Cyberspin

December CMMC Connect

In this episode of Cyberspin, we bring you a replay of December’s CMMC Connect session, featuring an engaging discussion with our CCPs and CCAs: Jeremy Meyers, Rob Teague, Dr. Thomas Graham, and Belen Coleman. The team tackles audience questions, dives into the implications of the finalized and in effect 32 CFR rule, and explores practical strategies for achieving and maintaining CMMC compliance.
Key topics include:
Preparing for the effective date of 32 CFR and beyond.
Addressing challenges with EMASS and certification timelines.
Best practices for balancing compliance and operational needs.
Insights into evidence requirements, self-assessments, and scoring complexities.
A practical look at cloud solutions, hybrid environments, and architectural best practices.
Whether new to CMMC or seeking expert guidance, this session offers actionable advice and insights to help your organization succeed. Don’t forget to join us live for the next CMMC Connect session on the last Thursday of every month!
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.

Understanding Rep. Gary Palmer's Joint Resolution Against the CMMC Rule & Staying Focused on The CMMC Road Ahead

In this special episode, Robert Hill, CEO at Cyturus, shares the inside scoop from his discussion with Representative Gary Palmer’s staff about Palmer’s joint resolution disapproving the CMMC rule.
Learn what this resolution means for DoD contractors, how it could impact compliance efforts, and why staying focused on the path to compliance is more important than ever.
Listen to clarify the implications and next steps for navigating this critical moment in the defense industrial base.
 
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.

November CMMC Connect: MSPs, Security Assets, the Cap, Unsupported Systems, MFA, CUI, FIPS, Visitor Controls, and of Course (and always) Documentation!

This conversation is a replay of Redspin's November 2024, CMMC Connect Q&A session. The conversation covers various aspects of the CMMC process, including boundary considerations, asset definitions, and strategies for preparing for assessments.
 
The speakers (some who are live from the Cyber AB's CEIC Conference) provide insights into the latest updates on the new CMMC Assessment Process (CAP) release, how Managed Service Providers (MSPs) can prepare for Level 2, and best practices for making the assessment process smoother.
 
They also discuss the challenges of handling unsupported operating systems and the importance of risk management in these scenarios. This conversation delves into various aspects of CMMC compliance, including the necessity of MFA for Wi-Fi access and the handling of CUI in different contexts. The discussion also covers the importance of background checks for third-party employees, the management of visitor controls in research environments, and updates on compliance processes and requirements such as FIPS validation. The panelists emphasize the need for thorough documentation and due diligence in maintaining compliance standards.
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.

October CMMC Connect: Updates and Guidance with Matt King!

This episode shares October’s CMMC Connect session, which features special guest Matt King, Belcan's Chief Security and Data Officer, alongside Jeremy Mares and Robert Teague from Redspin.
The team breaks down the latest CMMC updates, including insights on the finalized 32 CFR timeline, tips for defining CUI, and new requirements for MSP and ESP certifications.
They also tackle audience questions on key topics like scoping, training, DIBCAC High certification (JSVAP), and much more. Whether you’re a defense contractor or cybersecurity professional, this episode offers valuable insights into navigating CMMC requirements.
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.

Navigating the CMMC Final Rule

Rob Teague and the team discuss the anticipated 32 CFR final rule. They explore initial key takeaways from the rule, including changes in certification processes for external service providers, DIBCAC-High assessments, the appeals process, record retention requirements, and the impact of mergers and acquisitions on certification.
 
Rob, Dr. Thomas Graham, and Jeremy Mares emphasize the importance of acting quickly to navigate the upcoming certification landscape and address the challenges posed by potential assessment backlogs.
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.
 

September CMMC Connect: In the Cloud, Timelines, and Small Businesses

This episode is a replay of the latest CMMC Connect session, where we tackle critical updates on CMMC rulemaking, public comments, and timelines. It features insights from the "Queen of CMMC" Tara Lemieux, Rob Teague, who joins us live from NCS, and cloud security expertise from Steve Akers.
We dive into essential tips for compliance, Cloud environments, the 48 CFR rule, and what small businesses need to know as 2025 approaches. Don't miss this deep dive into CMMC and the chance to prepare for what’s next.
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.

August CMMC Connect: Timelines, Strategies for SMBs, Cloud Environments, etc...

In this month's episode, we revisit the August CMMC Connect session, where Jeremy, Thomas, and Rob discuss the latest updates and questions surrounding the Cybersecurity Maturity Model Certification (CMMC). 
Tune in as we cover key topics, including the anticipated timeline for CMMC certification requirements, recent developments like the 32 CFR and 48 CFR publications, and the cost implications for small businesses aiming for CMMC Level 2 certification. The panel also addresses the complexities of scoping CMMC compliance in cloud environments, the role of joint surveillance assessments, and how to navigate potential challenges in meeting compliance requirements.
This episode is packed with actionable insights and answers to your most pressing CMMC questions, making it a must-listen for anyone involved in the defense industrial base (DIB) or interested in staying ahead of CMMC developments.
Key Takeaways:
Understanding the latest timeline and requirements for CMMC certification.
Navigating the 32 CFR and 48 CFR updates and their implications for contracts.
Strategies for small businesses to minimize costs while achieving CMMC compliance.
Insights on using cloud environments like Azure and GCC for CMMC compliance.
Practical advice on managing CUI data and preparing for CMMC audits.
Whether you're a prime contractor, subcontractor, or just getting started with CMMC, this episode provides valuable guidance on navigating the evolving landscape of cybersecurity compliance.
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.
 

July CMMC Connect: Implementation Strategies, Sub/Supplier Readiness, CMMC for SMBs, and more

As part of our CMMC Connect Series of the Cyberspin Podcast, this episode presents a replay of our latest CMMC Connect session. Listen as Jeremy Mares, Tara Lemieux, Dr. Thomas Graham, and Rob Teague as they tackle audience questions on essential CMMC topics:
CMMC Implementation strategies
How to ensure suppliers and subcontractors protect sensitive data and are tackling CMMC
Addressing requirements for small businesses (even those with just one person
The consequences of not doing CMMC
Plus, they answer a few additional questions from the audience
 
Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.