Redspin, a division of Clearwater

Missed yesterday's CMMC Connect? No worries, the replay is up! Snuggle up by the fire and listen to the full session or browse FAQs now: https://hubs.li/Q030kDT80 Catch us again live, in 2025.

Navigating the labyrinth of CMMC compliance can be challenging. Your External Service Provider (ESP) can either be the supportive backpack of tools aiding your journey or the heavy load hindering (or even preventing) your progress toward CMMC certification. Learn more about the role of ESPs in your compliance journey in this insightful blog post: https://lnkd.in/g5keAmeG And remember, the ultimate goal isn't just certification; it's maintaining ongoing compliance that validates you are doing your part to protect FCI and CUI.

"𝗔𝗻𝗱 𝘀𝗼 𝗶𝘁 𝗯𝗲𝗴𝗶𝗻𝘀..." (as one of our favorite colleagues might say) As of December 13, 2024, the Department of Defense (DoD) has officially raised the bar for cybersecurity in its supply chain. Contractors bidding for the Marketplace for the Acquisition of Professional Services (MAPS) contract must now either possess a CMMC Level 2 certification or have scheduled an assessment with a Certified Third-Party Assessment Organization (C3PAO). This is a monumental step, signaling the DoD's commitment to protecting sensitive data and ensuring its partners do the same. For many in the defense industrial base, it’s a reminder that the time to act is 𝘯𝘰𝘸—CMMC compliance is no longer a "nice to have" but a necessity for securing critical contracts. The countdown to CMMC Level 2 has officially started. Read more about what this means for DoD contractors and the MAPS procurement here: https://lnkd.in/eznKr4gh

Special Delivery: Redspin's CMMC Highlights and Top Resources to Wrap Up 2024 ❄️ ❄️ ❄️ ❄️ ❄️ As the year comes to a close, we want to extend our warmest holiday wishes to our clients, partners, prospects, and industry leaders across the DIB. May your holiday season be joyful and your New Year filled with peace and success. To show our appreciation, we’ve curated this interactive page as a year-end wrap-up and a gift to you. Here, you’ll find our highlights of 2024 and valuable resources to support your efforts in safeguarding our nation’s sensitive information. https://hubs.li/Q02_YHB00 Keep following us throughout the month as we share highlights and insights from this collection. Enjoy! -The Redspin Team

Join us **THIS Thursday**, December 19th, between 1:00 and 2:00 Eastern for the final CMMC Connect of 2024! Now that the CMMC program rule is in force, we are sure you have questions... We'll be sure to cover: ✅ Key timelines and next steps ✅ Ecosystem updates ✅ Best practices and challenges ✅ Anything you ask us live! Bring your questions, and we'll have the answers! Register here: https://lnkd.in/gmJmX8F4

It's been a long road for CMMC, with milestones like the 2019 launch, the 2021 announcement of CMMC 2.0, and the recently finalized (and now effective!!!) 32 CFR rule. But the journey isn’t quite over! The next step is the impending 48 CFR, which will implement CMMC requirements into DFARS. As this timeline shows, the journey to securing the Defense Industrial Base has been anything but quick, and in this case, it’s definitely about the destination! 🏁

𝗧𝗼𝗱𝗮𝘆, 𝗗𝗲𝗰𝗲𝗺𝗯𝗲𝗿 𝟭𝟲𝘁𝗵, 𝟮𝟬𝟮𝟰, 𝗖𝗠𝗠𝗖 𝗶𝘀 𝗘𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲! Today marks a major milestone for the Defense Industrial Base (DIB). The Cybersecurity Maturity Model Certification (CMMC) Program is now officially codified in the Code of Federal Regulations (32 CFR part 170) and takes effect as of December 16, 2024. What does this mean? ➡️ The CMMC Title 32 Final Rule establishes the framework for safeguarding Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) across the DIB. ➡️ While mandatory contractual requirements awaits approval and becoming effective under CMMC Title 48 Final Rule, voluntary CMMC Level 2 certification assessments can begin starting January 2, 2025. Key updates from The Cyber AB: ✔️ The official CMMC Assessment Process (CAP) is live:https://hubs.li/Q02_LNj_0. This guide will help C3PAOs conduct CMMC Level 2 certification assessments. ✔️ The updated Code of Professional Conduct (CoPC) v2.0 is also live: https://hubs.li/Q02_LNsg0. This code is what C3PAOs are held accountable to. ✔️ The Cyber AB will prioritize authorizing eligible C3PAOs to conduct Level 2 certification assessments: - C3PAOs previously pre-authorized under the CMMC 1.0 framework will require formal reauthorization. - Initial C3PAO authorizations will start now, to ensure eligible candidates are authorized before assessments begin. ✔️ The CMMC Marketplace will be updated on/by January 2, 2025, to display only Authorized C3PAOs and Certified Assessors (CCAs) who meet the certification requirements outlined in 32 CFR part 170.11. Today is pivotal for DoD contractors aligning with CMMC requirements and protecting national security. CMMC is not just a regulation—it’s a validation of your commitment to protecting our nation’s sensitive information, maintaining trust within the Defense Industrial Base (DIB), and strengthening the overall cybersecurity posture against evolving threats. Whether you're ready to begin your journey or have questions, Redspin, a C3PAO and leader in CMMC, is here to help.

Get your team ready for CMMC with these comprehensive interview guides: (https://hubs.li/Q02_Bqvk0) Visit one of our top resources: 14 guides covering all 14 CMMC domains to ensure your team is fully prepared for an assessment! These guides, crafted by a C3PAO, provide insights into the most commonly asked questions during CMMC interviews. Download now to confidently navigate your CMMC assessment! Keep following us to ensure you get the latest news and updates through 2025!

Celebrate the holiday season with us! Explore our holiday wrap-up in this newsletter featuring 2024's highlights, CMMC updates, and resources to jumpstart your 2025 CMMC journey.  

Registration is now open for our first training course of 2025! If you're an OSC preparing for CMMC certification in 2025 or looking to join the ecosystem as an assessor, this course is designed for YOU. Join us virtually from February 3-7, 2025, for Certified CMMC Professional (CCP) training. Don’t wait—registration closes on January 20, 2025. Who Should Attend ❓ - OSCs preparing for CMMC certification - Professionals seeking to join the ecosystem as assessors Why CCP Training with Redspin ❓ - This course covers the foundations of CMMC, including Level 2 scoping and all 110 practices - It's a live, interactive virtual class with dedicated 1:1 instructor support - It will be taught by Thomas Graham, PhD, CISSP, MBA, a lead assessor (CCA) with hands-on experience in over 50 assessments Discounts are available for groups and clients. For pricing, registration, and payment information, check out the link in the comments. Not sure if CCP training is right for you? Have questions? Reach out to us at info@redspin.com—we're happy to help!