Achieving CMMC 2.0 Compliance With The Shared Responsibility Model
In order to manage DFARS cybersecurity obligations and achieve CMMC 2.0 certification, aerospace and defense contractors in the Defense Industrial Base must implement and maintain a complex web of NIST 800-171 controls and CMMC practices.
Unfortunately, utilizing outsourced managed IT service providers ("MSPs") creates complications because the responsibilities for security are distributed across internal and external stakeholders.
The solution is to utilize a robust shared responsibility matrix that identifies who is responsible for specific security control objectives across your CMMC environment.
In this 90 minute session, Jacob Horne and Scott Edwards will provide contractors with next steps to achieve CMMC 2.0 certification by explaining:
*What is a Shared Responsibility Model and why is it required for CMMC 2.0?
*How will a Shared Responsibility Model help me achieve CMMC 2.0 compliance?
*What does my organization need to do next in regards to shared responsibility?
- The basics of the shared responsibility model
- Why most control mappings are insufficient
- Tying everything together within DFARS and CMMC
- The Summit 7 approach
- Takeaways & Next Steps
Scott's academic background includes a Bachelor of Science in Political Science from the United States Military Academy, West Point, and a Master of Science in Computer Science (Information Assurance) from the National Security Agency program at James Madison University. These diverse degrees give Scott a breadth of knowledge which has served him and his customers well.
As a former NSA intelligence analyst and U.S. Navy cryptologic technician, Jacob has over 14 years of experience in offensive and defensive cybersecurity operations. As a civilian he has led Governance, Risk, and Compliance teams at AT&T, Northrop Grumman, and the NIST Manufacturing Extension Partnership. He has developed and taught numerous cybersecurity training programs for organizations including the NSA National Cryptologic School, UCLA, and UC Irvine.
Jacob has a master’s degree in cybersecurity risk and strategy from the NYU School of Law and is an MBA candidate at the UC Irvine Paul Merage School of Business.
Jacob's professional certifications include CMMC Provisional Instructor, CMMC Provisional Assessor, Certified Information Systems Security Professional (CISSP) and Certified Data Privacy Solutions Engineer (CDPSE).
