MSPs for the Protection of Critical Infrastructure’s Post

Being a part of the Navy Gold Coast in San Diego for the past few days has been … interesting; not much in the #CMMC world has changed and I’ve been coming for three years. Stacy Bostjanick’s session included a lot of “raise your hand if you’ve read the CMMC Proposed Rule” type questions, and once again, very few in the huge room raised our hands. You know when Stacy tells your table to just keep their hands up, there are too few who are hearing the message. I love these events. I love starting the day saying the Pledge of Allegiance. I love thanking the multitude of men and women in uniform; and those no longer donning the uniform and working hard throughout the agencies to keep us moving forward. I wish we were more, better, stronger. But for now, I’m doing what I can to make a tiny difference. Pictured having a great time with the lady of the hour / month / year / CMMC program and my favorite frenemy, Stuart Itkin 😂

Today is an important day in the #MSP and #MSSP industry and for the #CMMC ecosystem. Summit 7 has joined together with multiple service providers who are dedicated to serving the DIB as part of the MSPs for the Protection of Critical Infrastructure, and we have authored a position paper on how to scope and assess a service provider against the security controls prescribed at CMMC Level 2. We have submitted the paper as public comment for the CMMC Proposed Rule. Hitting the SUBMIT button on the Federal Register site brings us tremendous pride. We have worked very hard to balance the need for securing our defense contractors with the objective reality of how service providers operate; we took much consideration for how this program can best serve our industry and the CMMC ecosystem. I would like to personally thank George Perezdiaz for his thoughtful collaboration and Vizio skills; as well as the following members of our group who spent countless hours with insightful questions and edits of this important document: Scott Edwards Jacob Horne Stuart Itkin Rob Wilson Saif Rahman Jason Sproesser Caleb Leidy Carly (Carlene) Logan Amy Edwards Derek Kernus, CISSP, CCSP, CCP, MBA Ed Tuorinsky Leia Kupris Shilobod, CCP, CISM Bobby Guerra Jennifer Kaufmann Brian Emerson Full paper link will be added to comments. Note that our goal was not to advise on implementation of controls for service providers; we have focused on how the scoping would apply and how to create a viable assessment program applicable to our industry.