Attestation, scoring, evaluation, and business process in achieving improved cybersecurity posture and compliance

Joy Beland joins Felicia to discuss:

• What Edwards Performance Solutions is doing in the CMMC training space
• Joy's team created the CMMC assessor textbook
• Many orgs have cybersecurity insurance enforcement for the first time ever
• Joy's extremely wise metaphor and perspective on cybersecurity insurance (15 mins)
• Transfer of risk and economic destruction
• DMARC, DKIM, SPF tuning
• What tools exist to help the SMB market with attestation, and establishing patterns of due care and due diligence?
• IS policies and processes are required as part of the proof mechanism
• Mechanisms to actually evaluate risk so that business leaders can make effective decisions
• Control planes for infrastructure

Joy's sage advice: "Know what the crown jewels are."

Learn to identify wasteful practices with Gemba walks.

https://www.creativesafetysupply.com/content/PPC/gemba/index.html

CMMC 2.0 scoping analysis

https://www.linkedin.com/feed/update/urn:li:activity:6889627454466469888/

Future Feed for CMMC orgs

https://futurefeed.co/

https://qpcsecurity.podbean.com/e/the-real-reason-you-cannot-afford-to-have-a-cybersecurity-incident/

 

Special guest:

Joy Beland, a CMMC Provisional Assessor and CMMC Provisional Instructor, who works with Edwards Performance Solutions as a Senior Cybersecurity Consultant.  Joy owned an MSP for twenty-one years in Los Angeles.  She has a CISM and Security+ certification.