Latest / Cybersecurity Maturity Model Certification (CMMC) Unlocked
Making CMMC Risk Management Practical: RA Domain, Policies, and Change Management
A practical how-to episode on the CMMC 2.0 Level 2 Risk Assessment (RA) domain for defense contractors. Paul Netopski and Roz the Rulemaker walk through the three RA practices from NIST SP 800-171 (3.11.1, 3.11.2, 3.11.3), show how to build and use a Risk Management Policy aligned to NIST and ISO 31000, and connect risk assessment to real-world threats, third-party risks, business risk appetite, and change management. The hosts reference prior episodes on Configuration/Change Management and other domains to help contractors integrate risk into everyday decisions about people, places, and…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.