CMMC Level 2 Assessments - What to Expect and How to Avoid Disaster

About this episode

This episode features CMMC Lead Assessor Fernando Machado discussing the CMMC assessment process and how to prepare for it effectively.

Preparing for a CMMC assessment, but don't know what to expect? Get ready to learn from CMMC Lead Assessor Fernando Machado as he explains EXACTLY what happens in each phase of the CMMC assessment process! Fernando is the Managing Principal of Cybersec Investments which is an authorized C3PAO. Fernando has been involved with CMMC starting in 2020 as a member of the Cyber AB's Standards Management Industry Working Group. Cybersec Investments has already issued 12 CMMC certifications since CMMC assessments began in January of 2025 and previously participated in nearly 20 Joint Surveillance Voluntary Assessments (JSVAs). 👉 Here are some highlights: What to expect during a CMMC assessment The 4-phases of the CMMC Assessment Process (v2.0) No self-assessment? No independent assessment Common issues that could cause assessment failures How to make the assessment easier for your assessor (and you) It is overwhelming preparing for a CMMC assessment, but don't go into it without knowing what to expect! What were your biggest takeaways? Let me know in the comments! Follow Fernando on LinkedIn: https://www.linkedin.com/in/fernando-machado-cissp-cism-cca-ccp-5b5581124/ Cybersec Investments…

People in this episode

Host: Jacob Hill

Guest: Fernando Machado

Topics covered

• CMMC assessment
• cybersecurity
• compliance
• risk management
• assessment process

Keywords

• CMMC
• assessment
• cybersecurity
• compliance
• risk management
• Fernando Machado
• Cybersec Investments

Sponsors

Vanta

Mentioned in this episode

Organizations: Cybersec Investments, Cyber AB

More episodes of GRC Academy

• Deltek's Journey to FedRAMP Moderate Equivalency · November 18, 2025 · 36 min
• What's Next for GRC Academy and Jacob Hill · September 4, 2025 · 4 min
• The Business Case for CMMC - Surviving DOGE · June 19, 2025 · 53 min
• The Compliance Playbook to Cybersecurity · June 5, 2025 · 32 min
• How HITRUST Fixes What’s Broken in Cybersecurity Compliance · May 27, 2025 · 56 min
• CUI Masterclass with Ryan Bonner · May 9, 2025 · 51 min