CMMC Proof

Are you trying to figure out how to launch a cybersecurity career from scratch without wasting months on the wrong certifications or waiting for someone to hire you? In this live, front-line session, Derrich Phillips (Founder & President of Aspire Cyber) pulls back the curtain on the exact 5-step career blueprint he would use if he had to restart his CMMC journey from day one. With the Department...

How do you leap from a low-level IT internship at 18 to landing a specialized compliance role at a leading CMMC Managed Service Provider (MSP) by age 21? This is the exact playbook. Welcome back to the CMMC Proof Podcast! In this episode, we are pulling back the curtain on Camden's extraordinary career trajectory. At just 21 years old, he is completely shattering the misconception that you need de...

Are you about to spend six figures on a massive, painful Microsoft GCC High migration just to check the CMMC box? Stop and watch this live CMMC Space demo first. For small and mid-sized defense contractors, the standard advice has always been the same: migrate your entire corporate IT footprint to a bespoke Microsoft GCC High environment. With the Department of War (DoW) requiring CMMC Level 2 cer...

Is age just a number in the high-stakes world of cybersecurity? In this episode of the CMMC Proof Podcast, Derrich Phillips sits down with Sam Sporidis, a 19-year-old entrepreneur and who is shaking up the CMMC ecosystem. Sam isn't just a student; he's a CMMC Certified Assessor (CCA) *candidate who co-founded the startup, Tolerance, to solve the "black box" of CMMC compliance for small businesses....

Achieving a CMMC Compliant Self-Assessment in 24 hours is a bold claim, but as discussed in the CMMC Proof Podcast with Justin Paquette (CTO of NtelSec), it is technically possible if you move away from traditional "IT buildouts" and "consultant-heavy" models. To hit this aggressive timeline, you must shift from a "Build It" mindset to a "Lease It" mindset. 

Think you need to be a cybersecurity guru to enter the CMMC ecosystem? Think again. With over 200,000 companies needing support and Phase 1 in full effect, the Department of Defense supply chain needs reinforcements—and they aren't just looking for IT experts. They need project managers, veterans, former law enforcement, and ambitious professionals with a heart for service. In this episode of the...

We often hear that the cybersecurity talent gap is a "shortage of people." The truth? It is a shortage of professionals who can bridge the gap between technical theory and assessment-ready rigor. I recently sat down with Rene Ferrier, CCA, to discuss his journey from 25 years in IT and RMF (Risk Management Framework) to becoming a newly minted CMMC Certified Assessor. What makes Rene's story uniqu...

This is a powerful CMMC success story that proves compliance doesn't have to take 12-18 months or break your budget. Join your host, Derrich Phillips, as he interviews Josh Hedeby, CPA, Director of Finance at Intertec Engineering, about their journey to CMMC Level 2 certification. Josh shares the shock of receiving quotes for traditional solutions (like Microsoft GCC High MSPs) that exceeded $250,...

Is CMMC Level 2 certification a nightmare of confusing requirements and sky-high costs? Not anymore. In this CMMC Proof podcast, Derrich Phillips sits down with the leadership team of Quadyster—Hari Banda, CBL Rao, and Biju Ninan—to share their incredible journey from feeling overwhelmed by traditional CMMC solutions to achieving their certification in record time and for a fraction of the expecte...

Join Derrich Phillips on the CMMC Proof Podcast as he sits down with Zach Walker, co-founder of ATX Defense. Discover how their revolutionary CMMC solution is helping small defense contractors avoid the CMMC expensive nightmare.    

In this engaging episode of the CMMC Proof Podcast, host Derrich Phillips sits down with Jeff Brown, Google US Public Sector Workspace Lead, to explore how Google Workspace is transforming CMMC compliance for defense contractors. Discover how Google Assured Controls and U.S.-based data centers empower organizations to meet CMMC Level 2 requirements with ease and confidence. What We Cover in This E...

In this episode of the CMMC Proof Podcast, host Derrich Phillips sits down with Doug Landoll, CEO of Lantego and the author of the bestselling CMMC Assessment Handbook. Doug shares his journey into cybersecurity, offering a unique perspective on the importance of collaboration within the cybersecurity community. What you'll learn in this episode: Doug's experience as an author, focusing on CMMC an...

Join Derrich Phillips, Lead Certified CMMC Assessor (CCA), as he interviews Tatiana Marin, Director, Information Security at Kruze Consulting. In this episode, Tatiana shares her unique journey into cybersecurity, her strategies for building a strong security culture, and valuable insights on navigating SOC 2 compliance. Key Topics Covered: Transitioning from operations management to cybersecurity...

In this episode of the CMMC Proof Podcast, host Derrich Phillips interviews Melissa Burant, a supply chain project manager at Iowa State University CIRAS, to uncover the compliance challenges defense contractors face under the Cybersecurity Maturity Model Certification (CMMC).  Melissa shares insights into bridging the gap between federal requirements and current compliance practices, emphasizing...

Join Emilyann Fogarty, CISO at NYSERNet, as she explores the unique cybersecurity challenges in higher education—from targeted attacks and compliance pressures to limited budgets. Emilyann shares her approach to building scalable security programs focused on risk management and aligned with institutional goals. Highlighting the importance of soft skills, effective communication, and relationship-b...

In this episode of the CMMC Proof Podcast, host Derrich Phillips sits down with Tammie McClellan, Deputy CISO at the University of Central Florida (UCF). With over 31 years of experience at UCF, Tammie dives into the challenges of CMMC compliance in the higher education and research space. She shares valuable insights on the Knight Shield initiative, which aims to streamline the compliance process...

In this insightful conversation, cybersecurity coach and instructor Kenneth Ellington provides and overview how SIEM and SOAR technology to meet CMMC requirements, specifically for small businesses. He shares practical advice on leveraging SIEM technology, emphasizing the importance of baseline understanding and tuning to avoid unexpected costs related to logging. Kenneth also offers tips on navig...

In this compelling episode, we explore the recent whistleblower lawsuit filed by the United States Department of Justice against Georgia Tech and Georgia Tech Research Corporation. This case, which alleges significant cybersecurity breaches, has sent shockwaves through the defense contracting and academic communities. Key Takeaways: Specific Contracts and Violations: We break down the particular c...

Join us as Will Drake, Senior Security Analyst at Indiana University, dives into the intricate world of cybersecurity in academia. In this enlightening conversation, Will shares the successful strategies and challenges of the "Secure My Research" initiative, aimed at implementing cybersecurity best practices in research environments. What You'll Discover: Streamlined Solutions: Learn how Indiana U...

Join Derrich Phillips in an engaging discussion with Daniel Eliot, the lead for small business engagement at NIST, on the latest episode of CMMC Proof podcast. They explore the updated NIST Cybersecurity Framework and its Small Business Quick Start Guide, focusing on practical insights and challenges faced by small businesses in implementing cybersecurity measures. Highlights include Daniel's role...

Join us for an exclusive insider's perspective as Reneé Brooker, former Civil Frauds Assistant Director at the United States Department of Justice, shares her insights into False Claims Act (FCA) investigations. With her extensive experience supervising all FCA cases in 94 United States District Courts and overseeing billions of dollars in recoveries, she offers a unique understanding of holding c...

In this conversation, Jim Dempsey discusses his book 'Cybersecurity Law Fundamentals' and the current state of cybersecurity and privacy laws in the United States. He highlights the patchwork of laws and regulations that exist, the need for a comprehensive cybersecurity law, and the importance of asset inventory and risk assessment for companies. Jim also discusses the role of whistleblowers in ad...

Join us on the latest episode of the CMMC Proof podcast as we delve into the fascinating world of cybersecurity education with our special guest, Spiros Bamiatzis, Department Chair of Cybersecurity, and NSA Grant Program Director at Ivy Tech. In this episode, Spiros shares his expertise on the critical role of professors in mentoring and guiding students in cybersecurity education. We explore the...

Join us for an insightful episode of the CMMC Proof podcast as we sit down with Wendy Epley, an experienced regulatory compliance expert with a passion for export controls and cybersecurity. With over a decade dedicated to the field, Wendy bridges the gap between export controls and cybersecurity, a vital intersection in today's regulatory landscape. As the Principal Analyst at the University of A...

In this episode of the CMMC Proof Podcast, attorney Julie Bracker joins us to discuss her unsealed whistleblower cases involving False Claims Act (FCA) claims for cybersecurity noncompliance against Penn State and Georgia Tech. Julie outlines the history and purpose of the False Claims Act, the role of whistleblowers in exposing fraud, waste, and abuse, and the recent focus on cybersecurity in Fal...