CMMC Rulemaking with Jacob Horne

GRC Academy

In this episode Jacob Hill talks with Jacob Horne from Summit 7!

Jacob Horne is Summit 7's Chief Security Evangelist, and has a unique genetic superpower that allows him to delve into NIST publications & government regulations without experiencing even a hint of boredom!

In the episode Jacob Horne explains the history leading up to the CMMC program, when CMMC may be required, and the significance of the FAR CUI rule!

Here are some key topics we discussed:

• How he started in cybersecurity
• The history leading up to CMMC
• What is rulemaking
• The two CMMC rules we are waiting on
• When CMMC may appear in contracts
• The FAR CUI rule and its importance
• Why DHS and VA regulations were silent on NIST 800-171
• When will the FAR CUI rule drop?

Follow Jacob on LinkedIn: https://www.linkedin.com/in/jacob-evan-horne/

Summit 7 website: https://www.summit7.us/

Jacob Horne's Deep dive on CMMC rulemaking timeline: https://www.youtube.com/watch?v=qyLDQxo-YPg

Federal Rulemaking book: https://www.amazon.com/Rulemaking-Government-Agencies-Write-Policy/dp/1483352811/

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e13&utm_campaign=courses

Need a FedRAMP authorized Password Manager?

Start a free 14-day trial of Keeper: https://grcacademy.io/ref/keeper/b2b-trial/

See the CMMC controls that Keeper meets: https://grcacademy.io/ref/keeper/cmmc-controls-sheet/