Latest / Secure & Simple — Podcast for Consultants and CISOs on Cybersecurity Governance and Compliance
CMMC Level 2: Documentation, Costs, and Audit Readiness | Interview with Bruno Lecoq
Dejan Kosutic hosts Bruno Lecoq (co-founder, CEO, and CISO at BEMO) to explain CMMC compliance for Department of Defense contractors and suppliers, including those outside the U.S. They cover CMMC basics (levels, CUI vs. FCI, C3PAO assessments, phase 1 boundary review and phase 2 audit), current capacity challenges (about 93 C3PAOs vs. roughly 200,000 contractors), and why many companies fail early due to incomplete documentation. Bruno shares BEMO's experience (29 policies, 46 procedures, 14 configuration documents, 700+ pieces of evidence, and a 300-page SSP) and emphasizes leadership…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.