Скачать или смотреть Keynote - CMMC Level 2: How to Start Preparing

The CMMC regulation is final. Enforcement has begun. DOJ settlements are reaching tens of millions. Here's what you must know.

Michael Gruden, partner at Crowell & Moring and CMMC Appeals Board member, breaks down the legal framework, enforcement reality, and compliance requirements for CMMC Level 2.

⏱️ TIMESTAMPS 0:00 Introduction
4:50 Cybersecurity Retrospective: How We Got Here
7:01 DOJ Civil Cyber Fraud Initiative
10:00 CMMC Level 2 Requirements Explained
14:57 Self-Assessment vs. C3PAO Certification
16:08 Affirmations: Your Legal Compliance Hook
17:29 DOJ Enforcement: Tens of Millions in Settlements
18:34 Five Critical Takeaways for Certification
25:02 The Four-Year Rollout (What It Really Means)

KEY TAKEAWAYS

1. DOJ settlements now reaching tens of millions of dollars
2.If you have DFARS 7012 today, you're ALREADY legally obligated
3. Affirmations create additional legal compliance exposure
4. Unprivileged assessment reports = DOJ evidence in settlements
5. No contract awards without CMMC certification or self-assessment

REAL ENFORCEMENT CASES
1.Georgia Tech: $875,000 settlement for misreporting scores
2.Aerojet Turbine: $1.75 million settlement with Gallen Capital
3. Multiple ongoing DOJ investigations with whistleblower complaints

COMPLIANCE REQUIREMENTS
*Know your CUI data and where it flows
*Map your network architecture completely
*Identify technical solutions needed
*Review ALL contract clauses for hidden requirements
*Consider attorney-client privilege for assessments

📺 EXPERT SPEAKER
*Michael Gruden - Partner, Crowell & Moring
*Nearly 15 years at DoD and Homeland Security
*CMMC Appeals Board member (Cyber AB)
*Former DoD contracting officer and branch chief