
CMMC - CPCSC Training
Overview of the CMMC and CPCSC frameworks, how they relate to DFARS/ITSP.10.171, what FCI actually means, and why primes are pushing compliance requirements down the supply chain. Sets the baseline for who needs what level and by when.
Module 1: The Landscape — CMMC, CPCSC, and Why Now
Covers the AC practice family: limiting system access to authorized users, devices, and processes; controlling connections to external systems; and practical steps for shop-floor and office environments with mixed IT maturity.
Module 3: Access Control
Module 5: Media Protection & Physical Protection
Covers the MP and PE practice families: sanitizing or destroying media containing FCI, and restricting physical access to systems, equipment, and facilities — including practical guidance for manufacturing floors and shared workspaces.
Covers the SI practice family: identifying, reporting, and correcting system flaws in a timely manner; maintaining protection from malicious code; and monitoring systems for security alerts.
Module 7: System & Information Integrity
What a CMMC Level 1 self-assessment legally represents, the False Claims Act exposure tied to unsupported attestations, and why documentation — not just implementation — is what protects you.
Module 2: Self-Assessment vs. Self-Certification — Understanding the Stakes
Covers the IA practice family: verifying user and device identities before granting access. Password policy basics, account hygiene, and closing common gaps around shared logins and generic accounts.
Module 4: Identification & Authentication
Covers the SC practice family: monitoring and controlling communications at system boundaries, and separating publicly accessible systems from internal networks. Includes a plain-language look at firewalls, segmentation, and common vendor/IT misconceptions.
Module 6: System & Communications Protection
Hands-on session to consolidate the gaps identified across Modules 3–7 into a prioritized remediation plan, a starter policy/documentation set, and an evidence package structured to support your self-assessment — the deliverable you walk away with.
Module 8: Building Your Evidence Package & Action Plan
