CMMC Will BREAK Your MSP - Axiom's CMMC Level 2 Journey

About this episode

This episode discusses the challenges and strategies for MSPs to achieve CMMC Level 2 certification, featuring insights from Axiom's leadership.

“We built a second company from scratch…” Is that what it takes for MSPs to get CMMC'd!?! 👀 In this episode I’m joined by Bobby Guerra and Kaleigh Floyd from Axiom, an IT Managed Service Provider (MSP). They explain exactly what it took to achieve CMMC level 2 certification - after 4 years of effort. Most MSPs aren’t ready for CMMC. Many believe it's just another checkbox, but it’s a complete operational shift that requires rethinking your tools, processes, and client relationships! Here are some of the highlights: How much money they allocated for CMMC (it’s more than you think) How to build scalable and repeatable processes to support compliance The tools, contracts, and agreements you MUST have in place How to prepare for the assessment (and avoid sleepless nights!) Bobby Guerra is the CEO of Axiom and has led the MSP for over 22 years. Under his leadership, Axiom became one of the first MSPs in the U.S. to achieve CMMC Level 2 Certification. Bobby now helps guide clients through their own CMMC journeys, focusing on sustainable security and compliance. Kaleigh Floyd is the Marketing Director at Axiom and Co-Host of the Climbing Mount CMMC podcast. Raised in the MSP world, she…

People in this episode

Host: Jacob Hill

Guests: Bobby Guerra, Kaleigh Floyd

Topics covered

• CMMC
• MSP
• compliance
• cybersecurity
• operational shift
• process improvement

Keywords

• CMMC
• MSP
• compliance
• cybersecurity
• operational shift
• processes
• assessment
• tools
• contracts

Mentioned in this episode

Organizations: Axiom, Microsoft

More episodes of GRC Academy

• Deltek's Journey to FedRAMP Moderate Equivalency · November 18, 2025 · 36 min
• What's Next for GRC Academy and Jacob Hill · September 4, 2025 · 4 min
• The Business Case for CMMC - Surviving DOGE · June 19, 2025 · 53 min
• The Compliance Playbook to Cybersecurity · June 5, 2025 · 32 min
• How HITRUST Fixes What’s Broken in Cybersecurity Compliance · May 27, 2025 · 56 min
• CUI Masterclass with Ryan Bonner · May 9, 2025 · 51 min