CMMC Uncovered
By Secure-Centric
Categories: Technology
CMMC Uncovered breaks down the real-world challenges behind CMMC, CUI, NIST SP 800-171, and cybersecurity compliance across the Defense Industrial Base. Hosted by Secure-Centric, each episode brings practical conversations with CMMC experts, assessors, contractors, and industry leaders.
14 episodes indexed on PodSearch.
Recent episodes
- We Reviewed 4 CMMC Contracts Line by Line: Do You Actually Have CUI?
DFARS 7012 is in your contract, but nobody will tell you what is CUI. CMMC consultant Kelly Hood walks through four mock contracts and shows where to look, who to ask, and how to write your own designation guide.Jake Celler sits down with Kelly Hood, a cybersecurity consultant who helps defense…
- What Is Actually CUI? A CUI Expert Explains
What is actually Controlled Unclassified Information (CUI), and how do you know if your company is handling it?For many defense contractors, identifying CUI is one of the hardest parts of preparing for CMMC Level 2. A document arrives marked CUI, but nobody can clearly explain which information…
- Inside Boeing’s Supply Chain: The CMMC Pause Isn’t a Pass
CMMC is paused, but CMMC Level 2 clauses are still showing up in contracts, and primes still want proof of NIST 800-171 compliance from defense contractors. Brett Cox of Boeing explains what suppliers need to show right now.Jake Celler sits down with Brett Cox, who works at Boeing as a CMMC…
- DOW Director of CMMC(Former) on Pause, Rulemaking & The FAR CUI Rule
CMMC is paused, but NIST 800-171, DFARS 7012, and False Claims Act exposure are not. Buddy Dees, who just retired after 38 years with the DoD and worked on CMMC from the start, explains what the deviation does and doesn’t change for defense contractors.Jake Celler sits down with Buddy Dees, a…
- DoD's Former DIB Cyber Chief Breaks Down CMMC
A welder had the entire structural design of the F-22 open on his laptop, Facebook Messenger flashing right next to it, and no idea why that mattered. Stacy Bostjanick says that moment is exactly why CMMC had to exist. She spent 37 years in federal government, led CMMC through two full rulemaking…
- How A Prime Achieved A Perfect CMMC Level 2 Assessment
CMMC Level 2 compliance is not a one-time project, and one prime's internal assessment fail came down to people not doing what the con ops said they would. Anne-Marie Castrigno led NIST 800-171 at a billion-dollar defense contractor and explains how she got to a perfect external Level 2…
- Katie Arrington on CMMC, the Pause & the DIB's Future
Katie Arrington (Former DOW CIO) helped create CMMC after a senator told her the DIB was leaking hundreds of billions in R&D to adversaries, and she says pausing it until 2028 puts national security at risk. In her most candid interview yet, she explains why she believes the current pause…
- Honeywell Paid $2M For This NIST 800-171 Mistake
Honeywell settled a False Claims Act case tied directly to NIST 800-171 and DFARS 7012 non-compliance, and the whistleblower attorney behind it says you don't have to lie to be liable, reckless disregard is enough. Renee Brooker breaks down what actually makes a strong cybersecurity fraud case and…
- CMMC Manufacturing Compliance: Why Your Scope is Wrong
Mastering CMMC compliance means knowing exactly where your boundary starts and stops. Get scope wrong and you're looking at the difference between a hundred thousand dollar implementation and a five hundred thousand dollar one.In this episode of CMMC Uncovered, Ben Huey, a 20-plus year IT who…
- Inside a Prime: CMMC, CUI & the Supplier Requirements
How do prime contractors and their partners navigate CMMC compliance together? Jake Celler sits down with Bo Birdwell from Elbit Systems to discuss the reality of collaboration.Building a strong security posture requires alignment between large defense contractors and their subcontractors. This…
- The Dark Side of CMMC: Cyber Fraud Cases You Need to Know
Lying on a CMMC self-attestation is not a breach of contract, it is fraud, and the penalties are far worse than most defense contractors realize. False Claims Act attorney Julie Bracker has personally filed over fifty cyber fraud cases, including Georgia Tech and Penn State, and explains exactly…
- CMMC Level 2 With a C3PAO: Costs, Capacity & Common Failures
CMMC Level 2 assessment costs average around $50k, far below the rumors circulating among defense contractors and government contractors. A lead CCA assessor breaks down why costs vary, why C3PAO availability isn't the crisis people think, and where audits actually fail.Jake Seller sits down with…
- DoW’s CMMC RFI: Cost, FIPS & What Needs Fixing
The DoD hit pause on CMMC, dropped an RFI, and now everyone's asking the same question: what actually changes?In this episode of CMMC Uncovered, Jake Celler and 8-year practitioner Rich Bates take the whole program apart and rebuild it, from the controls driving up cost to the confusion that's…
- The Real Cost Of CMMC: DoW Estimate Vs Contract Reality
Everyone's hearing the same scary number: $600K to get CMMC compliant. Before you panic and sign off on a six-figure budget, watch this.Most small businesses will never hit that number. The ones that do usually got there by over-prescribing solutions, over-scoping their environment, or trusting a…
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.