Become equipped with the knowledge to propel your organization toward CMMC Level 1 & 2 compliance and certification readiness.
Who Should Attend:
· Manufacturers that currently hold or anticipate obtaining a contract DoD requiring compliance with DFARS, or supplies products to the DoD, should attend this training.
· Anyone responsible for overseeing your company’s cybersecurity compliance program, including the business owners, management staff, and senior leadership.
Session 1: Risks and Requirements
· Legal, regulatory, and policy-based drivers for protecting our nation’s sensitive data.
· Details of FAR, DFARS 7012, 7019, 7020, 7021, FISMA, EO 13556, NIST 800-171, FedRAMP & their requirements.
· Learn how to identify and mark FCI and CUI.
Session 2: The CMMC Program
· CMMC program and how the Defense Supply Chain is a part of it.
· CMMC Model Architecture and its Ecosystem.
· Self-assessments and third-party assessments.
· CMMC model domains, practices & CMMC model taxonomy.
· CMMC Assessment methods and the role of compliance evidence documentation.
Session 3: CMMC Scoping & its Critical Role in Certification
· Specific scoping components & asset-types required for CMMC certification
· Process to effectively build a proper CMMC scope
· Data flow diagrams & System Security Plans (SSPs) for proper documentation.
· Inheritance, non-duplication efforts, & cloud providers to make certification easier and more likely.
Session 4: The CMMC Assessment Process
· CMMC Assessment Process (CAP), used in certification assessments.
· Evidence methods used during an assessment.
· Adequacy and sufficiency requirements of evidence enforced during an assessment.
· Detail the four stages of a CMMC certification assessment.
· CMMC 2.0 Final Rule requirements, rollout timeline, & impact to subcontractors if NOT compliant.
· Review the CMMC Level 1 and CMMC Level 2 practices to fully understand the technical requirements
Cost per attendee for BNMA members: $395
Registration fee includes all course materials and light refreshments for each session. Due to limited seating, only manufacturers will be able to attend.