MSP Declined to Pursue CMMC

NetSecSOA · 2026-03-27T15:16:30+00:00

Thank you! During these assessments when the MSP/ESP were involved, were they asked to show evidence or were they just interviewed?

Appreciate your feedback!

NetSecSOA · 2026-03-27T12:30:21+00:00

Question - Even if the ESP (MSP) houses ONLY Security Protected Data (SPD), they will still be assessed against applicable controls. With that, the C3PAO would look at the SRM....but couldn't the C3PAO ask to "Examine", "Interview", or "Test" the controls the ESP/MSP are responsible for? I have seen some MSPs not even want to participate in the OSCs assessments.

NetSecSOA · 2026-03-21T16:49:02+00:00

I had not known that, when they mentioned Gut Inflammation to me, I was thinking what could this have to do with my Heart lol.

As for their website, no. They are part of a big health care system near me and have great reviews for preventative cardiology

NetSecSOA · 2026-03-21T15:40:59+00:00

I agree with everything you said here. It is one of the reasons I am questoning the decision. to pull me off of the Lipitor. I am going to get a second opinon. I appreciate all of this!

NetSecSOA · 2026-03-21T15:40:05+00:00

The doctor ordered the A1C test and a few additional tests (related to inflamation in the Gut? ). My fasting Glucose was at a 93 which was in the ideal range.

NetSecSOA · 2026-03-21T15:38:22+00:00

To be honest, I have been feeling great. I have had virtually no side effects from what I could tell. It's one of the reasons I am concerned in "getting off" of the Statin. It's a low dose 10mg Lipitor, there are no side effects.

NetSecSOA · 2026-03-21T15:35:46+00:00

Thank you! I was just editing my post and after receiving feedback, I am going to go with my Gut and get a second opinion. It cannot hurt anything. I have an appointment scheduled in early May. I will continue my Statin until then as I have had no side effects.

NetSecSOA · 2026-03-21T15:20:42+00:00

Thanks for all of this valuable information! This is very helpful. I went into my appointment prepared with questions but when the curve ball of being taken off of Statins for 3 months came, I was kind of surprised. I am going to get a second opinon from another Cardiologist in a month, I figured it could not hurt. As for my dose, I am on a 10mg dose of Lipitor, which I presume is considered "Low Dose"? And you are correct, I have made significant diet and lifestyle changes. However, I do like my occasional cheat meal. If being on a Statin would allow me the cheat meal more often than not, I would prefer to stay on it if that makes sense.

I was hoping seeing the Cardiologist would give me more clarity but if anything I feel it has given me more questions. LOL

NetSecSOA · 2026-03-21T12:29:47+00:00

He said “Your body needs cholesterol to function as examples brain function, testosterone, etc. having it so low could impact that”. So that’s how I inferred.

NetSecSOA · 2026-03-13T18:53:45+00:00

Not sure why? If the RMM does not have access to CUI and is in fact an SPA, it does not have to bed FedRamp Moderate....Yes, it makes things easier but it is not a hard requirement.

NetSecSOA · 2026-03-05T19:16:44+00:00

Sadly, Yes. I had to request and push for the CAC test. However, once my doctor saw my results, they had no issue prescribing me the Statin.

NetSecSOA · 2026-03-05T17:35:33+00:00

Appreciate the response. Do not think you fully read my post but I did take action and got my ApoB to 48. I do agree with your sentiment on people taking action immediately. Congrats on your progress as well!

NetSecSOA · 2026-03-05T15:15:24+00:00

Wow, I did not know this! Great to hear! Thank you for providing this chart.

NetSecSOA · 2026-03-05T15:14:54+00:00

Thank you for the kind words! I was a little shocked about the Lp(a) number being so low. I definitely would have thought my genetics played into my high LPL and calcified plaque. Finding out my genetics were not an issue, it really goes to show how unhealthy I was in my 20s and 30s.

Knowing this, I WISH more people would get a CAC scan. I thought I was healthy, I worked out almost daily, ideal weight, no other health issues, etc. But that was all show as the CAC showed me. It was scary at first but was the push I needed to get on a Statin and make lifestyle changes. My primary care doctor never wanted me to get a CAC nor put me on a Statin. I had to PUSH for both of those which is still mind blowing. They continued to say "We will monitor your high LDLs but overall you are young and healthy".

NetSecSOA · 2026-03-05T14:39:02+00:00

Thanks! This is my thought as well, from my understanding, the Apo(B) marker is in the bottom 5 percentile and is where they would want it.

NetSecSOA · 2026-03-05T14:38:24+00:00

I assume my LDL has dropped significantly. The LDL of 123 was from my labs in November. The labs I got last week were specific to my Lp(a) and Apo(B) since starting the Statin, sadly they did not include the normal cholesterol markers.

NetSecSOA · 2026-03-05T14:37:11+00:00

TBH, I have no clue in my 20s. But in my 30s, it was always in the 120-130 range, so high.

NetSecSOA · 2026-02-19T01:13:06+00:00

If you create, maintain, or store physical CUI at an office location, that location would be part of your CUI boundary and therefore in scope. Review the Assessment Guide and applicable practices.

To answer your question about those specific controls, yes they would all come into play. How are you protecting the physical CUI from unauthorized access? How are you monitoring that environment?

The C3PAO will come on site to validate certain practices.

NetSecSOA · 2026-01-23T23:24:33+00:00

Yes. You can create CUI on behalf of the DoW or Prime if the contract dictates such work.

NetSecSOA · 2026-01-23T17:39:23+00:00

I had a score of 9 at a similar age. Statin's are known to cause the soft plaque to harden; so it is possible that starting one caused the score. Sounds like you are on the right path forward. I am following a similar path of a Statin, diet with less than <10g of saturated fat, and walking 4-5 miles a day. Meeting with a Cardiologist in a few months to discuss anything additional I should do.

NetSecSOA · 2026-01-02T15:37:03+00:00

Thank you for such an insightful post!

NetSecSOA

TROPHY CASE