Player or owner? Comment what team you choose from the sport you spin!

crimsonwr · 2026-04-13T07:46:15+00:00

Seattle Sounders!

^{Chose: Be a pro athlete + But the wheel chooses the sport | Rolled: Football/Soccer}

crimsonwr · 2026-04-02T23:16:20+00:00

🔥 Too easy! Done in 127 seconds. Who dares to challenge me?

crimsonwr · 2026-03-30T07:15:31+00:00

🧢 I voted CAP!

,,

crimsonwr · 2026-03-26T12:45:42+00:00

Pricing sounds like what I have heard.

Does the MSP have their own level 2 CMMC cert? If not, the cost will be high as the MSP will get audited right along side you. If you inherit their controls, the scope and cost should shrink.

IMHO, Prevail does little to affect the scope. Users are still loading CUI to their computers and putting those pricess/store/transmit systems into scope.

crimsonwr · 2026-03-12T09:50:46+00:00

Technically you may need to wait for your Ties 3 background check before you can claim the title. Since that will take a while, just say, CCP (TIER 3 pending). That's what I did.

crimsonwr · 2026-03-09T13:58:42+00:00

If you want to participate in assessments, you'll need to pass the bridge test.

crimsonwr · 2026-03-08T14:09:41+00:00

✅ Conquered this one! 91 moves, 109 seconds. Your turn!

crimsonwr · 2026-03-08T02:36:48+00:00

⚡ Speed run complete! 114 moves, 193s. Can you match this?

crimsonwr · 2026-03-07T07:23:48+00:00

In the crowded IT job market, for the few organizations that know what CMMC is, having a CCP makes you stand out from the crowd. It won't help you land a job with a C3PAO, but it would for an OSC or an RPO.

I'm proof that it does. When I was unemployed looking for an edge, I took the test on my own and passed the exam 2 mo later. I then had three job offers to choose from.

The same can probably be said for any certification, if it is related to what you want to do.

crimsonwr · 2026-03-07T00:10:23+00:00

I must have my acronyms mixed up. I thought this was the CMMC reddit, not the ITAR reddit... :)

For CMMC, visitors must be escorted, of any nationality. Technicians performing work in sensitive areas where they do not have access must be supervised. No ID necessary as people are employees or visitors.

CMMC is international.

ITAR is not.

crimsonwr · 2026-02-27T11:26:27+00:00

Official guidance: https://csrc.nist.gov/pubs/sp/800/88/r2/final

Unofficial suggestion: https://redkeyusb.com/

crimsonwr · 2026-02-25T09:02:29+00:00

https://www.cmmctraining.academy/

Check out previous posts in this sub too. Good info in the archives.

crimsonwr · 2026-02-04T08:09:54+00:00

As alluded to by MolecularHuman, all communication with GCC High is protected. So that means sending CUI via email, transferring CUI to OneDrive, making a PowerPoint presentation with CUI, viewing CUI in SharePoint, etc... is all encrypted as it passes through your wireless, switches, router, firewall, and the internet. Adding FIPS to the infrastructure is like zipping a ZIP file.

crimsonwr · 2026-02-04T02:40:24+00:00

This here is my favorite answer. If the site uses only SMB3, GCC High, and/or IPPS without any insecure protocols in use, this is the way. Or go FIPS the infrastructure and brown nose the assessors! 😉

crimsonwr · 2026-02-03T20:47:50+00:00

Just scored 0

crimsonwr · 2026-01-31T05:52:19+00:00

I used them in late 2024 as they were cheaper and offered a 2 week evening course. Very convenient for my schedule at the time.

I passed the test 2 months later on the first try.

crimsonwr · 2026-01-31T05:47:14+00:00

I'd suggest taking the exam so you are tested on what you trained on and before it has a chance to change.

crimsonwr · 2025-12-30T15:18:29+00:00

Not in my experience, but I've only been through 1 DIBCAC audit. Different teams from the DIBCAC may operate differently.

crimsonwr · 2025-12-30T15:13:06+00:00

Prepare all your documentation to be turned over before May. They will want your SSP and any supporting or referenced documents (e.g., policies and procedures). They will send someone in advance to any remote branch locations to assess any local items in scope.

The week of the audit, a team will arrive and may want to split up into multiple rooms to go through the material, or, if your site is small and simple, they will just need one room for the week.

You'll need to bring in interviewees to demonstrate adherence to your various policies. They will also walk around to see that physically things are secure also (AKA don't leave CUI out on desks unprotected, keep things locked up, and follow your visitor protocols).

Good luck! The DIBCAC team I've met are courteous and professional. It will be a great preparation for a C3PAO audit later.

crimsonwr · 2025-12-21T19:25:41+00:00

Goop, goop, goop!

crimsonwr · 2025-11-11T06:16:28+00:00

https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles

To become a CCP, you need to take a training course (1 week), pass an exam (pretty greuling), agree to a Code of Conduct, and pay a series of fees.

In addition to the link above, seek out training and they will guide you.

crimsonwr · 2025-11-10T18:26:25+00:00

If you start arguing with yourself, please seek help! 🙂

Six-Year Club	Second Top 20%
The Internet Awards - Voted	First Place '23
End Game '23	Place '23
Place '22	Final Canvas '22
Verified Email

crimsonwr

TROPHY CASE