GRC Academy11 Mars 2025

CMMC Level 2 Assessments - What to Expect and How to Avoid Disaster

Preparing for a CMMC assessment, but don't know what to expect?

Get ready to learn from CMMC Lead Assessor Fernando Machado as he explains EXACTLY what happens in each phase of the CMMC assessment process!

Fernando is the Managing Principal of Cybersec Investments which is an authorized C3PAO. Fernando has been involved with CMMC starting in 2020 as a member of the Cyber AB's Standards Management Industry Working Group.

Cybersec Investments has already issued 12 CMMC certifications since CMMC assessments began in January of 2025 and previously participated in nearly 20 Joint Surveillance Voluntary Assessments (JSVAs).

👉 Here are some highlights:

What to expect during a CMMC assessment
The 4-phases of the CMMC Assessment Process (v2.0)
No self-assessment? No independent assessment
Common issues that could cause assessment failures
How to make the assessment easier for your assessor (and you)

It is overwhelming preparing for a CMMC assessment, but don't go into it without knowing what to expect!

What were your biggest takeaways? Let me know in the comments!

Follow Fernando on LinkedIn: https://www.linkedin.com/in/fernando-machado-cissp-cism-cca-ccp-5b5581124/

Cybersec Investments Website: https://cybersecinvestments.com/

-----------

Thanks to our sponsor Vanta!

Need continuous visibility into the state of your security controls?

Discover the new way to GRC here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s2-e3&utm_campaign=courses

#cmmc #nist #cybersecurity

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(55)

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Nov 202536min

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Sep 20253min

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Juni 202552min

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Juni 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Maj 202555min

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Maj 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Apr 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Apr 202558min