The Cybersecurity Maturity Model Certification (CMMC) In a Nut Shell

In this quick session, we cover in a nut shell how the Cybersecurity Maturity Model Certification (CMMC) came into being, the regulations that it augments, the difference between Controlled Unclassified Information and Federal Contract Information, how defense contractors can work together while managing CUI and FCI, what levels of CMMC are required for what types of information, and what flavor of Microsoft 365 you will need to meet the different levels of CMMC.

✅We will be tackling the following:
- How we got to CMMC
- CMMC Timeline
- Understanding the defense supply chain
- FCI, CUI, CDI and CTI
- Prime and Subcontractor Information Flows
- CMMC practices and processes

🔎About Agile IT:
Agile IT is a cloud-first managed services company and one of the top 100 Cloud Computing Solutions Providers in the world. A four-time Microsoft Cloud Partner of the Year, we offer flexible, best-in-class cloud-managed services that go beyond the IT department. We’re focused on building a community of customers that maximize cloud and SaaS services to drive their businesses through automation, agility, business insight, and productivity.

At Agile IT, we help businesses align technical support and business strategy to deliver the right technology at the right time. It’s why we were named to the 2017 CRN Next-Gen 250 list for the second time in four years, an award recognizing companies leading the next generation of IT and bringing key technologies to market before they become mainstream.

Headquartered in San Diego, California, we work with education, corporate, government, and nonprofit customers since 2006.

[fmayer]

Very good and clear video that gets at the background that is needed to understand why the program exists and the all important mission assurance case for it.

[Aain_R]

Great presentation, Sean. I think it was the weapons company, WKRP, that pushed the limits with their turkey bomber. 😄

[LaurenceSinclair]

Just to save people some time, because nobody ever says it in simple terms.

CMMC is a certification that shows your level of compliance with NIST.

[CrazyCanuck]

This is super cool stuff, it pains me to know that this is very much an American security framework and doesn't apply to Canadians. Wishing we had a government standard I could guide our clients towards, for now I think CIS controls is our best option.

Ultimately these frameworks are accomplishing similar goals so I still feel a lot of this information is still relevant.

[DakarBlues]

Is a security clearance necessary to make good use of this certification?