2023 Virtual CMMC Summit

Keynote: CMMC State of the Union

Matt Travis – CEO @ Cyber AB

What should the Defense Industrial Base (DIB) expect from CMMC rule making?

In this session, Matt Travis (CEO of the Cyber-AB) kicks off the 4th Annual Virtual CMMC Summit where he provides an update on the status of CMMC. Mr. Travis also discusses what contractors should expect in the upcoming months as CMMC goes through a comment period and then becomes a final rule.

CMMC Compliance Fundamentals + Checklist

If your organization wished they had a CMMC compliance checklist, then this session is for you.

Scott Singer (CEO @ CyberNines; Authorized C3PAO) , Dr. Jose Neto (Lead Cybersecurity Consultant, PC Warriors; Certified CMMC Professional/ Provisional Assessor) and Brian Berger (President, Cytellix) provide an overview of CMMC compliance fundamentals that you must know before you get started on your compliance journey. The session will also provide listeners with a useful checklist they can use to help guide their organization’s compliance efforts as they look to get started.

What to look for when hiring a NIST or CMMC Consultant

You recognize that your organization needs to hire a Registered Practitioner, a Registered Practitioner Organization (RPO)s or a C3PAO to help you prepare for a NIST 800-171 or CMMC assessment. But, what questions should you ask prospective consultants to ensure they are truly qualified? In this session with Robert Hill (CEO @ Cyturus, leading GRC platform provider) and Emery Csulak (vCISO & Director of Cyber Compliance @ BGS), listeners had the opportunity to learn:

• The questions they should ask when interviewing a prospective consultant
• What tools a consultant should have available
• How the organization can pick the best consultant for their needs

The Technology + Documentation You’ll Need for CMMC & DFARS Compliance

What technologies and documentation does an organization need in order to ensure a successful compliance journey? In this session, Stuart Itkin (VP @ NeoSystems) and Jim Goepel (Dir. of Education @FutureFeed, Co-Founder, CMMC Information Institute; Certified CMMC Assessor; Certified CMMC Professional) will delve into the critical documentation and technology solutions organizations will need in order to succeed in their CMMC + DFARS compliance mission.

How C3PAOs will Assess Your Organization

What will a C3PAO look for when assessing your organization? What do you need to have prepared and what should you be able to demonstrate? In this session, you’ll learn how to ensure your documentation and platform are ready for an assessment and what are potential ‘gotchas’.

In this session, we had 5 C3PAOs discussing what they have learned from their numerous assessments and what they want you to know.

This session included C3PAOs Robert Teague and Thomas Graham from Redspin, Marci Womack and Timothy Walsh from Schellman, and Stephen Pratt from Sentar.

Free Government Resources to Help Pay for Compliance

What programs does the government offer at the national and state level to assist organizations seeking CMMC compliance? Listen to representatives from APEX (formally Parallex), NIST and their associate MEPs as they discuss free government resources that can help you pay your compliance bill.

Understanding NIST 800-171 and DIBCAC Assessments

What is the difference between a NIST 800-171 and DFARS 7012 assessment? What are assessors looking for in each of these assessments and how should organizations prepare?

In this session experts Dr. Ron Ross (Co-author NIST 800-171 standard, Fellow at NIST) and the Defense Contract Management Agency’s (DCMA) Fabricio Corrales discussed what each assessment standard requires and how organizations can maximize their chances for success during an assessment.

The Primes’ Perspective on CMMC

What are the country’s top Prime contractors doing to ensure their subcontractors are making progress towards CMMC? What is their perspective on CMMC?

In this very important session, JC Dodson (former CISO @BAE Systems) led an all-star panel discussion with:

• Paul Escobedo – CISO, Raytheon
• Dr. Phyllis Schneck – CISO, Northrop Grumman
• JR Williamson – CISO, Leidos

on what Primes can do to encourage and ensure their subcontractors are making progress towards meeting CMMC.