Transitioning from NIST 800-171 Self-Attestation to CMMC Certification: Get the Latest on "The Virtual CISO Podcast" from Pivot Point Security
The US Department of Defense (DoD) is moving decisively to roll out its new Cybersecurity Maturity Model Certification (CMMC) program across the Defense Industrial Base (DIB). What are the implications for DoD subcontractors? Is it "safe" to delay implementing CMMC controls? The latest episode of "The Virtual CISO Podcast" from Pivot Point Security shares the latest on these looming issues.
HAMILTON, N.J., May 18, 2020 /PRNewswire-PRWeb/ -- The DoD's CMMC program is moving steadily and unavoidably forward. Suppliers of all sizes across the DIB need to be ready for this new certification program, which will supplant the current NIST 800-171 self-attestation regime at an accelerating pace.
How fast will the transition happen? What organizations will it impact first? How will suppliers' information security requirements change in the interim?
To help SMB subcontractors and other suppliers to DoD prime contractors understand what they need to do to prepare for CMMC, and how much time they have to do it, the latest episode of The Virtual CISO Podcast from Pivot Point Security features Stuart Itkin, VP of Products and Marketing for Exostar, a secure collaboration and supply chain management service provider that is uniquely critical and connected across the entire DIB.
Hosting the podcast, as always, is Pivot Point Security's CISO and Managing Partner, John Verry. John has a wealth of experience helping companies that process sensitive government data comply with regulatory mandates like NIST 800-171, CMMC and FedRAMP.
If your organization participates in DoD contracts and is currently subject to NIST 800-171 self-attestation requirements, you won't want to miss this fresh, fast-moving conversation. Topics you'll hear about include:
- What the CMMC rollout will look like for DoD suppliers, including the timetable and roadmap
- How CMMC compliance expands on today's NIST 800-171 requirements
- What it means to be "audit-ready"—and how the DoD plans to ramp up NIST 800-171 enforcement
- When your business needs to be CMMC compliant
- What Exostar does and why you should care
To listen to this episode at any time, along with any of the growing list of episodes in The Virtual CISO Podcast series, visit this page: https://www.pivotpointsecurity.com/the-virtual-ciso-podcast.
About Pivot Point Security
Since 2001, Pivot Point Security has been helping organizations understand and effectively manage their information security risk. We work as a logical extension of your team to simplify the complexities of security and compliance. We're where to turn—when InfoSec gets challenging.
SOURCE Pivot Point Security

Share this article