Skip to main content
ISC2 Security Congress 2025 Main banner
 
Icon Legend
Additional Fee Required
Additional Fee Required
Pre-Registration Required
Pre-Registration Required
Onsite & Virtual
Onsite & Virtual
Onsite Only
Onsite Only
Earn CPE Credits
Earn CPE Credits
Livestreamed Session
Livestreamed Session
Included in Guest Pass
Included in Guest Pass
Session Recorded
Session Recorded
Student Experience
Student Experience

Call for Papers Proposals

Frameworks, Standards and Guidelines

The Fellowship of Compliance: Conquering CMMC Together

Wednesday, October 29, 2025
2:45 PM - 3:45 PM CT
Location: Davidson CD
CPE Credits 1
Onsite & Virtual Earn CPE Credits Livestreamed Session Session Recorded
The U.S. defense industrial base (DIB) contributes >$425 billion to the economy annually. DIB contracts have long required non-federal IT systems to safeguard controlled unclassified information (CUI) under NIST SP 800-171. However, concerns over inflated self-reporting led to the Cybersecurity Maturity Model Certification (CMMC) program, which enforces third-party certification.
Failure to meet CMMC requirements can cost contractors millions in lost revenue or fines for falsely certifying compliance. Compliance isn’t new, but CMMC certification is. While resources abound, navigating them can feel like the Misty Mountains. This session offers the Phial of Galadriel—an informed, authoritative, and sometimes painful guide to CMMC certification, viewed through the lens of a matrixed organization, and new multi-platform HPC/Linux/Windows secure enclave in a university research setting.

Learning Objectives:

  • identify authoritative resources that provide the regulatory foundation of the CMMC rule, including Department of Defense guidance, NIST 800-171 assessment objectives, and the necessity of defining assessment scope (Understanding the Quest Map).
  • develop a CMMC strategy by leveraging authoritative sources and field-tested best practices, including the use of GRC tools, RACI charts for role clarity, and identifying common pitfalls (Who are your Friends for the Quest?)
  • define what success looks like throughout the compliance journey, balancing progress tracking, key milestones, and strategies for managing the journey with heterogeneous on-premises environments (How to Make Progress on the Quest).