Getting CMMC Right: Scope, Budget, and Certification Tips

This is a podcast episode titled, Getting CMMC Right: Scope, Budget, and Certification Tips. The summary for this episode is: <p>Think compliance is just an IT problem? It’s a revenue problem, too. Without it, some contracts will stay out of reach.</p><p><br></p><p>In this episode,<a href="https://www.linkedin.com/in/jararowe/" rel="noopener noreferrer" target="_blank"> Jara Rowe</a> talks with <a href="https://www.linkedin.com/in/thomas-greco-9105994/" rel="noopener noreferrer" target="_blank">Tom Greco</a>, vCISO at Trava Security, about what companies need to know about the Cybersecurity Maturity Model Certification (CMMC). It’s a Department of Defense requirement that verifies whether companies are securely handling Controlled Unclassified Information (CUI). Tom Greco explains what CMMC involves, how scoping affects your readiness, and how to maintain compliance over time. In short, if you want to win or keep federal contracts, CMMC compliance isn’t optional.</p><p><br></p><p><strong>Key takeaways:</strong></p><ul><li>What CMMC is and why it exists</li><li>The importance of accurate scoping</li><li>Tools and tips to maintain CMMC compliance</li></ul><p><br></p><p><strong>Episode highlights:</strong></p><p>(00:00) Today’s topic: What is CMMC?</p><p>(02:20) What CMMC means for your business</p><p>(06:05) The nuances of scoping</p><p>(10:07) How contracts set your CMMC level&nbsp;</p><p>(13:44) Self-assessment vs third-party audits</p><p>(17:36) Maintaining CMMC compliance over time</p><p>(22:17) Perform gap assessments ASAP </p><p><br></p><p><strong>Connect with the host:</strong></p><p>Jara Rowe’s LinkedIn - <a href="https://www.linkedin.com/in/jararowe/" rel="noopener noreferrer" target="_blank">@jararowe</a></p><p><br></p><p><strong>Connect with the guest:</strong></p><p>Thomas Greco’s LinkedIn - <a href="https://www.linkedin.com/in/thomas-greco-9105994/" rel="noopener noreferrer" target="_blank">@thomas-greco</a></p><p><br></p><p><strong>Connect with Trava:</strong></p><p>Website - <a href="http://www.travasecurity.com" rel="noopener noreferrer" target="_blank">www.travasecurity.com</a></p><p>Blog -<a href="http://www.travasecurity.com/learn-with-trava/blog" rel="noopener noreferrer" target="_blank"> www.travasecurity.com/learn-with-trava/blog</a></p><p>LinkedIn - <a href="https://www.linkedin.com/company/travasecurity/" rel="noopener noreferrer" target="_blank">@travasecurity</a></p><p>YouTube - <a href="https://www.youtube.com/@travasecurity" rel="noopener noreferrer" target="_blank">@travasecurity</a></p>