Imagen de portada del espectáculo CMMC Compliance Guide

CMMC Compliance Guide

Podcast de CMMC Compliance Guide

inglés

Tecnología y ciencia

Oferta limitada

2 meses por 1 €

Después 4,99 € / mesCancela cuando quieras.

  • 20 horas de audiolibros / mes
  • Podcasts solo en Podimo
  • Podcast gratuitos
Empezar

Acerca de CMMC Compliance Guide

Our experiences inspired the creation of The CMMC Compliance Guide Podcast and its accompanying resources. The podcast began as a way to share what we learned through real-world challenges—like helping that aerospace machine shop—and to provide accessible education for businesses navigating DoD cybersecurity requirements.The CMMC Compliance Guide Podcast breaks down complex topics like NIST 800-171 and CMMC into actionable, easy-to-understand steps. Whether you’re a subcontractor struggling to meet compliance deadlines or a business owner looking to secure your supply chain, the guide offers practical advice to help you take control of your cybersecurity journey.

Todos los episodios

59 episodios

Portada del episodio How Small Defense Contractors Can Handle CMMC Compliance

How Small Defense Contractors Can Handle CMMC Compliance

Submit any questions you would like answered on the podcast! [https://www.buzzsprout.com/2428223/fan_mail/new] In this episode of the CMMC Compliance Guide Podcast, we tackle one of the biggest challenges in the Defense Industrial Base: how small contractors without internal IT teams are realistically handling CMMC compliance. Many small manufacturers, machine shops, and defense suppliers feel overwhelmed by CMMC because they do not have dedicated cybersecurity, compliance, or IT security staff. Instead, employees wear multiple hats while trying to keep daily operations moving. We break down what compliance actually looks like for smaller contractors, what can realistically be outsourced, what responsibilities still stay with the company, and why buying tools like Microsoft 365 GCC High does not automatically make you compliant. We also explain why data flow mapping and scope are critical, how shared responsibility matrices work with MSPs and MSSPs, and the biggest mistakes smaller companies make when trying to shortcut compliance. If you are a small or mid-sized defense contractor trying to understand how to approach CMMC without a massive budget or internal compliance department, this episode will help you build a realistic roadmap.

Ayer - 38 min
Portada del episodio Why Contractors Fail CMMC Assessments and How to Prepare

Why Contractors Fail CMMC Assessments and How to Prepare

Submit any questions you would like answered on the podcast! [https://www.buzzsprout.com/2428223/fan_mail/new] In this episode of the CMMC Compliance Guide Podcast, we break down one of the most frustrating realities for defense contractors thinking you are ready for a CMMC assessment, only to find out you are not. Many companies believe they are compliant because they have security tools in place, policies written, and even a high SPRS score. But when assessors actually evaluate the environment, major gaps often appear. We explain why this happens, how C3PAOs actually assess your environment, and what separates companies that pass their CMMC Level 2 assessment from those that fall short. You will learn how assessors use examine, interview, and test methods, why the 320 assessment objectives matter more than the 110 controls, and how small documentation inconsistencies can lead to failed controls. We also cover the importance of mock assessments, why your evidence package is critical, and how scope decisions can dramatically impact your assessment outcome. If you are preparing for a CMMC assessment, or think you are ready, this episode will help you avoid costly surprises and approach your assessment with confidence.

15 de may de 2026 - 38 min
Portada del episodio Top CMMC Compliance Mistakes and How to Avoid Them

Top CMMC Compliance Mistakes and How to Avoid Them

Submit any questions you would like answered on the podcast! [https://www.buzzsprout.com/2428223/fan_mail/new] In this episode of the CMMC Compliance Guide Podcast, we break down the most common mistakes defense contractors make when preparing for CMMC compliance and how those mistakes can cost you time, money, and even future contracts. Even though CMMC 2.0 is now enforceable, many companies are still struggling with readiness. The issue is not effort, it is approach. Many contractors start in the wrong place, leading to overspending, failed assessments, or compliance gaps that could have been avoided. We cover critical topics like scoping mistakes, why treating CMMC as an IT-only project creates problems, and how focusing on tools too early can lead to unnecessary costs. We also explain why documentation and ongoing evidence are essential for passing an assessment and building trust with assessors. You will also learn why submitting an inaccurate SPRS score can create serious legal risk, how long CMMC actually takes to implement, and why waiting too long to start can put your contracts in jeopardy. If you are a small or mid-sized contractor in the defense industrial base, this episode will help you avoid the most common pitfalls and take a smarter approach to compliance.

8 de may de 2026 - 1 h 6 min
Portada del episodio Can You Create CUI? CMMC Scope, ERP Systems, and Contractor Risk Explained

Can You Create CUI? CMMC Scope, ERP Systems, and Contractor Risk Explained

Submit any questions you would like answered on the podcast! [https://www.buzzsprout.com/2428223/fan_mail/new] In this episode of the CMMC Compliance Guide Podcast, we tackle one of the most misunderstood topics in CMMC compliance. Many contractors assume that if information is not marked as controlled unclassified information, then it is not CUI. But that assumption can lead to serious compliance risks. We break down how manufacturers and machine shops can actually create CUI while performing contract work, even if the original data was not clearly marked. We also cover how ERP systems factor into CMMC scope, when systems are considered in or out of scope, and how improper scoping decisions can create major compliance gaps. You will learn what derived CUI is, how it applies to things like CNC G code, and why simply removing identifying details from documents does not make them safe. We also explain who determines what qualifies as CUI, how scope can expand across your network, and what realistic cost and infrastructure decisions look like for small and mid sized contractors. If you are part of the defense supply chain, this episode will help you avoid one of the most common and costly misunderstandings in CMMC.

17 de abr de 2026 - 17 min
Portada del episodio The Hidden Operational Workload Behind CMMC Compliance

The Hidden Operational Workload Behind CMMC Compliance

Submit any questions you would like answered on the podcast! [https://www.buzzsprout.com/2428223/fan_mail/new] In this episode of the CMMC Compliance Guide Podcast, we break down one of the biggest misconceptions in CMMC compliance. Most contractors think CMMC is just a cybersecurity upgrade. Install a few tools, write some policies, and you are ready for an assessment. But that is not how CMMC actually works. The real challenge is the operational workload behind compliance. We walk through what that workload actually looks like, including documentation, system security plans, asset management, workforce training, evidence collection, and continuous monitoring. These are the areas that consume the most time and are often underestimated by small and mid sized defense contractors. We also cover how CMMC impacts your supply chain, including subcontractor flowdown requirements and what you are responsible for as a prime or subcontractor. If you are preparing for CMMC Level 1 or Level 2, this episode will help you understand the true scope of work so you can avoid delays, failed assessments, and costly surprises.

10 de abr de 2026 - 17 min
Soy muy de podcasts. Mientras hago la cama, mientras recojo la casa, mientras trabajo… Y en Podimo encuentro podcast que me encantan. De emprendimiento, de salid, de humor… De lo que quiera! Estoy encantada 👍
Soy muy de podcasts. Mientras hago la cama, mientras recojo la casa, mientras trabajo… Y en Podimo encuentro podcast que me encantan. De emprendimiento, de salid, de humor… De lo que quiera! Estoy encantada 👍
MI TOC es feliz, que maravilla. Ordenador, limpio, sugerencias de categorías nuevas a explorar!!!
Me suscribi con los 14 días de prueba para escuchar el Podcast de Misterios Cotidianos, pero al final me quedo mas tiempo porque hacia tiempo que no me reía tanto. Tiene Podcast muy buenos y la aplicación funciona bien.
App ligera, eficiente, encuentras rápido tus podcast favoritos. Diseño sencillo y bonito. me gustó.
contenidos frescos e inteligentes
La App va francamente bien y el precio me parece muy justo para pagar a gente que nos da horas y horas de contenido. Espero poder seguir usándola asiduamente.

Elige tu suscripción

Más populares

Oferta limitada

Premium

20 horas de audiolibros

  • Podcasts solo en Podimo

  • Disfruta los shows de Podimo sin anuncios

  • Cancela cuando quieras

2 meses por 1 €
Después 4,99 € / mes

Empezar

Premium Plus

100 horas de audiolibros

  • Podcasts solo en Podimo

  • Disfruta los shows de Podimo sin anuncios

  • Cancela cuando quieras

Disfruta 30 días gratis
Después 9,99 € / mes

Prueba gratis

Sólo en Podimo

Audiolibros populares

Empezar

2 meses por 1 €. Después 4,99 € / mes. Cancela cuando quieras.