Cyberspin

This episode addresses one topic taken from our top ten list of most common failed practices from the CMMC & DIBCAC High assessments.  Logging plays a major role in protecting an organization's CUI and FCI because it detects malicious activity. This episode highlights logging best practices, learned by Redspin, the first Authorized CMMC C3PAO. Rob and Thomas talk through your logging options (to p...

This episode addresses one topic taken from our top ten list of most common failed practices from the CMMC & DIBCAC High assessments.  The documentation episode, where we address some of Redspin's most common questions like: Do I need documentation for every domain? How long should your SSP be? Why do we need documentation, and do we still need it with CMMC 2.0? Listen in as Rob and Thomas walk th...

Redspin's CMMC experts are back to highlight the recent news announcing the start of joint C3PAO and DIBCAC assessments! During the CMMC AB Townhall on July 26th, 2022 it was announced that the first set of certifications will kick off as a joint surveillance program with C3PAOs and DIBCAC.  Representing one of the first C3PAOs conducting a joint DIBCAC HIGH assessment, Redspin's Thomas Graham wal...

The Cyber AB and the PMO office recently announced that CMMC 2.0 certifications can be conducted, just not under the “CMMC 2.0” title. The certifications will temporarily be called “DIBCAC High certifications” until the rule-making phase is complete. So, what does that mean for organizations seeking certification? Today Redspin’s CMMC Experts, Dr. Thomas Graham, Rob Teague, and Ross Piper will cla...

Rob Teague, Dr. Thomas Graham , and special guest Noel Vestal (Compliance Manager at Preveil) join us for this third installment of our "Rumor Control" series to squash the rumors and talk through the challenges surrounding System Security Plans (SSPs).   Listen in as Rob, Thomas, and Noel dive into a fun, yet informative discussion on all things SSP. Also, catch a deeper dive into the subject by...

Rob Teague, Dr. Thomas Graham , and Ross Piper join us in this second installment of the Rumor Control series to dive into CMMC CCP training.  Listen in as Rob, Thomas, and Ross dive into the facts of CMMC  CCP training. They will also walk through recent training announcements that come directly from the CMMC-AB and offer their perspectives and professional insights into whether those of you who...

Rob Teague and Dr. Thomas Graham join us in this episode to explain a few recent rumors surrounding documentation and CMMC certification. Listen in as Rob and Thomas dive into the facts surrounding documentation requirements, and what Managed Service Providers (MSPs) need to provide in terms of documentation that will help you navigate your CMMC needs, avoid any confusion, save time + energy, and...

The DoD has issued a long-awaited statement regarding updates to its Cybersecurity Maturity Model Certification (CMMC) program, and this newly announced CMMC 2.0 program has some indicated changes... In November 2021, Redspin joined forces with our friends over at PreVeil for a webinar titled "CMMC 2.0’s Impact on SMBs" that covered how SMBs should prepare for 2.0 , approaches for managing CUI, an...

Carrie Mulcahy , VP of Marketing at Redspin provides non-I.T. insight into what goes on during a CMMC Level 3 assessment interview. She talks with Dr. Thomas Graham about her role as well as the marketing department’s involvement in helping Redspin pass a CMMC Level 3 assessment to become the first C3PAO. Subscribe to CyberSpin:  Apple iTunes ,  Spotify ,  Stitcher , or your preferred podcast plat...

If you're an Organization Seeking Certification (OSC), want to become a CMMC Certified Assessor, or want to become a Certified CMMC Professional (CCP) for resource and guidance purposes start by listening to this episode on Redspin's new Cybersecurity Maturity Model Certification (CMMC) Licensed Training.  Redspin, the first organization to successfully pass a CMMC Level 3 assessment is now an app...

Redspin's CISO and CMMC Registered Practioner Dr. Thomas Graham , and CMMC Provisional Assessor Tony Buenger share a third lesson Redspin learned while going through the CMMC Level 3 assessment process before becoming an Authorized C3PAO. Thomas and Tony introduce "Lesson 4: Ongoing Cyber Hygiene".   Subscribe to CyberSpin:  Apple iTunes ,  Spotify ,  Stitcher , or your preferred podcast platform....

Redspin's CISO and CMMC Registered Practioner Dr. Thomas Graham , and CMMC Provisional Assessor Tony Buenger share a third lesson Redspin learned while going through the CMMC Level 3 assessment process before becoming an Authorized C3PAO. In this episode, Thomas and Tony introduce "Lesson 3: Coaching the Team and discuss the important role departmental leaders outside of I.T need to play during a...

Redspin's CISO and CMMC Registered Practioner Dr. Thomas Graham , and CMMC Provisional Assessor Tony Buenger share the second of four lessons Redspin learned while going through the CMMC Level 3 assessment process before becoming an Authorized C3PAO. Thomas and Tony introduce "Lesson 2: Practice and Process Readiness", and chat about how having a completed SSP, responsibility matrix, and set of po...

Redspin's CISO and CMMC Registered Practioner Dr. Thomas Graham , and CMMC Provisional Assessor Tony Buenger share the first of four lessons Redspin learned while going through the CMMC Level 3 assessment process before becoming an Authorized C3PAO. Thomas and Tony introduce "Lesson 1: Corralling Your CUI", and dive into the details of how knowing where your organization's CUI lives and breathes w...

In this episode, we introduce CMMC-Spin a bi-weekly feature that delivers CMMC content directly to your inbox. Redspin's CISO, Dr. Thomas Graham, CMMC Sales Director Jeremy Mares, and CMMC Provisional Assessor Tony Buenger chat with us about how to stay current with the evolving CMMC news and updates, talk about their advice around documentation and training, and wrap up the episode with a briefin...

We are shifting gears away from CMMC content this week and bring you an episode focused on the ever-exciting topic that is pen-testing. Ben Denkers of Redspin and Patrick Guay of Pcysys join us this week to discuss Redspin's continuous pen-testing capabilities. Learn about automated pen-tests that continuously conduct ethical exploits and deliver prioritized threat-based weaknesses.  Subscribe to...

In this episode, get to know a few of our diverse group of CMMC Registered Practitioners, also known as "RPs", many of whom you may already be familiar with as they have been consulting with Redspin’s healthcare division, CynergisTek. Each RP you meet in this episode will give us a glimpse into their professional backgrounds including their involvement in holding various positions with the U.S. Mi...

You asked the questions and in this episode, we answer them! This week, Tony Buenger responds to audience questions that were asked during March 25th, 2021's " Maneuvering Through The Minefield of CMMC Webinar ". If you have questions of your own, that you would like to submit for Tony to answer on air, please send them to tony@redspin.com and we will try to address them on our next Q&A episode. ...

In this episode, we get to know Rob Teague, CMMC Registered Practioner at Redspin, and Information Security Consultant for CynergisTek. Listen as we get to know Rob's perspective on the industry, what inspires him, and how his military background ties into all aspects of his professional and personal life.  Subscribe to CyberSpin: Apple iTunes ,  Spotify ,  Stitcher , or your preferred podcast pla...

This week, special guest Helve Longoria, the CISO at Florida International University (FIU) joins Tony and Rob on the discussion of FIU needing a CMMC assessment. Together the three discuss what Level of certification FIU will need, and what kept Helve up at night when first finding out about CMMC.    >> Do you have CMMC questions of your own? For more CMMC resources and/or to speak with a CMMC ad...

In this episode, we feature Tony Buenger to discuss his journey from an Air Force ROTC scholarship that turned into 22 years of Air Force service, to his multiple information security/cybersecurity leadership roles which ultimately led him to the Redspin team. All of this while producing music videos and running a recording studio on the side. Listen as we get to know Tony's passion for what he do...

CMMC Provisional Assessor Tony Buenger, and CMMC Registered Practitioner Robert Teague are back with us this week to chat about Redspin's CMMC consulting service. Together, Tony and Robert outline what is included with CMMC consulting and what a consulting client would walk away with. As Tony puts it, a CMMC assessment is the ultimate test, and Redspin's CMMC consulting service is like studying fo...

In last week’s episode, we gave a high level overview of all things CMMC. Dave, Tony, and Robert discussed their CMMC related rolls, walked through the different levels of CMMC certification, and touched on how organizations can prepare. This week we deep dive into Redspin’s CMMC Gap Assessment. As a fly on the wall, listen to CynergisTek’s Director of Security Services Dave Bailey walk through a...

CynergisTek’s Director of Security Services, Dave Bailey sits down with Capability Maturity Model Certification (CMMC) Certified Provisional Assessor Tony Buenger, and CMMC Registered Practitioner Robert Teague of Redspin, a division of CynergisTek. Together the group discusses Redspin’s unique position as one of the first 20 organizations accredited as a C3PAO for the DoD, and talk all things CMM...