Climbing Mount CMMC

Hosted by Bobby Guerra

Technology Business NewsInterviews guests

Website RSS feed

Episodes

141

Latest episode

Oct 2026

Language

EN-US

About the show

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement. We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!

Listen to episodes

60 recent

October 15, 2026Episode 2638 min

What Will NIST 800-171 Rev 3 Look Like in Practice?

In this episode, Bobby is joined by Logan and Charlie from Kieri Solutions who discuss the upcoming changes with Revision 3 of NIST 800-171, its impact on compliance, and how organizations can prepare for the transition. They explore the differences between Rev2 and Rev3, the challenges of implementation, and the potential implications for government contractors. They also discuss: Impact of Rev3 on cybersecurity compliance Role of FAR clauses in adoption of Rev3 Assessment and documentation changes with Rev3 Supply chain security and new control families Potential government and DOD policy adjustments Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

October 8, 2026Episode 2544 min

How to Spot a Great Compliance Candidate

In this episode, Kaleigh and Bobby discuss the complexities of hiring a CMMC professional on-staff, covering planning, knowledge, support, and costs. They share insights from their experience to help organizations navigate this challenging process effectively. They discuss: - Planning for CMMC hiring: from scratch vs. maintaining an existing system - The importance of defining roles and expectations before hiring - Support systems needed for successful CMMC implementation - Cost considerations and budgeting for CMMC professionals - Realistic expectations for knowledge and experience in CMMC roles Dy Eddington's Linkedln: https://www.linkedin.com/in/dy-edington/ Axiom's Website: https://www.axiom.tech/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

October 1, 2026Episode 2444 min

Tips and Tricks for Cybersecurity Assessment Readiness

In this episode, Kaleigh is joined by Kelly Hood and Tom Conkle from Optic Cyber who share their expertise on the importance of proper preparation for CMMC assessments, the role of third-party validation, and best practices for organizations navigating compliance. They discuss: Role of SPRS website and attestation process Common misconceptions about self-assessment and internal bias Best practices for preparing for a CMMC assessment The value of a comprehensive System Security Plan (SSP) Differences between C3PAO and DIBCAC assessments Follow Kelly Hood on Linkedln: https://www.linkedin.com/in/kellyhoodoc/ Follow Tom Conkle on Linkedln: https://www.linkedin.com/in/tomconkle/ Optic Cyber: https://www.linkedin.com/company/opticcyber/posts/?feedView=all Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

September 24, 2026Episode 2324 min

How Will the CMMC Pause Affect My Third-Party Assessment?

In this episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the recent pause in the CMMC rollout and its effects on third-party assessments and C3PAOs. They explore the impact on industry dynamics and the importance of proactive engagement. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

September 17, 2026Episode 2211 min

10 Things You Should Know Before Your CMMC Assessment

In this pro tip episode of Climbing Mount CMMC, Bobby shares essential tips for preparing for and navigating a cybersecurity assessment, focusing on practical strategies to ensure a smooth process Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

September 10, 2026Episode 211 hr 1 min

Understanding the 'Class Deviation' and What it Means for CMMC Compliance

In this episode of Climbing Mount CMMC , hosts Kaleigh Floyd and Bobby Guerra welcome back Koren Wise from Wise Technical Innovations. The conversation delves into the latest developments surrounding the CMMC program, particularly the recent class deviation affecting contractors. Class Deviation: https://media.licdn.com/dms/document/media/v2/D561FAQGSCWrODbSmhA/feedshare-document-url-metadata-scrapper-pdf/B56aCGfVqAI8A4-/0/1788962760218?e=1789581600&v=beta&t=fLrdB7f9FoKMQJuaLxv3guuCih4B5M8Dp4DlPgARP68 CUI Categories and Abbreviations: https://www.dodcui.mil/CUI-Categories-and-Abbreviations/ Follow Koren on Linkedln: https://www.linkedin.com/in/koren-wise/ Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

September 3, 2026Episode 2044 min

What Does a Prime Need to See from My Self-Assessment? w/ Bo Birdwell

In this episode of Climbing Mount CMMC, we explore the intricacies of the CMMC self-assessment process, including scoring, POA&Ms vs OPAs, and the importance of proper documentation. Our guest, Bo Birdwell, from Elbit Systems of America, shares insights from his experience working with supply chain resilience and cybersecurity compliance. Resources mentioned in podcast: Bo Birdwell's LinkedIn: Michael Birdwell | LinkedIn Elbit Systems of America website: Elbit America - Aerospace & Defense Solutions 32 CFR: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) Program Level 2 Self-Assessment Guide: CMMC Assessment Guide Level 2 CIO DoD CMMC Resources: CIO - CMMC Resources & Documentation Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

August 27, 2026Episode 1918 min

How the CCP Prepared Me for My Day-To-Day

In this episode of Climbing Mount CMMC, Kaleigh discusses how the CCP exam components relate to real-world cybersecurity practices and practical tips for professionals preparing for certification and implementation. Resources mentioned in podcast: Sector 171 game: https://sector171.netlify.app/ CMMC Resources website: https://dodcio.defense.gov/CMMC/Resources-Documentation/ Cyber AB Website: https://cyberab.org/ Wise Technical Innovations: https://www.wtinetworks.com/ Edwards Performance Solutions: https://edwps.com/cmmc-ccp-bootcamp/ Summit 7 podcast- Sum IT Up: Summit 7 - YouTube Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

August 20, 2026Episode 1830 min

What Needs to Change in CMMC Before Moving Forward? (Part 2)

In part two of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby discuss their recommendations and concerns surrounding the future of CMMC following the Department of War's pause on Phase 2 implementation. They break down the challenges within the current CMMC assessment process, why industry feedback through the Request for Information (RFI) is critical, and what changes could help create a more practical and sustainable path forward for defense contractors, MSPs, and the broader cybersecurity ecosystem. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

August 18, 2026Episode 1729 min

What Needs to Change in CMMC Before Moving Forward? (Part 1)

In part one of this two-part episode of Climbing Mount CMMC, Kaleigh and Bobby break down the Department of War's decision to pause the rollout of Phase 2 of the CMMC program. They discuss what the pause means for defense contractors, why the Request for Information (RFI) matters, and share their perspective as one of the first CMMC Level 2 Certified MSPs navigating these changes. Website: https://www.axiom.tech/ YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQ Axiom's LinkedIn: https://www.linkedin.com/company/axiomtech/ Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/ Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/