CMMC News by Jun Cyber

Podcast details

Technical and general information from the podcast's RSS feed.

Site

RSS

Apple

Recent rankings

Latest chart positions across Apple Podcasts and Spotify rankings.

Shared links between episodes and podcasts

Links found in episode descriptions and other podcasts that share them.

See all

https://www.buzzsprout.com/2371779/support
50 shares
https://www.buzzsprout.com/2371779/fan_mail/new
50 shares
https://www.buzzsprout.com/twilio/text_messages/2371779/open_sms
25 shares

https://www.instagram.com/juncyber
1 share

RSS feed quality and score

Technical evaluation of the podcast's RSS feed quality and structure.

See all

Publication history

Monthly episode publishing history over the past years.

Latest published episodes

Recent episodes with titles, durations, and descriptions.

See all

Ready or Not: CMMC 2.0 Final Rule is Here

Wednesday, September 10, 2025 • Duration 19:50

Send us Fan Mail

In this episode, we break down the Department of Defense’s final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to integrate the Cybersecurity Maturity Model Certification (CMMC). We’ll cover what these new contractual obligations mean for contractors, including self-assessment reporting in SPRS, continuous compliance affirmations, and the phased rollout of CMMC requirements. Join us as we unpack key definitions, address industry concerns, and highlight how these changes impact the defense industrial base.

Support the show

Read moreCollapse

CMMC 2.0 Unpacked: What Defense Contractors Must Know

Saturday, July 12, 2025 • Duration 11:39

Send us Fan Mail

🚨 CMMC 2.0 Is Rolling Out: Is Your Business Ready?

The latest version of the Cybersecurity Maturity Model Certification (CMMC) is reshaping how contractors handle security across the Defense Industrial Base. From new assessment levels to increased scrutiny, the changes are significant—and noncompliance could cost you contracts.

Understand what’s changed
🧩 Learn how implementation will impact your operations
🛡️ Get expert insights to stay compliant and competitive
👉 Tune in now to hear the full breakdown in our latest episode.

#CMMC #CyberSecurity #DFARS #DefenseContracting #Compliance #CMMC2 #CMMCImplementation #JunCyber

Support the show

Read moreCollapse

Secure Your Defense Contracts: Navigating CMMC Levels with NIST Publications

Monday, March 17, 2025 • Duration 13:33

Send us Fan Mail

🚀 Exciting Insights from Our Latest Deep Dive on the CMMC News Podcast! 🎧

In our newest episode, we unpack the intricacies of the Cybersecurity Maturity Model Certification (CMMC) and its alignment with NIST standards, essential for those engaged with Department of Defense contracts. Dive into the details with us as we explore practical implications and strategic alignments.

🔹 Key Takeaways:

CMMC Levels Explained: Understand how the different levels of CMMC build upon each other, starting from the foundational Level 1 to the more advanced Level 3 that incorporates elements like NIST SP 800-171 and 800-172.
Scoring System Nuances: Learn about the in-depth scoring methodology for NIST SP 800-171 Rev 2, highlighting the critical components and areas of partial credit, essential for MFA and FIPS compliance.
Preparing for the Transition: The shift to NIST SP 800-171 Rev 3 is on the horizon. Organizations need to stay compliant with Rev 2 while preparing for Rev 3, focusing on gap analysis and updating system security plans.

Tune into the episode for a detailed exploration and ensure your security protocols are robust and compliant. Stay ahead in the defense industrial base with actionable insights and strategies! 🎙️🔍

For the official CMMC documentation, click this link: https://dodcio.defense.gov/cmmc/Resources-Documentation/

#CMMC #Cybersecurity #NISTStandards #DODContracts #DevSecLeadPodcast

Support the show

Read moreCollapse

Breaking Down CMMC ESPs and Inherited Controls: What DOD Contractors Need to Know

Monday, March 17, 2025 • Duration 16:31

Send us Fan Mail

🚀 New Episode Alert: Navigating CMMC Compliance with ESPs and Inherited Controls 🚀

In our latest episode of CMMC News, we dive deep into the complexities of CMMC compliance and how to effectively manage the relationship with your External Service Providers (ESPs). This episode is packed with insights that are crucial for any DOD contractor aiming to unravel the intricacies of inheriting security controls while maintaining full compliance responsibility. Here's a sneak peek at three key takeaways:

🔹 Own Your Responsibility: Just because your ESP is CMMC certified doesn’t mean you’re off the hook. You're accountable for validating, documenting, and proving those inherited controls work in your environment.

🔹 Clear Role Divisions: Understand the spectrum of responsibilities—fully inherited, partially inherited, and those non-delegable controls that are 100% on you, like user authorization and data classification.

🔹 Audit Readiness is Key: Meticulous documentation is your best friend. Make sure your controls are thoroughly documented in your SSP, supported by concrete evidence to ace that CMMC assessment.

For the official CMMC documentation, click this link: https://dodcio.defense.gov/cmmc/Resources-Documentation/

#CMMC #Cybersecurity #DODCompliance #ESPs #SecurityControls #AuditReady

Support the show

Read moreCollapse

Choosing a CMMC Consultant: Certification, Experience, and Fit

Friday, January 31, 2025 • Duration 10:49

Send us Fan Mail

In this episode of CMMC News, host Wilson Bautista Jr. breaks down the crucial factors to consider when choosing a CMMC consultant. He outlines five essential criteria: ensuring proper CMMC certification, verifying real audit experience, evaluating communication skills, determining consultation needs (assessment vs. implementation), and assessing cultural fit with your organization. Whether you're starting your CMMC journey or preparing for an audit, this episode provides valuable insights to help you avoid costly mistakes and find the right consultant to guide your compliance efforts. Learn how to identify red flags, verify credentials, and make an informed decision that will support your organization's path to CMMC compliance.

Support the show

Read moreCollapse

Navigating CMMC Compliance: Selecting the Best C3PAO

Tuesday, January 21, 2025 • Duration 06:19

Send us Fan Mail

Welcome to another episode of CMMC News! Today, we're simplifying the complexities of cybersecurity compliance, specifically diving into how to choose the right Certified Third Party Assessment Organization (C3PAO) to guide your organization to CMMC compliance. I'm your host, Wilson Bautista Jr., and in this episode, we'll break down the key considerations to make the right choice. From examining a C3PAO's experience with federal compliance frameworks like NIST 80171 and FedRAMP to assessing their industry expertise, reputation, and communication skills, we'll cover it all. Plus, we'll discuss the importance of verifying accreditation and balancing cost versus value. Tune in as we navigate the steps to ensure you're not just compliant but well-prepared for long-term security. Let's get started!

Support the show

Read moreCollapse

Audit of the DoD’s Process for Authorizing Third Party Organizations to Perform Cybersecurity Maturity Model Certification 2.0 Assessments (Report No. DODIG-2025-056)

Tuesday, January 14, 2025 • Duration 21:49

Send us Fan Mail

A Department of Defense Inspector General audit (DODIG-2025-056) revealed that the Department of Defense (DoD) inadequately implemented its process for authorizing third-party organizations to conduct Cybersecurity Maturity Model Certification (CMMC) 2.0 assessments. The audit found that the DoD failed to ensure all required steps were completed before authorizing these organizations, increasing the risk of awarding contracts to companies lacking sufficient cybersecurity controls. Two hotline allegations were substantiated. Ten recommendations were issued to improve the authorization process, focusing on implementing quality assurance measures to guarantee compliance. The DoD OIG will continue monitoring the DoD's implementation of these recommendations.

Ref: https://www.dodig.mil/In-the-Spotlight/Article/4028197/press-release-audit-of-the-dods-process-for-authorizing-third-party-organizatio/

Support the show

Read moreCollapse

FEDRAMP Moderate Equivalency for Cloud Service Providers

Tuesday, January 7, 2025 • Duration 16:45

Send us Fan Mail

This memorandum from the Department of Defense outlines requirements for cloud service providers (CSPs) seeking FEDRAMP Moderate equivalency. It details the necessary assessments and documentation, including security plans and testing procedures, that CSPs must meet. The memorandum emphasizes the importance of compliance with specified Defense Federal Acquisition Regulations Supplement clauses. Finally, it clarifies the roles and responsibilities of the contractor, CSP, and assessing organizations. The document aims to ensure the security of covered defense information processed by these cloud services.

Ref: https://dodcio.defense.gov/Portals/0/Documents/Library/FEDRAMP-EquivalencyCloudServiceProviders.pdf

Support the show

Read moreCollapse

Congressional Review Act Targets CMMC Rollback

Tuesday, January 7, 2025 • Duration 14:02

Send us Fan Mail

Representative Gary Palmer introduced a resolution to overturn a Pentagon rule establishing the Cybersecurity Maturity Model Certification (CMMC) program. This Congressional Review Act resolution aims to allow Congress a vote on significant regulatory actions. The Department of Defense completed the necessary steps to implement the CMMC rule, which adds third-party assessments to existing cybersecurity standards for contractors. While some stakeholders support CMMC for improving cybersecurity and enabling more efficient compliance, the resolution's success is uncertain due to limited legislative support. The resolution's goal is to ensure Congressional oversight of major rules impacting the public, not necessarily to oppose CMMC itself. Opponents warn that halting CMMC could jeopardize the defense industrial base's efforts toward cybersecurity compliance.

Ref: https://insidedefense.com/insider/lawmaker-introduces-resolution-roll-back-cmmc-program-final-rule

Support the show

Read moreCollapse

Defining the Scope: A Guide to Level 3 CMMC Assessments

Tuesday, December 31, 2024 • Duration 27:59

Send us Fan Mail

In this episode of CMMC News, we dive into the guidance for defining the scope of a Level 3 Cybersecurity Maturity Model Certification (CMMC) assessment. We discuss the asset categories—CUI Assets, Security Protection Assets, Specialized Assets, and Out-of-Scope Assets—and their specific requirements. Learn how to categorize and document assets in an inventory and network diagram, and understand the role of External Service Providers (ESPs) and Cloud Service Providers (CSPs) in the assessment scope. We also highlight the critical prerequisite of completing a Level 2 assessment, with all POA&M items resolved, before undertaking Level 3 certification.

Preparing for a Level 3 CMMC assessment? Jun Cyber offers expert support to ensure you meet every requirement with confidence. Contact us today and let us help you succeed!

Ref: CMMC Level 3 Scoping Guidance

Website: www.juncyber.com
Email: info@juncyber.com

Support the show

Read moreCollapse

CMMC News by Jun Cyber – Details, episodes & analysis

Podcast details

Recent rankings

Apple Podcasts

Spotify

Shared links between episodes and podcasts

RSS feed quality and score

Publication history

Latest published episodes

Related Shows Based on Content Similarities

Apple Podcasts

Spotify

Related Shows Based on Content Similarities

CMMC News by Jun Cyber – Details, episodes & analysis

Podcast details

Recent rankings

Apple Podcasts

Spotify

Shared links between episodes and podcasts

Buzzsprout3

Other14

Instagram1

RSS feed quality and score

Publication history

Latest published episodes

Similar podcasts and content

Related Shows Based on Content Similarities

Apple Podcasts

Spotify

Related Shows Based on Content Similarities

Buzzsprout3

Other14

Instagram1