Cuick 10

por Derek White

Gobierno Tecnología

Temporada 2

Automation, Accessibility & the Future of CMMC Docs

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Jody Stoehr, Co-Founder and CRO at SMPL-C, for a conversation filmed at CUICON 2025. Jody discusses how automation is helping defense contractors overcome the documentation burden tied to CMMC compliance. She explains why SMBs often lack a starting point for documentation, how scalable solutions can offset the supply-and-demand problem for expert support, and why simplifying the user experience is critical for sustained adoption. This episode also touches on the broader cultural shift needed across the Defense Industrial Base — from education to funding — to help innovators succeed and protect national security.

Accountability, MSPs & Keeping CMMC Clean

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Leia Kupris Shilobod, Chief Security Officer at CompliancyIT, to discuss how contractors can build a sustainable and accountable compliance program. Leia shares practical strategies for holding your MSP or MSSP accountable, including the use of Customer Responsibility Matrices (CRMs), quarterly compliance check-ins, and risk management meetings. She highlights how even small oversights—like forgotten test accounts or misassigned user access—can break compliance, and explains how documentation and communication keep programs audit-ready. Filmed live at CUICON 2025, this episode offers advice for contractors looking to take ownership of their cybersecurity posture — without assuming their vendors have it all covered. Watch the full Episode on YouTube.

Culture, Accountability & the CMMC Journey

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Mark Berman, CEO of FutureFeed, for a live conversation from CUICON 2025 in Tampa. Mark shares insights into how FutureFeed’s approach to CMMC goes beyond checklists, emphasizing cultural change, documentation, and accountability. They explore why the RACI model is key to operationalizing security and how middle management often leads the charge in educating leadership. Mark also previews CEIC West 2025—including the popular pre-conference CCP training.

Meeting the Moment: Microsoft, AI & Security in the Defense Ecosystem

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Vishal Amin, General Manager of Security Solutions at Microsoft, to discuss how Microsoft is helping the defense community navigate rapid changes in security, compliance, and AI innovation. Recorded live at CUICON 2025, Vishal explores the role of GCC High, Microsoft Sentinel, and security automation in supporting both large integrators and SMBs across the Defense Industrial Base. He shares how partnerships, platforms, and AI-driven tools are converging to enhance threat detection and compliance readiness in a dynamic threat landscape. Watch the full Episode on YouTube.

AI, Compliance & CUI: What Defense Contractors Need to Know

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Carley Salmon, Senior Security Specialist at Microsoft Federal, to discuss the intersection of AI, compliance, and CUI protection. Carley shares insight from her experience at DCMA, DIBCAC, and Microsoft, focusing on what organizations need to know about using generative AI tools like Copilot in regulated environments. She explains why labeling and access control are more critical than ever — and how security, not just productivity, needs to drive adoption in the defense space. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

Legal Reality Check: CMMC's Day-One Impact

In this episode of the Cuick 10 Podcast, filmed live at #CUICON 2025, Derek White, Chief Operating Officer of Cuick Trac, is joined by Eric Crusius, Partner and Government Contracts Practice Chair at Hunton Andrews Kurth LLP, to talk about what CMMC “Day One” really means from a contracts and legal perspective. Eric explains how compliance expectations shift once the rule is finalized — including the shift away from lenient SPRS self-assessments and toward mandatory control coverage with limited room for POA&Ms. He also shares why your system security plan is one of the most important compliance documents you’ll ever create, and how legal missteps are likely to be enforced going forward. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

Consultants, Compliance, and the Truth About Turnkey

In this episode of the Cuick 10 Podcast, recorded live at #CUICON 2025, Derek White, Chief Operating Officer of Cuick Trac, is joined by Amanda Adams, Founder & CEO of GSec LLC, to talk about what really goes into supporting organizations through the CMMC journey. Amanda shares her perspective as a longtime RMF practitioner and consultant, offering insight into the realities of documentation, scoping, and the evolving ecosystem. She also addresses the misconception that CMMC is something you can “buy off the shelf” — and why organizations need both education and flexibility to do it right. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

CMMC at Scale: Securing Enterprise & Supply Chain

In this episode of the Cuick 10 Podcast, filmed live at #CUICON 2025, Derek White, Chief Operating Officer of Cuick Trac, is joined by Chuck Orlowski, BISO/CISO at GE Vernova, to discuss the challenges of managing CMMC compliance at enterprise scale. Chuck shares how his team is driving cultural change across one of the world’s largest energy portfolios while tackling CMMC readiness internally and throughout their supply chain. He speaks candidly about what’s still unclear from the DoD, the risks of ignoring contract implications, and why smaller contractors need shared solutions to survive the cybersecurity demands being pushed downstream. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

CMMC Assessments Are Here: What You Need to Know

In this episode of the Cuick 10 Podcast, filmed live at #CUICON 2025, Derek White, Chief Operating Officer of Cuick Trac, is joined by Fernando Machado, Managing Principal and CISO at CyberSec Investments, to share lessons from the first wave of official CMMC Level 2 assessments. Fernando explains how the landscape has changed now that C3PAOs are actively certifying OSCs, what contractors should expect during scheduling, and what happens if you’re not ready. He also addresses the nuances around significant changes to a system post-certification — and what still needs clarification from the DoD. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

Bridging the Gaps: DFARS vs. CMMC

In this episode of the Cuick 10 Podcast, filmed live at #CUICON 2025, Derek White, Chief Operating Officer of Cuick Trac, is joined by Carter Schoenberg, Vice President & Chief Cybersecurity Officer at SoundWay Consulting, to discuss the often-misunderstood divide between DFARS contract requirements and CMMC Level 2 assessments. Carter shares what he’s seen across dozens of readiness reviews and client assessments—including how organizations are still falling short when it comes to incident response planning, asset inventory, and understanding their obligations. He also explains why contractors should be getting on a C3PAO’s schedule sooner rather than later—before the demand outpaces capacity. Watch the full Episode on YouTube: https://www.cuicktrac.com/cuick-10-podcast/

5 de 8