CMMC Resources

ATI, in partnership with Cuick Trac by Beryllium InfoSec, hosted a webinar series
to provide you information regarding the upcoming implementation of the
Cybersecurity Maturity Model Certification (CMMC) Program. 

6

Part Webinar Series

The series kicked off on May 21st, 2024 and was held monthly to November 14th, 2024. Recordings and presentations of past webinars can be viewed here on this page.

May 21, 2024

A lot has changed since the Cybersecurity Maturity Model Certification (CMMC) program was announced in July 2019. Many businesses subject to DFARS 7012 are confused and worried about certification, budget, and staffing, and so much more.

So what does the future of CMMC hold for government contractors?

Webinar Presentation is Available Here!

June 20, 2024

Protecting CUI starts with scoping. Since not all information is on the same level of sensitivity as CUI, CDI, and CTI, you’ll need to define a scoping boundary around the technology, people, and places that will process, store, or transmit sensitive data.

Paul Netopski, Director of Compliance Advisory for Cuick Trac, and Derek White, Co-founder & Chief Product Officer of Cuick Trac, examine the steps to scoping and why the order of process matters. They also discuss how to determine your infrastructure needs-on-prem, GovCloud or enclave-and how to build this into a continuous compliance program.

Webinar Presentation is Available Here!

July 18, 2024

Since not all data is CUI-related or in scope, data segmentation is a critical step to enclaving.  But not all enclaves are created equal.

Join Jeff Baldwin, D.Sc., Beryllium InfoSec’s Chief Information Security Officer (CISO), and Heather Engel, Managing Partner at Strategic Cyber Partners, to learn the steps to segmentation, plus the pros and cons of enclaving, and which type of enclave takes the burden of configuration, systems administration, data management, audit and reporting, and more out of your team’s hands.

Webinar Presentation is Available Here!

August 28, 2024

As your CMMC compliance efforts get underway, it’s time to look at the Shared Responsibility Matrix.  An SRM gives you clear guidance on who is responsible for each of the 320 assessment objectives.  And while you have the responsibility of providing proof that your organization meets all objectives, what about any vendors you work with?  What’s their responsibility?

Webinar Presentation Available Here!

September 24, 2024

As CMMC becomes closer to reality, there’s lots of buzz and questions regarding the certification process conducted by a CMMC 3rd Party Assessment Organization (C3PAO).  The previous webinars in this series have focused on the specific elements needed to prepare, but what happens during an actual assessment?


Webinar Presentation Available Here!

November 14, 2024

On October 16, 2024, 32 CFR Part 170 was officially added to the Federal Register, making CMMC an official program.  This major milestone will have significant impact on organizations that want to be awarded DoD contracts.

View the presentation slides here!

CMMC Resources

“The CMMC Program helps ensure that DoD contractors and subcontractors comply with DoD requirements to safeguard FCI and CUI.”

Department of Defense, Chief Information Officer

Department of Defense – Presentation Slides on CMMC

CMMC Alignment to NIST Standards

Technical Application of CMMC Requirements

The Supplier Performance Risk System (SPRS)

CMMC Level Determination