Shows / Cybersecurity Maturity Model Certification (CMMC) Unlocked
Cybersecurity Maturity Model Certification (CMMC) Unlocked
This podcast contains dialog, voices and materials that are generated by Artificial Intelligence tools, but reviewed and published by the creator. Welcome to CMMC Unlocked, the definitive podcast for defense contractors, cybersecurity professionals, and compliance leaders navigating the complex world of the Cybersecurity Maturity Model Certification (CMMC). Hosted by a seasoned Certified CMMC Assessor and Instructor with years of hands-on experience in assessments, gap analyses, and…
Episodes
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
When Restrictive Policies Backfire: Avoiding CMMC Template Traps
Drawing on research from the Harvard Business Review article by Aaron Kay, Russell Spitler, and Peter Jin, we examine how overly restrictive cybersecurity…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Paused, Then Silent: What the CMMC Limbo Is Doing to the Ecosystem Built to Support It
After the Department of War paused CMMC Phase 2 and froze later phases, an unpublished reform report and lack of a new timeline left contractors and the…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
The Security Controls That Actually Stop Attacks
The hosts break down which security controls deliver the biggest real-world risk reduction in the Defense Industrial Base, highlighting multifactor…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Cutting CMMC Paperwork, Not Security
The hosts dissect how CMMC reform could cut the compliance busywork that burdens small defense contractors, from visitor binders to endless policy manuals, and…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Breaking the GovCloud Trap for Small Defense Contractors
This episode breaks down how rigid FedRAMP and DFARS requirements can push small defense suppliers into costly GovCloud enclaves and MSP compliance surcharges…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Self-Assessments: Paperwork Theater or Real Security?
The episode examines how current CMMC self-assessments can become paperwork theater instead of real security, using examples like static SPRS scores and…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
How CMMC Paperwork Becomes a Costly Compliance Trap
This episode breaks down how CMMC and NIST 800-171 compliance can spiral into massive paperwork costs, false security, and False Claims Act risk when templates…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Question 07 and the Case for Real CMMC Reform
This episode breaks down how Question 07 in the CMMC Reform Task Force RFI opens the door to structural change, from ending pre-award compliance barriers to…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Sixty Days to Fix CMMC: Class Deviations and Real Reform
The hosts break down what can actually be changed in a sixty-day CMMC reform sprint, from emergency Class Deviations to stopping pre-award flowdowns that…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
From Compliance Theater to Real Cybersecurity
This episode breaks down the July 13 freeze, the rise of compliance theater, and how over-marking CUI pushed small defense contractors into costly paperwork…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Freeze: Reform, RFI Fallout, and Small Contractor Relief
The hosts break down the July 13 CMMC Phase II freeze, the Department of War’s 60-day reform task force, and the immediate fallout for defense contractors…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Compliance Drift and the NIST 800-137 Shield
This episode explores the dangers of compliance drift and why a green audit result can quickly become misleading without continuous monitoring. It also breaks…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Phase II Paused: What Small Defense Vendors Need to Know
The hosts break down the Department of War’s sudden suspension of CMMC Phase II, what stays in place for contractors, and why the move is meant to reduce…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Breaking the CMMC Assessment Bottleneck
The hosts unpack the growing mismatch between thousands of certified professionals and a tiny number of active assessments, and why new assessors are getting…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Stop Writing SSPs Like Paperweights
Learn why a System Security Plan should act as a clear, living map of controls, boundaries, and evidence—not a bloated dump of procedures. The episode breaks…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Why CMMC Certification Could Take 97.5 Years
Eric Marquette and Paul Netopski unpack the staggering backlog behind CMMC Level 2 certification, from the 97.5-year pace of assessments to the looming 2028…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CUI Compliance: From Executive Order to DFARS
This episode breaks down how Controlled Unclassified Information evolved from a patchwork of agency labels into a single federal framework under Executive…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Who Must Mark CUI? DoD Contracting Risks Explained
Eric, Paul, and Roz unpack why the DoD—not the contractor—bears the burden of identifying and marking CUI, and why accepting unlabelled data can create serious…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CUI Clarity: What Contractors Need to Know
Eric Marquette and Paul Netopski, a CMMC expert, break down how to identify CUI, where to look in contract artifacts like CDRLs and DIDs, and why export…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Is a Program, Not a Project
This episode breaks down why CMMC success depends on lifecycle planning, from scoping contracts and data flows to building evidence, remediation, and formal…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
SSP Breadcrumbs: Proving Controls, Scope, and Inheritance
This episode breaks down what assessors actually need from your System Security Plan control implementation summary: precise control status, exact evidence…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC 3.14: System Integrity, Malware Defense, and Monitoring
Paul and Roz break down the System and Information Integrity controls in CMMC 3.14.1 through 3.14.7, focusing on flaw remediation, malicious code protection…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC SC Controls: Protecting Boundaries and Data in Transit
This episode breaks down CMMC System and Communications Protection controls, from defining boundaries and separating public-facing systems to enforcing…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CA Controls Unlocked: Security Plans, POA&Ms, and Continuous Monitoring
In this episode, we break down the three core compliance documents that make the CA domain real in practice: the System Security Plan, the Plan of Action and…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Cyber Trust Mark: What IoT Labels Teach Us About Trust, Risk, and CMMC
This episode explores the FCC’s U.S. Cyber Trust Mark for consumer IoT devices and asks a bigger question: what can defense contractors learn from a…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC "Significant Changes": Do They Really Invalidate Your Certification?
In this episode of CMMC Unlocked, host Paul Netopski breaks down one of the most misunderstood phrases in the new CMMC rule set and CyberAB guidance…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Making CMMC Risk Management Practical: RA Domain, Policies, and Change Management
A practical how-to episode on the CMMC 2.0 Level 2 Risk Assessment (RA) domain for defense contractors. Paul Netopski and Roz the Rulemaker walk through the…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Securing Access Unlocking Personnel Screening
Explore the critical personnel security requirements within NIST SP800-171 and CMMC 2.0 Level 2 standards. Learn practical processes for screening, onboarding…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Lockdown Success Physical Security in CMMC
Dive into essential physical security controls within CMMC 2.0, from access management to safeguarding support infrastructure. Learn real-world lessons from…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Mastering Media Security for CMMC Success
Explore key strategies for protecting Controlled Unclassified Information across physical and digital media. Learn practical approaches to handling, marking…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Understanding Covered Defense Information in Defense Contracting
This episode guides listeners through key aspects of Covered Defense Information (CDI), from core definitions and marking requirements to contract data rights…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Mastering the Maintenance "MA" Family for CMMC Level 2
Join Eric, Paul, and Roz as they break down the CMMC Level 2 Maintenance (MA) family: what each control requires, implementation strategies, and special…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
False Claims Act and the Cybersecurity Compliance Trap
Dive deep into the False Claims Act, the Civil Cyber-Fraud Initiative, and how lapses in cybersecurity compliance with DFARS and NIST SP 800-171 can lead to…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
NIST Incident Response
Incident Response for NIST CSF 2.0, NIST SP800-171r2 and CMMC 2.13
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Training and Awareness Essentials for NIST SP800-171 Controls
Explore how awareness and training align with NIST SP800-171 security controls. We break down each control, connect them to specific CDSE course catalog…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Mastering NIST SP 800-171 Audit and Accountability (AU) Controls
Explore the Audit and Accountability (AU) domain of NIST SP 800-171 with actionable strategies for compliance in defense contracting. Dive into the essentials…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
When Is MFA Really Required? Navigating CMMC, NIST, and Kerberos in Practice
Eric, Paul, and Roz break down one of the most debated aspects of CMMC 2.0 compliance: when exactly multifactor authentication must be enforced for users and…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Configuration Management Essentials for NIST SP800-171
Dive deep into the fundamentals of configuration management for NIST SP800-171 compliance. This episode covers why a Configuration Management Plan matters…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
The Power of Acceptable Use Policies for CMMC Level 2
Explore how an Acceptable Use Policy (AUP) underpins compliance for CMMC Level 2. We'll break down key NIST SP800-171 requirements that users need to…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Eliminating the Line: Rethinking Basic and Derived Security Requirements in NIST SP 800-171 Revision 3
This episode unpacks the elimination of the basic and derived security requirement distinction in NIST SP 800-171 revision 3, the assessment methodologies…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
System Security Plan Templates Demystified
Explore the essentials of the NIST SP800-171 System Security Plan (SSP), the key requirements from NIST SP800-53r5, and recommended sections to create a plan…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Building a Bulletproof Incident Response Plan
This episode dives into the essentials of incident response plans required by NIST standards, explores best practices and testing, and highlights how to…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Real-World Cyber Incident Response Beyond the Tabletop
Explore how Bridgewater State University's Cyber Range revolutionizes cybersecurity training, making incident response testing more immersive than traditional…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Demystifying DoD Cloud Security: SRGs, STIGs, and CMMC Alignment
This episode unpacks how the DoD's cloud security requirements come together across SRGs, STIGs, and CMMC, clarifying regulatory foundations, Impact Levels…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Deep Dive: NIST Risk Assessment & Prioritization Process
Join Eric, Ruby, Paul, and Roz as they break down the NIST IR 8286 series and SP 800-30 guidance for cybersecurity risk assessment. This episode explores how…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Supporting Documentation and Procedures for Access Control Compliance
This episode explores the essential supporting documents and general procedures needed for the Access Control Family under CMMC. Learn which records are vital…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Aligning the AI Risk Management Framework with CUI Risk Assessment Requirements
This episode breaks down how the NIST AI Risk Management Framework (AI RMF 1.0) supports a robust, continual approach to AI risk assessment, with a special…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Incident Response Interlaced: DFARS 252.204-7012 and NIST SP800-171
Explore how incident response requirements from DFARS 252.204-7012 and NIST SP800-171 complement and amplify each other. Our experts dissect what each demands…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Rollout Countdown and the Road to 2025
What does the final year before full CMMC implementation look like? In this episode, we explore the definitive schedule, key requirements, and what defense…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
How Long and How Much? Realistic Timelines and Costs for CMMC & NIST SP 800-171 Compliance
This episode unpacks the complete journey to CMMC/NIST SP 800-171 compliance, breaking down the phases, expected timelines, and real-world costs using…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
What Happens Next for 48 CFR 204.75: Timeline to CMMC Enforcement
The team unpacks the next phases now that 48 CFR Subpart 204.75 has cleared OIRA review, mapping out what’s ahead for activation and enforcement—including the…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Self-Assess or Certify: The New DoD CUI Assessment Split
This episode breaks down the Department of Defense’s recent decision on when contractors can self-assess for CMMC Level 2, and when a third-party assessment is…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Unpacking MSSP Challenges in CMMC Environments
Eric, Ruby, Paul, and Roz explore the unique CMMC compliance complexities that arise when a Managed Security Service Provider (MSSP) delivers a Security…
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
CMMC Scoping guides
Review of CMMC Scoping guides. In this episode we dive into the CMMC L2 Scoping guide and provide a summary of the categories and details within.
- Cybersecurity Maturity Model Certification (CMMC) Unlocked
Risk Assessments and Meeting NIST SP 800-171 Control 3.11.1
Dive into how risk assessments underpin NIST SP 800-171 compliance, with a focus on control 3.11.1. Our expert hosts break down what assessors look for, walk…
Cybersecurity Maturity Model Certification (CMMC) UnlockedUnlocking Federal Rulemaking and CMMC Implementation
Dive into the federal rulemaking process and how it shapes cybersecurity requirements for defense contractors. This episode explores how the 32 CFR 170 rule…
Cybersecurity Maturity Model Certification (CMMC) UnlockedContinuous Compliance in Action
Explore how continuous CMMC monitoring transforms cybersecurity for defense contractors and compliance teams. Discover essential strategies, real-time tools…
Cybersecurity Maturity Model Certification (CMMC) UnlockedCMMC 2.0 Rollout and Realities
Explore the phased rollout of CMMC 2.0, how the new rules impact defense contractors, and what it takes to maintain compliance. Our hosts break down the…
Cybersecurity Maturity Model Certification (CMMC) UnlockedSafeguarding CUI and Data Rights
This episode uncovers how organizations in the defense sector can identify, handle, and protect Controlled Unclassified Information (CUI), Covered Defense…