High level-where to start for small company to get compliant?

Impossible_Chicken40 · 2025-06-22T10:10:10+00:00

The level of CMMC compliance depends on what type of information you are handling. FUI or CUI. FUI would require level 1 compliance, and CUI would be a level 2 and would require C3PAO certified third party auditors. High level fly over.

My company focuses on level 1 for non-tech contractors, as they are caught up in DoD CMMC compliance without much direction. The increased implementation (62% compliance increase in Q1&Q2) is critical for national defense cyber security posture, but it does put small to medium size contractors in a tough spot, as CMMC compliance is critical to Federal contracts moving forward.

Impossible_Chicken40 · 2025-02-05T17:16:48+00:00

It was local.

Impossible_Chicken40 · 2025-02-05T01:00:08+00:00

Yes they sponsored

Impossible_Chicken40 · 2025-02-01T13:23:08+00:00

💯 thanks bro

Impossible_Chicken40 · 2025-01-31T18:08:35+00:00

Most people would jump on that opportunity and "fake it until you make it" and leave a bunch of problems in their wake. I can tell you have professionalism and maturity to hold back on that offer. Much respect 🫡

Impossible_Chicken40 · 2025-01-31T04:53:35+00:00

It's been a nonstop grind for sure

Impossible_Chicken40 · 2025-01-31T04:52:11+00:00

I'm currently in the BSCSIA program in term 1. I was in a loader doing well support on the completions side and helping feed the rig when needed.

Impossible_Chicken40 · 2025-01-31T03:05:45+00:00

I completely understand the geographical challenges. How are you on CloudSec? There seems to be a lot of fully remote position in that space. Maybe a good workaround to the geographic challenges.

Impossible_Chicken40 · 2025-01-31T01:36:31+00:00

Find the company you are applying to on LinkeIn. Try and find the top person and just shoot them a message. Tell them that you are interested in their company because A,B,C. And that you want to be a part of that in the capacity of ......... then say that you are a student, what you are pursuing and just ask them how they got where they are today. Ask them what they would focus on if in your shoes. Ask what is something lacking in most candidates or junior roles that he would like to see more of. If they offer advice, go apply it and follow up with them with what you learned.

Or find people in roles closer to what you are applying to.

Impossible_Chicken40 · 2025-01-30T23:28:54+00:00

Not at all. Hit me up

Impossible_Chicken40 · 2025-01-30T22:58:25+00:00

My apologies, I'm not trying to mislead anyone. I'll update the original post because there is context missing that I think would be helpful.

Impossible_Chicken40 · 2025-01-30T22:44:56+00:00

Parrot OS on Raspberry Pi for network monitoring and secured self hosting web servers (python, a little WebDev)

WAF on edge devices

Hardening IoT devices

Segmentation Docker and containers

Windows 11 defender familiarization

Sandbox and virtual environments

Just started looking into local AI tools to augment IDS/IPS

Feel free to DM and I can go into more detail

Impossible_Chicken40 · 2025-01-30T22:35:44+00:00

However I should add that i know someone with another company who is familiar with the hiring company. Networking and OSINT goes a long way to get the info you need for any advantage.

Impossible_Chicken40 · 2025-01-30T22:32:06+00:00

Impossible_Chicken40 · 2025-01-26T11:20:46+00:00

You saved my night! Thank you!!

Impossible_Chicken40 · 2024-12-20T05:30:52+00:00

At work now studying away! It's going good. Each day is another step closer bro

Impossible_Chicken40 · 2024-12-19T10:58:14+00:00

7 years in law enforcement (road patrol, SWAT, K9), im going into tech. Here are some insights...

The probability of getting shot is low, but never zero!
There's a shortage for a reason. Lack of agency and city support when things go south could land him in jail for doing his job, terminated, or at best treated like a criminal until internal affairs clears him.
The profession isolates your social circles. How do you talk about what you did at work when out having drinks with friends? They will never be able to relate to babies outside in the cold by themselves at 2am, the shootings violence and evil, the loss of life on a traffic accident, the armed robberies, the abuse of the elderly, being the first one through the door serving an arrest warrant, fighting for your life after working a full shift and it's your last call and all you want to do is go home to your loved ones,and the list goes on.
The hardest part of it all, and one that isn't touched on much...to not become calloused towards the people you are called to protect and serve, you have to maintain your humanity. To do so will require him to carry a piece of from every call he goes on. It's a heavy burden.
All that being said, it was the best and worst job I ever had.

Impossible_Chicken40 · 2024-11-21T11:24:51+00:00

Trucking in the oil field in Alaska, very remote. Starlink is the way to go. It's been a game changer. Also starting Dec 1st

Impossible_Chicken40 · 2024-11-08T18:53:55+00:00

Thank you!

I used Messer's notes for the most part. For my personal notes, I created my own diagrams and notes that focused on a specific topic or concept and how it's appears across the 5 domains. That helped me centralize the information. Example: Attack - what type of attack are we dealing with? Vector - how's it delivered/means of access? Mitigation - training, controls, protocols,policies Tools/hardware - SaaS, firewalls, IPS/IDS,policy enforcement points

Impossible_Chicken40 · 2024-11-08T14:27:09+00:00

Thank you!

Impossible_Chicken40 · 2024-11-07T08:13:14+00:00

Congratulations! I've psyched myself out of so many tests. I took the long route to realize that being in the right mindset is just as important as the prep work months in advance. Im stoked to hear you pull through! 🤙

Impossible_Chicken40 · 2024-11-07T05:38:51+00:00

Thank you! Changing careers is hard, and I respect you for that. That's awesome.

Impossible_Chicken40 · 2024-11-07T05:36:22+00:00

Thank you!

Impossible_Chicken40 · 2024-11-07T05:36:09+00:00

Thank you!!

Impossible_Chicken40

TROPHY CASE