Cuick 10

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Carter Schoenberg, Vice President - Cybersecurity & Chief Cybersecurity Officer at SoundWay Consulting Inc., to discuss how the CMMC ecosystem is evolving now that regulatory requirements are becoming enforceable.Carter shares firsthand insights from conducting assessments as a C3PAO, including how demand has shifted dramatically following key rulemaking milestones. The conversation explores the growing urgency among contractors, common misunderstandings about timelines, and the variability organizations are encountering in early assessments.They also break down why many companies are still underprepared, the importance of realistic expectations, and what lessons from the front lines can help organizations better navigate the path to certification.Tune in for a candid discussion on what’s changing in CMMC—and what it means for contractors moving forward.

To kick off Season 3, Derek White, COO of Cuick Trac, sits down with Kyle Lai, President & CISO at KLC Consulting, to discuss what makes someone truly effective in the CMMC consulting space. Kyle brings unique perspective as both an experienced assessor and a trusted advisor to organizations navigating DFARS, NIST 800-171, and CMMC compliance.In this episode, they explore what separates technical know-how from true client impact—from soft skills like listening and empathy to real-life stories of consulting gone wrong (and right).

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by James Harper, CEO at Quatronics, to break down FIPS encryption, validated crypto modules, and how governance underpins both CMMC compliance and long-term company growth.James shares real-world examples of where small businesses stumble—from improper data mapping to lack of documented roles—and explains how CMMC can be a catalyst for sustainable scaling. If you’ve ever asked, “Do I really need FIPS validated equipment?” or struggled to track CUI across your team, this one’s for you.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Heather Siemens, CEO of iFortress, to explore the growing call for standardization across federal cybersecurity frameworks — particularly for contractors serving both defense and energy sectors.Heather shares lessons from her background in NERC compliance, the challenge of overlapping frameworks like NIST SP 800-171 and NIST 800-161, and what needs to happen for agencies like DoD, DOE, and DHS to speak a common cybersecurity language.

In this episode of the Cuick 10 Podcast, Derek White, COO of Cuick Trac, is joined by James Harper, CEO of Quatronics, to explore two critical — and often misunderstood — areas of cybersecurity compliance: FIPS encryption and corporate governance.James shares practical insights on what FIPS-validated encryption actually means (and doesn’t mean), where it’s required, and how misconceptions around equipment can lead to costly and unnecessary decisions. More importantly, he makes the case that governance — not just tech — is the backbone of scalable, effective CMMC compliance.Whether you're confused about encryption, overwhelmed by data flows, or wondering how to grow securely, this episode offers a down-to-earth look at getting CMMC right.

n this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, sits down with Dy Edington, Director of Information Security at AV, to share lessons from the front lines of achieving CMMC certification. Dy offers a behind-the-scenes look at what it takes to drive a successful compliance program—from cross-functional alignment to hands-on training and executive support.Whether you're early in your journey or already preparing for assessment, this episode is packed with practical insights.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Eric Levitas, Vice President of Business Development at ControlCase, to unpack why mock assessments are more critical than ever for defense contractors navigating CMMC.Eric explains the most common mistakes he sees contractors make when jumping straight into their C3PAO audit, how to properly prepare your scope and documentation, and what the mock assessment process really looks like from a third-party assessor’s point of view.Tune in for expert guidance on how to get audit-ready — without the panic.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Tom Conkle, CEO of Optic Cyber Solutions, to discuss the often-overlooked importance of the Customer Responsibility Matrix (CRM) in CMMC compliance.Tom shares firsthand experience from CMMC readiness engagements where organizations mistakenly assumed their MSPs had implemented necessary controls—only to discover critical gaps. He breaks down how the CRM acts as a communication bridge between managed service providers and OSCs, what should be included in a CRM, and why documenting shared responsibility is now a requirement under the final rule.Tune in to learn how better documentation, communication, and ownership can prevent serious compliance failures.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Justin Hensley, Principal Program Manager at CloudFit Software, to explore how Virtual Desktop Infrastructure (VDI) is helping defense contractors scale securely.Justin discusses the recent DoD VDI memo and how it has changed the game for flexibility, cloud-first strategies, and scalability in CMMC compliance. He also shares how CloudFit is helping organizations use Microsoft Azure Virtual Desktop environments to reduce CAPEX, improve collaboration, and integrate tools like AI and secure messaging.From CAD workloads to real-time collaboration, this episode dives into how SMBs and federal partners can modernize their environments without breaking their workflows.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer of Cuick Trac, is joined by Michael Greenman, Sr. Product Marketing Manager at Deltek, to unpack the latest industry data and FedRAMP developments shaping the CMMC landscape.They discuss the significance of FedRAMP Moderate Equivalency, cloud security documentation best practices, and the must-ask questions when evaluating cloud service providers. Michael also reveals new statistics from Deltek’s Clarity Report, including how much contractors are spending to prepare for assessments—and how many plan to get certified in 2025.

In this episode of the Cuick 10 Podcast, Derek White, Chief Operating Officer at Cuick Trac, is joined by Amy Williams, Vice President of CMMC at Coalfire Federal. Together, they unpack the real value of CMMC preparation—from mapping CUI data flows and understanding current vs. desired states, to reducing scope and aligning security with business priorities.Amy shares lessons from the field, including why SMBs must recognize their role as valuable targets, how user behavior plays into breach risk, and why empathy, education, and long-term partnership are essential to strengthening the DIB.

In this episode of the Cuick 10 Podcast, Derek White, COO of Cuick Trac, is joined by Scott Singer, CEO of CyberNINES, for a fast-paced conversation following CyberNINES' successful DIBCAC assessment.Scott breaks down what organizations should be doing now to prepare — including the role of mock assessments, the impact of managed service providers (MSPs), and the evolving guidance assessors are working through. Whether you're scheduling your assessment or just getting started, this episode offers timely and tactical advice from someone who's just been through it.