CMMC for MSPs: Real Audit Lessons. IntelliGRC Podcast with Dr. Jerry Craig (Integris) скачать в хорошем качестве

CMMC for MSPs: Real Audit Lessons. IntelliGRC Podcast with Dr. Jerry Craig (Integris)

In this episode, Dr. Jerry Craig, VP of Information Security at Integris, shares real-world insights from successfully completing a CMMC Level 2 certification, including what actually happens during the audit, common misconceptions, and how MSPs and defense contractors should prepare. If you're part of the Defense Industrial Base (DIB), an MSP supporting DoD contractors, or an organization preparing for CMMC Level 2, this conversation covers: • How CMMC differs from SOC 2, ISO 27001, and HIPAA audits • Why many companies fail self-attestation under DFARS 7012 • What assessors actually look for during an audit • How to properly structure your boundary (enterprise vs enclave) • MSP strategy for supporting CMMC clients • Common pitfalls that delay certification CMMC isn’t just a regulatory hurdle; it’s a competitive differentiator for companies willing to prepare properly. If you’re serious about CMMC Level 2, NIST SP 800-171 compliance, or DFARS 7012 requirements, this episode breaks down what you need to know. Timestamps 00:00 Welcome 00:50 Who Is Dr. Jerry Craig? (From the military to working for a MSP) 03:40 Role at Integris and Taking on CMMC 05:44 Why CMMC Is Unlike Any Other Audit 10:10 Early Life, Marine Corps, and Tech Career Start 23:40 Incentives in Government vs. Commercial Security 33:07 Does CMMC Shrink the Defense Industrial Base? 40:12 CMMC: Doom and Gloom or Massive Opportunity? 44:00 Early Adopters and Competitive Advantage 50:05 What Makes Integris Different as a MSP 53:21 Biggest Compliance Challenges for SMBs 1:01:50 Realistic Cost Expectations for CMMC 1:10:55 Why “Wearing Multiple Hats” Fails in Compliance 1:15:55 Inside the CMMC Audit Experience 1:21:00 How to Choose the Right C3PAO 1:27:21 Avoiding “Not Applicable” Pitfalls 1:36:21 Post-Certification Changes at Integris 1:41:23 Building a House and Life Outside of Cyber 1:44:48 Final Advice: CMMC as an Opportunity #CMMC #DefenseIndustrialBase #MSP #Cybersecurity