GRC Academy

It’s been a long and wild ride on this #cmmc ship! ⛵In this episode, I speak with Stacy Bostjanick who is the Director of the CMMC program at DoD CIO!Here are some highlights from the episode:Expectations for the initial phase in of CMMCWho determines CMMC levels for contracts?How will CMMC waivers work?Criteria for CMMC level 2 self-assessments and CMMC level 3Early use of NIS

Your MSP could be a CMMC disaster. 💥💣💥I wish I was joking.In this episode I speak with Joy Beland about the critical role IT Managed Service Providers (MSPs) play in the CMMC space and why so many of them will cause their clients to fail their CMMC assessments.Here are some of the highlights:The NEW critical CMMC requirement for MSPsWhy so many MSPs will cause their client

Should you NEVER pay after a ransomware attack?In this episode I speak with Frank Riccardi about cybersecurity in healthcare and the event that triggered much more cyber accountability for the C-suite.Here are some of the highlights:Why healthcare workers are prone to social engineering attacksReasons you SHOULD and should NOT pay after ransomware attacksManaging shadow IT after ac

Should you fire your MSP?!? 🔥🔥🔥In this episode, I speak with cybersecurity attorney Sarah Anderson about how to evaluate IT Managed Service Providers and how businesses can protect themselves when relying on them.Here are some of the highlights:How you should evaluate MSPsWhat to do after your MSP is hackedManaging the cyber incidentCyber insurance pitfallsShould you fire

SOC 2 isn't the only SOC out there! 🧦In this episode Cera Adams breaks down these SOC reports and what to expect in a SOC audit!Here are a few highlights from this episode:Why CPAs are involvedWhat SOC 1 / SOC 2 / SOC 3 reports mean to providers and consumersDifference between SOC 2 Type 1 and Type 2 reportsHow SOC scoping and audits workSOC consulting/audit independence require

Do you use Android at work, but don't really understand it?In this episode Hahna Kane Latonick teaches an Android cybersecurity masterclass for cyber GRC teams:Here are a few highlights from this episode:How the Android project is managedHow Android devices are compromisedThe many steps to update Android devicesMost important steps to secure Android devicesIs Apple more secure than

Introducing the Penn State Whistleblower.In this episode, the whistleblower explains how he tried to stop Penn State from misrepresenting their NIST 800-171 compliance to the DoD and what he has faced since he blew the whistle!Whistleblower attorney Julie Bracker also shares what the media got wrong in this case and the latest on the Georgia Tech FCA case!Here are a few highlights

Confused about Microsoft 365 and DFARS/CMMC compliance?In this episode, I speak with Richard Wakeman, Chief Architect for cybersecurity of Aerospace & Defense @ Microsoft!We discuss the history of the government clouds, the need behind GCC and GCC High, and much more!Here are some highlights:The origins of the Microsoft cloudsWhich clouds support DFARS 7012 complianceWhen will

Is your MSP a cybersecurity liability?In this episode, I speak with Brian Hubbard, President of Evolved Cyber Solutions and the MSP Cybersecurity Exchange!We discuss the state of MSP cybersecurity and how MSPCyberX is elevating the security posture of MSPs everywhere!Here are some highlights:Why MSPs are so critical to our nation's securityThe inevitable regulations that will targe

FREE CMMC gap assessments!! FREE penetration tests!! FREE SOC & incident response!!This is a hidden CMMC treasure that no one's talking about!In this episode, I speak with Darren Mott about the FREE cybersecurity services offered to the DIB by the National Cybersecurity Operations Center!Here are some of the FREE services they offer:CMMC gap assessmentsPenetration testingSOC &a