x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Climbing Mount CMMC

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement.We are also excited to announce that we will have guests on our podcast who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more.

technology tech news

All Episodes

32:13

What Does Proper CMMC Self-Attestation Look Like?

Climbing Mount CMMC ·

2026/01/15

In this episode of Climbing Mount CMMC, hosts Bobby and Kaleigh discuss the critical topic of self-attestation for CMMC level two requirements. They explore the evolution of self-attestation, the risks associated with misrepresentation, and the importance of accountability in the self-assessment process. The conversation emphasizes the need for organizations to prepare adequately for self-attestation, including having a solid system security plan and the necessary evidence to support their cl...

en-us

37:55

How to Prepare for CMMC in 2026

Climbing Mount CMMC ·

2026/01/08

In this episode, Kaleigh and Bobby discuss the significant changes and challenges that companies will face in 2026 regarding CMMC compliance. They delve into the implications of new CMMC Level 2 requirements, the importance of self-assessments versus third-party assessments, and the potential consequences of non-compliance. The conversation also touches on the risks of false claims and whistleblowing, the expected timeframes for achieving compliance, and the impact of resource contention on c...

en-us

34:19

Do I Need to be CMMC Level 2 Certified as an MSP?

Climbing Mount CMMC ·

2026/01/01

In this episode, Kaleigh Floyd and Bobby Guerra discuss the intricacies of change management within Managed Service Providers (MSPs) and its critical role in ensuring compliance with CMMC standards. They emphasize the importance of leadership buy-in, effective training for both client and internal staff, and the necessity of a structured change approval process. The conversation also highlights the challenges MSPs face in navigating client expectations while maintaining compliance, and the ne...

en-us

37:15

Achieving Cross-Team Alignment for CMMC Readiness

Climbing Mount CMMC ·

2025/12/18

In this conversation, Dy Edington discusses the essence of CMMC, emphasizing that it is not merely about following specific procedures but about achieving results with consistency and transparency. She highlights the significance of managing change effectively to prevent unexpected disruptions, linking it to broader organizational processes. Dy's LinkedIn: https://www.linkedin.com/in/dy-edington/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af...

en-us

20:32

Inside the CCP Course as a CMMC Beginner

Climbing Mount CMMC ·

2025/12/04

In this episode, Bobby interviews Axiom's Marketing Coordinator, Maleah Adams, about her experience taking the CCP (CMMC Certified Professional) course. In a brief conversation, they touch on what CMMC looks like from a beginner's perspective and how the CCP course helped shaped that knowledge. She shares what surprised her, what concepts were easier to grasp than expected, and how the training gave her a clearer picture of why compliance matters not just for IT teams but for an entire organi...

en-us

45:37

Where to Begin on Your CMMC Compliance Journey

Climbing Mount CMMC ·

2025/11/20

In this episode of Climbing Mount CMMC, Kaleigh Floyd and Kelly Hood discuss the essential steps for small businesses to navigate the complexities of CMMC compliance. They emphasize the importance of understanding the foundational reasons behind CMMC, the necessity of leadership involvement, and the identification of internal roles and responsibilities. The conversation also covers practical strategies for implementing NIST 800-171 controls, the significance of scoping, and tips for writing a...

en-us

45:37

What to Expect from a CMMC Assessment

Climbing Mount CMMC ·

2025/11/13

This webinar discussion provides an in-depth exploration of the CMMC Level 2 assessment process, including the phases of assessment, methodologies, and the importance of media sanitization and risk assessments. The speakers share their experiences and insights, emphasizing the need for thorough preparation and understanding of compliance requirements to ensure successful outcomes in assessments. Bobby and Kaleigh walk listeners through the nuances of a CMMC mock assessment and give a glimpse ...

en-us

57:07

The Best Way to Be CMMC-Rollout Ready

Climbing Mount CMMC ·

2025/11/06

In this episode, Kaleigh Floyd, Bobby Guerra, and Vincent Scott discuss the upcoming rollout of the Cybersecurity Maturity Model Certification (CMMC) and the challenges facing the defense industrial base. They explore the readiness of organizations seeking certification, the role of implementers, and the potential impact on major defense systems. The conversation emphasizes the importance of preparation and accountability in achieving cybersecurity goals while addressing the complexities of t...

en-us

50:08

An Assessor's Guide to CMMC Compliance

Climbing Mount CMMC ·

2025/10/30

In this episode, Kaleigh interviews Logan Therrien from Kieri to discuss the role of C3PAOs in the CMMC ecosystem. They explore the importance of proper preparation for CMMC Level Two certification, common pitfalls organizations face during self-assessments, and the critical nature of documentation. The conversation also delves into the assessment process, the significance of system security plans, and the ongoing responsibilities after certification. https://cyberab.org/ https://cyberab.or...

en-us

44:26

What Does NIST 800-171 Look Like in Action?

Climbing Mount CMMC ·

2025/10/23

In this episode, Kaleigh Floyd and Bobby Guerra discuss the complexities of CMMC compliance, focusing on NIST 800-171 controls, self-assessments, risk reviews, change management, and the importance of tools in the compliance process. They emphasize the challenges faced by Managed Service Providers (MSPs) in navigating these requirements and the need for proactive communication with clients to manage expectations and ensure successful compliance. Isabel Rivera's Linkedln: https://www.linkedi...

en-us

52:01

How to Avoid a "Not Met" During a CMMC Assessment

Climbing Mount CMMC ·

2025/10/16

In this episode, Kaleigh and Bobby discuss the intricacies of the CMMC Level 2 assessment process, focusing on what to do when faced with a 'not met' status. They explore preparation strategies, the role of assessors, the implications of minor and major changes during assessments, and the importance of communication with clients. The conversation also covers the 10-day reevaluation period, the 180-day remediation process, and the appeal options available to organizations. Throughout the discu...

en-us

43:31

Should I Go Through CMMC With My MSP?

Climbing Mount CMMC ·

2025/10/09

In this episode, Kaleigh Floyd and Bobby Guerra discuss the complexities of navigating CMMC Level 2 certification and assessments, particularly focusing on the role of Managed Service Providers (MSPs). They explore the challenges faced by small MSPs, the importance of documentation, and the intricacies of the assessment process. The conversation emphasizes the need for MSPs to be well-prepared and knowledgeable to effectively support their clients in achieving compliance. Website: https://www...

en-us

35:16

Cracking the Code of Vulnerability Management

Climbing Mount CMMC ·

2025/10/02

In this episode of Climbing Mount CMMC, Kaleigh and Bobby delve into the intricacies of vulnerability scanning, particularly in the context of CMMC Level 2 compliance for Managed Service Providers (MSPs). They discuss the challenges of vulnerability management, the importance of selecting appropriate tools, and the complexities involved in implementing effective scanning processes. The conversation emphasizes the need for clear documentation, continuous monitoring, and proactive maintenance s...

en-us

37:24

Understanding the Language of CMMC Assessors

Climbing Mount CMMC ·

2025/09/25

In this episode, Bobby and Kaleigh discuss the complexities of navigating the Defense Industrial Base (DIB) space, particularly focusing on the Cybersecurity Maturity Model Certification (CMMC) assessments. They explore the challenges faced by organizations in understanding and complying with CMMC requirements, the importance of effective communication with C3PAOs, and the necessity of thorough preparation for assessments. The conversation emphasizes the need for organizations to align their ...

en-us

39:37

A Deep Dive Into 48 CFR and How Organizations Can...

Climbing Mount CMMC ·

2025/09/18

48 CFR IS HERE! And we have a lot to talk about. In this episode, Bobby and Kaleigh discuss the recent release of 48 CFR and its implications for contractors and subcontractors working with the Department of Defense (War). They explore the significance of the new regulations, the phased rollout strategy, and the importance of CMMC unique identifiers (UIDs). The conversation highlights the risks associated with non-compliance and the need for contractors to be proactive in preparing for ...

en-us

34:04

What Every Organization Needs to Know About Data Flow

Climbing Mount CMMC ·

2025/09/11

In this episode, Kaleigh and Bobby discuss the critical role of data flow diagrams in system security plans, particularly in the context of CMMC compliance. They explore the importance of understanding data flow, identifying sources and users, and ensuring proper sanitization of controlled unclassified information (CUI). The conversation emphasizes the need for organizations to be aware of how data flows through their systems and the implications for security and compliance. Axiom's L...

en-us

36:56

How the CRM Powers CMMC Compliance

Climbing Mount CMMC ·

2025/09/04

In this episode, Kaleigh and Bobby delve into the intricacies of Customer Responsibility Matrices (CRMs) within the context of CMMC compliance. They discuss the importance of having a well-defined CRM, the relationship between CRMs and service agreements, and how these elements play a crucial role in assessments. The conversation emphasizes the need for clarity in responsibilities, the role of Managed Service Providers (MSPs), and the expectations of auditors. The hosts provide insights on ho...

en-us

46:56

Breaking Down the CMMC System Security Plan

Climbing Mount CMMC ·

2025/08/28

This protips podcast episode is extra special! It includes clips from our webinar delving into the intricacies of system security plans (SSPs), emphasizing their critical role in organizational security and compliance with NIST 800.171 and CMMC standards. The discussion covers the importance of scoping, defining system boundaries, managing data flow, and detailing security controls. It also highlights the necessity of well-defined policies and procedures, as well as the clear outlining of use...

en-us

33:40

CMMC Implementation from a Contractor's Perspective

Climbing Mount CMMC ·

2025/08/21

In this episode, Kaleigh interviews Dy Edington, the Director of Information Security at AV (formally BlueHalo), about her journey through the CMMC Level 2 assessment. Dy shares insights on the importance of leadership buy-in, team collaboration, and the challenges faced during implementation. She emphasizes the significance of documentation, training, and continuous improvement in maintaining compliance. She also offers valuable advice for those starting their CMMC journey, highlighting the ...

en-us

23:44

What Is a POA&M? (And What It Isn't)

Climbing Mount CMMC ·

2025/08/14

In this first episode of Season 4 of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of Plans of Action and Milestones (POA&Ms) in the context of compliance with CMMC and NIST standards. They explore the historical misuse of POA&Ms, the new regulations that have been implemented, and the importance of creating effective POA&Ms. The conversation also touches on the role of operational plans of action (OPAs) and the implications of involving external service providers...

en-us

107 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs