CMMC 2.0: Important Updates and Strategic Opportunities for Contractors

Thank you

Please remember to fill out the survey.
https://www.surveymonkey.com/r/web33122
This course has ended. Registered attendees can access their certificate here: https://www.pathlms.com/ncma/courses/36098/certificates/46016

Description

Description:
Cybersecurity Maturity Model Certification (CMMC) 2.0, released in November 2021, impacts both bid and proposal and supply chain processes. Additionally, CMMC may present strategic opportunities for contractors to win more work and build stronger teaming and partnering relationships. Get up to speed on these changes and recognize the importance of continuing to drive toward certification. Join Baker Tilly Principal Matt Gilbert, a CMMC provisional assessor and participant in the CMMC-AB working groups, to assess how the changes may impact your organizational processes.

Learning Objectives:

Discuss an overview of the updated CMMC 2.0 framework, and review what has changed in CMMC certification, eligibility, and requirements.
Identify changes needed to adjust your bid/proposal and supply chain processes to ensure compliance with DFARS and CMMC requirements.
Describe the strategic opportunity CMMC presents to win more work, and build stronger teaming and partnering relationships.

CMBOK Competencies:

3.1, "Regulatory Compliance"
3.4.4, "Laws and Regulations Relating to Government Contracts"

Level of Difficulty: Intermediate

Intended Audience: Government contractors, contract and procurement professionals

Contributors

Matt Gilbert, CISA, CRISC, Baker Tilly Principal

Matt Gilbert is a principal in Baker Tilly's risk advisory practice who leads our Cybersecurity Maturity Model Certification (CMMC) and Government Contractor IT Risk suite of services. He joined Baker Tilly in 2020 and previously worked in an international firm’s risk assurance practice for 18 years. Matt has led IT audits and cybersecurity assessments for large primes down to smaller 8A contractors. His expertise includes internal auditing, SOX compliance, information technology controls, business process controls, and ERP risk and controls. Examples of these engagements include CMMC Readiness assessments, 800-171 implementation projects, 800-53 based ATO readiness reviews, IT Risk assessments, Sarbanes-Oxley compliance, internal audit, pre- and post-implementation assessments, and privacy assessments for clients. Matt is actively engaged in supporting government contractors, grant recipients, state and local governments and federal agencies navigate the CMMC requirements but has extensive experience supporting NIST 800-171 and 800-53 related assessments. He has also run fully co-sourced internal audit engagements for large clients (multi-billion dollars in revenues) in the government contracting industry.

Thank you

Description

Contributors

Matt Gilbert, CISA, CRISC, Baker Tilly Principal