『Sum IT Up: CMMC News Roundup』のカバーアート

Sum IT Up: CMMC News Roundup

Sum IT Up: CMMC News Roundup

著者： Summit 7
無料で聴く

It's difficult to keep up with all of the moving parts that make up the Department of Defense's Cybersecurity Maturity Model Certification Program. It's even more difficult to keep up with the relevant bits and bites that influence CMMC. This weekly podcast sums up the news and developments relevant to CMMC; DFARS and other regulations; and NIST standards such as SP 800-171, SP 800-53, the NIST Cybersecurity Framework, and others.

Copyright 2026 by Summit 7 政治・政府 政治学
エピソード
  • The DoD's CMMC Review Has a Scoping Problem

    The DoD's CMMC Review Has a Scoping Problem
    2026/10/15

    The DoD says Brilliant at the Basics will reduce cybersecurity compliance costs and administrative burden. But its new guidance leaves a critical question unanswered: What's actually in scope?

    We examine all 10 IT security practices, compare their language with NIST SP 800-171 and CMMC's existing scoping rules, and explain why eliminating administrative complexity could actually make compliance more expensive for defense contractors.

    Brilliant at the Basics: https://dowcio.war.gov/BrilliantBasics/


    Phishing Resistant MFA: https://youtu.be/7aMxKNNlOxo?si=wJ8XA97UB26oZJPJ

    CMMC Scoping: https://www.ecfr.gov/current/title-32/section-170.19

    続きを読む 一部表示
    32 分
  • CIRCIA Final Rule Is Coming: What Defense Contractors Need to Know

    CIRCIA Final Rule Is Coming: What Defense Contractors Need to Know
    2026/10/08
    AUSA Supply Chain Cyber Readiness Preview: https://tinyurl.com/AUSAsupplychain The CIRCIA final rule has entered regulatory review, putting publication potentially just months away. For defense contractors, one major question remains unresolved: will CISA accept existing DFARS 252.204-7012 cyber incident reports, or will contractors have to report the same incident twice? We break down why the two 72-hour reporting requirements are far less similar than they appear, what “substantially similar” actually means, and why CIRCIA could create an entirely new reporting obligation for the defense industrial base. CIRCIA Proposed Rule: https://www.federalregister.gov/documents/2024/04/04/2024-06526/cyber-incident-reporting-for-critical-infrastructure-act-circia-reporting-requirements CIRCIA Pod 1: https://youtu.be/bvwnNSpDZgU?si=bJjZjrhzHJQxqYKH CIRCIA Pod 2: https://youtu.be/ngYSaO5fg5Y?si=vk-9dTSqT1HrNakq CIRCIA Pod 3: https://youtu.be/kUdhl5QfziU?si=kEnHdlWD8D17w0Pf
    続きを読む 一部表示
    20 分
  • Congress Changed Its CMMC Small Business Bill at the Last Minute

    Congress Changed Its CMMC Small Business Bill at the Last Minute
    2026/10/01
    Managed Service Provider (MSP) Grader: https://summit7.us/mspgrader Congress has introduced new legislation aimed at helping small businesses navigate CMMC, promising clearer guidance, lower costs, and better federal assistance. But then the CMMC provisions changed before the bill even left committee. We break down what the Cybersecurity for Small Businesses Act actually requires, what it doesn't give the SBA authority to do, how the amended version differs from the original, and whether it would meaningfully change anything for defense contractors struggling with CMMC. Press Release: https://wied.house.gov/media/press-releases/rep-wied-introduces-bill-strengthen-cybersecurity-and-reduce-costs-small Bill tracker: https://www.govtrack.us/congress/bills/119/hr10238
    続きを読む 一部表示
    18 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません