Climbing Mount CMMC
by Bobby Guerra
Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!
Episodes
-
An MSPs Perspective on the Value of Conferences
In the most recent episode of Climbing Mount CMMC, Kaleigh and Bobby explain how to get real value from CMMC conferences, whether you’re new to the field or an experienced MSP or contractor. They share practical ways to set goals, find useful conversations and sessions, learn from peers, and use...
-
How to Train Your Team on CMMC (Documentation, Data Flows, etc.)
In this episode, Kaleigh Floyd and Bobby Guerra from MSP Axiom discuss the complexities of achieving and maintaining CMMC Level 2 compliance. They share insights on training, data flow, documentation, and client management to help MSPs navigate this challenging landscape. Hiring for CMMC...
-
Understanding CMMC Across Physical and Cloud Environments
In this episode, Bobby and Kaleigh delve into the complexities of physical and cloud environments in the context of CMMC compliance. They share practical insights on managing physical assets, access control, and security baselines to help contractors and MSPs navigate the physical security...
-
What Will NIST 800-171 Rev 3 Look Like in Practice?
In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of...
-
How to Spot a Great Compliance Candidate
In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss: - Planning for CMMC...
-
Tips and Tricks for Cybersecurity Assessment Readiness
In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance. They discuss: Role of SPRS…
more -
How Will the CMMC Pause Affect My Third-Party Assessment?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement. Website: https://www.axiom.tech/ YouTube:...
-
10 Things You Should Know Before Your CMMC Assessment
In this pro tip episode of Climbing Mount CMMC, Bobby shares essential tips for preparing for and navigating a cybersecurity assessment, focusing on practical strategies to ensure a smooth process Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ...
-
Understanding the 'Class Deviation' and What it Means for CMMC Compliance
In this episode of Climbing Mount CMMC, hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors. Class Deviation:...
-
What Does a Prime Need to See from My Self-Assessment? w/ Bo Birdwell
In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply…
more -
How the CCP Prepared Me for My Day-To-Day
In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation. Resources mentioned in podcast: Sector 171 game: https://sector171.netlify.app/...
-
What Needs to Change in CMMC Before Moving Forward? (Part 2)
In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process…
more -
What Needs to Change in CMMC Before Moving Forward? (Part 1)
In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their...
-
How Do I Study for the CCP Exam?
In this episode of Climbing Mount CMMC, Kaleigh shares her personal experience and key insights from studying for the CCP certification, including exam categories, study resources, and tips for success. Resources mentioned in podcast: Sector 171 game: SECTOR 171 — The Assessor's Gauntlet CMMC...
-
How Do I Continue Self-Assessments Following the CMMC Phase 2 Suspension?
In this mid-season finale episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the essentials of conducting a proper self-assessment for CMMC compliance with the new CMMC Phase II suspension in mind. They emphasize the importance of honesty, knowledge, and proper documentation to ensure...
-
What Do You Need to Know About the CMMC Phase II Suspension
In this episode, Kaleigh and Bobby address the recent suspension of Phase 2 of the CMMC requirements, its implications for contractors, and potential future developments. They analyze the impact on compliance, industry readiness, and the government's approach to cybersecurity standards. Sources...
-
What Happens After I Pass My Assessment?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the critical aspects of maintaining CMMC compliance after you pass your assessment. They cover maintenance activities, evidence gathering, and scaling strategies for MSPs and organizations to stay compliant and prepared for audits....
-
How To Pass CMMC The First Time
In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the complexities of CMMC readiness and the importance of proper preparation for assessments. They share insights from their experiences as an MSP navigating the evolving cybersecurity landscape. Podcast episode-The Game of Chicken...
-
What Every MSP Needs to Know About CMMC (feat. Matt Travis, CEO of Cyber AB)
In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance.…
more -
How To Master the CCP/CCA Courses
In this episode of Climbing Mount CMMC, Bobby and Kaleigh provide an in-depth look at the CCP and CCA certifications, including preparation strategies, course insights, and industry perspectives. They discuss topics that target those aiming to understand the certification process, improve their...
-
A Deep Dive into Rev 3: Incident Response (feat. Adam Evans)
In this Spelunking episode of Climbing Mount CMMC, Kaleigh and Adams dive into the key differences between NIST 800-171 Rev2 and Rev3, focusing on incident response requirements for CMMC compliance. They share insights on preparing for Rev3, emphasizing 03.06's incident handling, reporting, and...
-
What Qualifies As a "Significant Change" in CMMC?
In this episode of Climbing Mount CMMC, Bobby and Kaleigh explore the recent updates and implications of "significant changes" in the CMMC assessment process, focusing on how organizations can navigate reassessments, change management, and the role of C3PAOs. Link to 32 CFR Final Rule: Federal...
-
What is CMMC Inheritance and How Do I Apply It? (feat. Adam Evans)
In this episode of Climbing Mount CMMC, Kaleigh speaks with Axiom's compliance officer, Adam Evans, to explore the complexities of inheritance in the context of CMMC compliance, cloud service providers, and external service providers. They discuss how inheritance works, common misconceptions, and...
-
What is "The Game of Chicken" in CMMC? (feat. Lawrence Cruciana)
In this episode of Climbing Mount CMMC, Kaleigh and Bobby dive into a deep discussion on the complexities and challenges of achieving CMMC Level 2 certification for MSPs and OSCs with Lawrence Cruciana. They share insights on shared responsibility, operational maturity, and "the game of chicken"...
-
Cyb-Her: Transitioning Your MSP to CMMC Compliance
In this episode of Cyb-Her, Kaleigh shares with Axiom employee, Maleah Adams, her journey from call coordinator to COO, speaking on her experiences in the MSP and cybersecurity space, including her work and transition to the CMMC ecosystem and her perspective as a woman in a male-dominated...
-
Working with a C3PAO (feat. Fernando Machado)
In this episode of Climbing Mount CMMC, Fernando Machado (CCA) from CyberSec Investments shares his extensive experience with Kaleigh and Bobby about the CMMC assessment process, the journey to becoming a C3PAO, and practical insights for contractors navigating the certification landscape. They...
-
What Questions Should Your MSP Be Asking You?
In this episode, Kaleigh and, new to Axiom, Ashton Guerra discuss the critical questions organizations seeking CMMC Level 2 certification (OSCs) should ask their MSPs. They share insights on scope, security measures, and the importance of transparency in the certification journey. Website:...
-
A Deep Dive into Rev 3: Awareness & Training
In this new series we like to call "Spelunking", Bobby and Kaleigh explore the updates in NIST 800-171 Revision 3, focusing on the differences from Rev 2, including control changes, assessment objectives, and preparation strategies for compliance. In this episode, they focus on control 03.02...
-
The Ultimate Guide to a CMMC Level 2 Self-Assessment
In the season 5 premiere of Climbing Mount CMMC, Kaleigh and Bobby share practical, boots-on-the-ground insights on implementing CMMC self-assessments, especially for MSPs supporting multiple clients. They break down how to approach self-assessments with the discipline of a formal audit, while...
-
How to Build CMMC as an MSP
In the season 4 finale of Climbing Mount CMMC, Kaleigh and Bobby share their extensive experience navigating the complexities of achieving CMMC Level 2 certification as an MSP. They discuss the importance of commitment, education, strategic planning, and the realities of scaling support for...
-
The Concept of "Grace" in Building CMMC
In this episode of Climbing Mount CMMC, Kaleigh and Bobby discuss the concept of grace within the CMMC framework, particularly focusing on the NIST 800-171 controls, the role of C3PAOs, and the importance of mock assessments. They emphasize the need for proper training and certification, the...
-
What Does NIST 800-171 Rev 3 Mean for MSPs?
In this episode of Climbing Mount CMMC, Bobby and Adam discuss the implications of Rev3 for MSPs in the context of CMMC. They explore the challenges MSPs face in achieving compliance, the role of external service providers, and the importance of documentation and shared responsibilities. They...
-
The Importance of POA&M Remediation
In this episode of Climbing Mount CMMC, Bobby and Adam discuss the intricacies of Plan of Action and Milestones (POAM) in the context of cybersecurity assessments. They explore the importance of having a clear understanding of what constitutes a POAM, the distinction between operational plans and...
-
Exploring the 5 Stages of CMMC Grief
In this episode of Climbing Mounts CMMC, hosts Kaleigh Floyd and Bobby Guerra discuss the five stages of grief related to the CMMC compliance journey. They share personal experiences and insights on denial, anger, bargaining, depression, and acceptance, emphasizing the importance of understanding...
-
What Classifies an Organization as a Cloud Service Provider?
In this episode, Kaleigh Floyd, Bobby Guerra, and Adam Evans discuss the complexities surrounding Cloud Service Providers (CSPs) and Managed Service Providers (MSPs) in the context of CMMC compliance. They clarify the definitions, roles, and responsibilities of MSPs and CSPs, particularly in...
-
How to Use ODVs Internally
In this episode, the hosts discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in compliance. They emphasize the need for System...
-
Breaking Down NIST 800-171 Rev 3 Implementation
In this episode, Kaleigh and Bobby are joined by Axiom's own, Adam Evans, to discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in...
-
The Right Way to Safeguard Physical CUI
In this episode, Kaleigh and Bobby discuss the complexities of managing Controlled Unclassified Information (CUI) within the framework of CMMC compliance. They explore the challenges of physical boundaries, the role of personnel in safeguarding CUI, and the implications of printing and disposing…
more -
Is Your Service Provider Prepared for CMMC?
In this episode of "Climbing Mount CMMC," hosts Kaleigh Floyd and Bobby Guerra delve into the intricacies of preparing for a CMMC Level 2 assessment, particularly focusing on the role of external service providers (ESPs) and Managed Service Providers (MSPs). They emphasize the importance of...
-
What Does Proper CMMC Self-Attestation Look Like?
In this episode of Climbing Mount CMMC, hosts Bobby and Kaleigh discuss the critical topic of self-attestation for CMMC level two requirements. They explore the evolution of self-attestation, the risks associated with misrepresentation, and the importance of accountability in the self-assessment...
-
How to Prepare for CMMC in 2026
In this episode, Kaleigh and Bobby discuss the significant changes and challenges that companies will face in 2026 regarding CMMC compliance. They delve into the implications of new CMMC Level 2 requirements, the importance of self-assessments versus third-party assessments, and the potential...
-
Do I Need to be CMMC Level 2 Certified as an MSP?
In this episode, Kaleigh Floyd and Bobby Guerra discuss the intricacies of change management within Managed Service Providers (MSPs) and its critical role in ensuring compliance with CMMC standards. They emphasize the importance of leadership buy-in, effective training for both client and…
more -
Achieving Cross-Team Alignment for CMMC Readiness
In this conversation, Dy Edington discusses the essence of CMMC, emphasizing that it is not merely about following specific procedures but about achieving results with consistency and transparency. She highlights the significance of managing change effectively to prevent unexpected disruptions,...
-
Inside the CCP Course as a CMMC Beginner
In this episode, Bobby interviews Axiom's Marketing Coordinator, Maleah Adams, about her experience taking the CCP (CMMC Certified Professional) course. In a brief conversation, they touch on what CMMC looks like from a beginner's perspective and how the CCP course helped shaped that knowledge.…
more -
Where to Begin on Your CMMC Compliance Journey
In this episode of Climbing Mount CMMC, Kaleigh Floyd and Kelly Hood discuss the essential steps for small businesses to navigate the complexities of CMMC compliance. They emphasize the importance of understanding the foundational reasons behind CMMC, the necessity of leadership involvement, and...
-
What to Expect from a CMMC Assessment
This webinar discussion provides an in-depth exploration of the CMMC Level 2 assessment process, including the phases of assessment, methodologies, and the importance of media sanitization and risk assessments. The speakers share their experiences and insights, emphasizing the need for thorough...
-
The Best Way to Be CMMC-Rollout Ready
In this episode, Kaleigh Floyd, Bobby Guerra, and Vincent Scott discuss the upcoming rollout of the Cybersecurity Maturity Model Certification (CMMC) and the challenges facing the defense industrial base. They explore the readiness of organizations seeking certification, the role of implementers,...
-
An Assessor's Guide to CMMC Compliance
In this episode, Kaleigh interviews Logan Therrien from Kieri to discuss the role of C3PAOs in the CMMC ecosystem. They explore the importance of proper preparation for CMMC Level Two certification, common pitfalls organizations face during self-assessments, and the critical nature of...
-
What Does NIST 800-171 Look Like in Action?
In this episode, Kaleigh Floyd and Bobby Guerra discuss the complexities of CMMC compliance, focusing on NIST 800-171 controls, self-assessments, risk reviews, change management, and the importance of tools in the compliance process. They emphasize the challenges faced by Managed Service…
more -
How to Avoid a "Not Met" During a CMMC Assessment
In this episode, Kaleigh and Bobby discuss the intricacies of the CMMC Level 2 assessment process, focusing on what to do when faced with a 'not met' status. They explore preparation strategies, the role of assessors, the implications of minor and major changes during assessments, and the...
About this show
Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement.
We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!
Hosted by
Bobby Guerra
Categories