CMMC Will BREAK Your MSP - Axiom's CMMC Level 2 Journey
GRC Academy25 Mar 2025

CMMC Will BREAK Your MSP - Axiom's CMMC Level 2 Journey

“We built a second company from scratch…”

Is that what it takes for MSPs to get CMMC'd!?! 👀

In this episode I’m joined by Bobby Guerra and Kaleigh Floyd from Axiom, an IT Managed Service Provider (MSP). They explain exactly what it took to achieve CMMC level 2 certification - after 4 years of effort.

Most MSPs aren’t ready for CMMC. Many believe it's just another checkbox, but it’s a complete operational shift that requires rethinking your tools, processes, and client relationships!

Here are some of the highlights:

  • How much money they allocated for CMMC (it’s more than you think)
  • How to build scalable and repeatable processes to support compliance
  • The tools, contracts, and agreements you MUST have in place
  • How to prepare for the assessment (and avoid sleepless nights!)

Bobby Guerra is the CEO of Axiom and has led the MSP for over 22 years. Under his leadership, Axiom became one of the first MSPs in the U.S. to achieve CMMC Level 2 Certification. Bobby now helps guide clients through their own CMMC journeys, focusing on sustainable security and compliance.

Kaleigh Floyd is the Marketing Director at Axiom and Co-Host of the Climbing Mount CMMC podcast. Raised in the MSP world, she now educates others through Microsoft 365 training and cybersecurity content. Her passion lies in simplifying tech and making a lasting impact in the industry.

This is a true CMMC for MSPs masterclass! So much great advice packed into this episode!

What were your biggest takeaways? Let me know in the comments!

Follow Bobby on LinkedIn: https://www.linkedin.com/in/bobbyguerra/

Follow Kaleigh on LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

Axiom's Website: https://www.axiom.tech/

Climbing Mount CMMC Podcast: https://www.axiom.tech/climbing-mount-cmmc-the-podcast/

-----------

Thanks to our sponsor Vanta!

Need continuous visibility into the state of your security controls?

Discover the new way to GRC here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s2-e4&utm_campaign=courses

#cmmc #nist #cybersecurity

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(55)

Deltek's Journey to FedRAMP Moderate Equivalency

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Nov 202536min

What's Next for GRC Academy and Jacob Hill

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Sep 20253min

The Business Case for CMMC - Surviving DOGE

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Jun 202552min

The Compliance Playbook to Cybersecurity

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Jun 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Mai 202555min

CUI Masterclass with Ryan Bonner

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Mai 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Apr 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Apr 202558min

Populært innen Teknologi

lydartikler-fra-aftenposten
teknisk-sett
nasjonal-sikkerhetsmyndighet-nsm
teknologi-og-mennesker
energi-og-klima
rss-snakk-om-sikkerhet
rss-kunstig-intelligens-med-elisabeth-maren-og-morten
rss-ai-forklart
shifter
rss-polypod
tomprat-med-gunnar-tjomlid
rss-heis
rss-alt-som-gar-pa-strom
elektropodden
fornybaren
rss-ki-praten
rss-digital-dros
rss-bits-and-bytes-for-advokater
pedagogisk-intelligens
rss-alt-vi-kan