11 - CMMC Rollout – Q&A

02/13/25 • 28 min

Rolling out a new program always comes with challenges and CMMC has been no exception. Fortunately, we’ve moved into the implementation phase, with assessments now underway. This milestone not only helps organizations see the real value of the program but also gives us the chance to address lingering questions and clarify uncertainties that could only be resolved through full implementation.

With this progress, we’re encountering fresh challenges and questions we hadn’t anticipated — while still fielding many of the same inquiries we’ve heard from the beginning. The good news? Full implementation means we can now provide more concrete, experience-backed answers to both new and long-standing concerns.

Previous Episode

10 - The CMMC Training and Certification Ecosystem

The CMMC training and certification ecosystem is ambitious as it aims to support training material development and certification of both instructors and assessors. It is currently on a path to providing a strong foundation for CMMC as a whole. In this episode our cybersecurity experts dive into the details and nuances of the training and certification requirements in the CMMC ecosystem. Hear them define the terms, discuss the requirements, contrast CMMC training and certification with other compliance frameworks, grapple with challenges and finally address what lies ahead. Joining host Cole French is Joe Lissenden, CEO of Precision Execution, provider of CMMC training and certification services. Joe has more than 25 years of consulting, training, and auditing experience over a wide range of systems and standards.

Reference material:

Acronyms:

APP: Approved Publishing Partner (formerly Licensed Publishing Partner)
ATP: Approved Training Provider (formerly Licensed Training Provider)
CCI: CMMC Certified Instructor (formerly Provisional Instructor)
CAICO: Cybersecurity Assessor & Instructor Certification Organization
CAP: CMMC Assessment Process
CATM: CAICO Approved Training Material
CCP: CMMC Certified Professional
CCA: CMMC Certified Assessor
OSC: Organization Seeking Certification
RPO: Registered Provider Organization

Links:

Cybersecurity Assessor & Instructor Certification Organization (CAICO)
CMMC Assessment Process (CAP)

Next Episode

12 - Mobile Platform Security

Mobile devices have become an extension of ourselves, seamlessly integrated into our daily lives like never before. But as we prioritize convenience—wanting our devices to “just work”—we often overlook security. This episode dives into the growing cybersecurity challenges that come with mobile adoption and what individuals and organizations can do to stay protected. We’ll go over:

Why reliance on convenience creates security vulnerabilities (hint: it isn’t primarily vulnerabilities in the technical sense, more in the human sense)
Key technical and compliance components driving mobile device security
Technologies organizations can leverage to balance security and usability

Links: