

    The CMMC Compliance Sidekick You Didn't Know You Had

    In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra delve into the intricacies of Customer Responsibility Matrices (CRMs) and their significance in CMMC compliance. They discuss the definition of CRMs, their importance in defining responsibilities between customers and service providers, and the essential components needed to create an effective CRM. The conversation emphasizes the need for clarity in responsibilities, the connection to NIST 800-171 controls, and the importance of understanding vendor relationships in the context of cybersecurity compliance. Optic Cyber Solutions CRM Template: MSP-customer-responsibility-matrix-template 1.xlsx Kelly Hood: (9) Kelly Hood | LinkedIn Tom Conkle: (9) Tom Conkle | LinkedIn Brian Hubbard: (9) Brian Hubbard | LinkedIn LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    17min
  6. Father/Daughter Duos Discuss the Evolving Landscape of Cybersecurity

    15 DE MAI.

    Father/Daughter Duos Discuss the Evolving Landscape of Cybersecurity

    In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra engage with Chris and Hannah Silvers, a father-daughter duo from CG Silver's Consulting. They discuss their journey in the cybersecurity field, the challenges and dynamics of CMMC, and the importance of community and collaboration in navigating this complex landscape. The conversation highlights the unique challenges faced by MSPs in adapting to CMMC requirements and the evolving nature of their business dynamics. The episode also touches on the intricacies of the sales process in CMMC consulting, emphasizing the need for education and understanding in client relationships. In this engaging conversation, Chris and Hannah Silvers, along with Kaleigh Floyd and Bobby Guerra, explore the intricacies of navigating the C3PAO landscape, the journey to certification, and the dynamics of working in a family business. They discuss the importance of confidence and growth in professional roles, generational perspectives in the workplace, and the empowerment that comes from experience. The conversation highlights the unique challenges and rewards of working in cybersecurity, particularly in the context of family relationships and mentorship. CG Silvers Consulting website: https://www.cgsilvers.com/ Chris' LinkedIn: https://www.linkedin.com/in/cgsilvers/ Hannah's Linkedln: (15) Hannah Silvers | LinkedIn CyberAB listing with contact information: https://cyberab.org/Member/C3PAO-198-Cg-Silvers-Consulting-Llc LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    48min
  7. How to Choose the Right MSP and Avoid a False Start

    8 DE MAI.

    How to Choose the Right MSP and Avoid a False Start

    In this episode, Kaleigh Floyd and Bobby Guerra discuss the critical issue of false starts in CMMC assessments, emphasizing the importance of proper documentation and preparation. They explore the phases of CMMC assessments, the consequences of failing to meet requirements, and the necessity of seeking help from consultants. The conversation highlights the significance of mock assessments and understanding the roles of external service providers in the assessment process. The hosts provide practical advice for avoiding false starts and ensuring a successful assessment journey. LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    31min
  8. Securing Custom Software: Documenting Software Security Controls for CMMC Compliance

    1 DE MAI.

    Securing Custom Software: Documenting Software Security Controls for CMMC Compliance

    In this episode, Kaleigh and Bobby welcome back Kyle Lai to discuss the challenges and insights surrounding C3PAOs and the CMMC framework. They explore Kyle's journey into the C3PAO space, the current state of audits, and the importance of software development in compliance. The conversation highlights the need for collaboration between IT and software development teams, the significance of understanding controlled unclassified information (CUI), and the challenges faced during assessments. Kyle shares valuable insights on vulnerability management, the impact of open-source software, and strategies for leveraging existing platforms to ease compliance efforts. The episode concludes with a call for better communication and collaboration within organizations to ensure successful assessments and compliance. Kyle's LinkedIn: https://linkedin.com/in/kylelai/ KLC Consulting: https://klcconsulting.net Web Application Reference Architecture: https://acrobat.adobe.com/id/urn:aaid:sc:US:8bb4ebc1-8287-40af-8761-31bc035fa64c KLC's Playbook for CMMC Assessors: https://acrobat.adobe.com/id/urn:aaid:sc:US:abd836d0-7eea-43e5-ae72-86d06197fc54 KLC's Software Security Principles Template and Related Resources: https://klcconsulting.net/cmmc-resource-tools/ LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Kaleigh's: (1) Kaleigh Floyd | LinkedIn

    42min
Ver tudo (82)

Trailer

Classificações e avaliações

5
de 5
2 avaliações

Sobre

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We are also excited to announce that we will have guests on our podcast who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more. 

Informações

  • Criado por
    Bobby Guerra
  • Anos de atividade
    2023 - 2025
  • Episódios
    82
  • Classificação
    Livre
  • Copyright
    © 2025 Climbing Mount CMMC
  • Site do podcast
    Climbing Mount CMMC

Você também pode gostar de

Para ouvir episódios explícitos, inicie sessão.

Fique por dentro deste podcast

Inicie sessão ou crie uma conta para seguir podcasts, salvar episódios e receber as atualizações mais recentes.
Selecionar um país ou região

África, Oriente Médio e Índia

Ásia‑Pacífico

Europa

América Latina e Caribe

Estados Unidos e Canadá