▲ 1 r/CMMC

What if contract has DFARS requirements but no CUI is ever sent??

Aloha!

So from what I'm seeing and understanding, we get contracts that have the DFARS clauses but no data/documents/blueprints are ever marked with CUI. So can we ask the contracting officer to remove those clauses?

Also, who is above the contracting officer?

reddit.com
u/xxxTech007 — 15 hours ago
▲ 7 r/CMMC

What if the diagrams and schematics are decades old, still CUI??

So what if an org handles parts for something that was designed and built decades ago? These parts are also used commercially as well as by the military so this info can be accessed by the public. But most of the diagrams and what not are very very old and pre date DFARS and CMMC. So do we still need to consider it CUI if it's being sent to us marked as CUI?? It seems that the folks sending some of the info over are not even sure why some things are tagged with CUI. Like there will be email discussions that don't involve and FCI/CUI but they are still tagged. But really confused by the older stuff. Help!! lol Thnx

reddit.com
u/xxxTech007 — 1 day ago
▲ 3 r/CMMC

Ok, if an org handles CUI via email, do we need to use 365GCC or can we use 365 commercial licenses?

Confused on this one and need some clarification please.....

reddit.com
u/xxxTech007 — 8 days ago
▲ 3 r/CMMC

Confused about needing L1 vs L2.....

Aloha,

Ok, so if a company handles both FCI and CUI, do they need to have passed the SPRS with L1 and L2 scores???

I thought that if you're doing L2 then that would cover what is needed for L1.

reddit.com
u/xxxTech007 — 10 days ago

When the CEO says, "I feel this is a great match" at the end of the 2nd interview......

Aloha!

I had a second interview with the ceo, owner and a current manager. They seemed very impressed with my skills and experience. Toured me around the building and the owner even started using phrases like, "You'll be this or that, We'd like you to do xxx". At the end of the interview, the ceo said, I feel this is a great match.

I sent a follow up thank you email and for the first time in my 20yr career, the ceo responded with a lengthy email that again said, "We believe your experience aligns well with our needs and future goals". I've never had that happen, ever!

I feel very positive that I will get an offer but wanted to see what y'all think.

Thanks!

reddit.com
u/xxxTech007 — 12 days ago

When the CEO says, "I feel this is a great match" at the end of the 2nd interview......

Aloha!

I had a second interview with the ceo, owner and a current manager. They seemed very impressed with my skills and experience. Toured me around the building and the owner even started using phrases like, "You'll be this or that, We'd like you to do xxx". At the end of the interview, the ceo said, I feel this is a great match.

I sent a follow up thank you email and for the first time in my 20yr career, the ceo responded with a lengthy email that again said, "We believe your experience aligns well with our needs and future goals". I've never had that happen, ever!

I feel very positive that I will get an offer but wanted to see what y'all think.

Thanks!

reddit.com
u/xxxTech007 — 13 days ago
▲ 0 r/CMMC

What are the main differences between L1 & L2??

Aloha!!

Looking to take on a role with an org that is going for L2. I've mainly worked on L1 but wanted to see what y'all think are the main differences between the two.

Thanks!

reddit.com
u/xxxTech007 — 16 days ago
▲ 10 r/CMMC

Interviewing for a Compliance mng role, org needs L2 by Nov...

Aloha!!

So, I'm interviewing for a Cybersecurity & Compliance Mngr role. But they told me they need L2 compliance by Nov. But I wasn't clear if they need final c3pao or just a poam and sprs score.

Since we're just about 3 months away from Nov, I feel there's not much time to get acquainted with their systems and where they are at now.

Any ideas or suggestions?? Of course I'll get more clarity in the next interview this week but just wanted to see what the masses thought.

Thnx!

Edit: They are not asking me to get them to L2 by Nov, I should've said they want me to maintain and lead the compliance. So I would think they're not starting from the beginning. They're already L1.

reddit.com
u/xxxTech007 — 17 days ago

20Yrs in IT, no certs, where should I start???

Aloha!!!

So yeah, I've worked in IT for about 20yrs now, 11 as an IT Manager. I have a wide range of experience and skills but never got any certs.

Now I'd like to focus on Security and CMMC. But I'm not sure if I should start with Sec+ or something else.

Any suggestions as to what certs I should look at considering my experience?

Side note, I'm not very academic and that's why I've shy'd away from certs. When I take practice tests, they seem to be wrong because it's not the way the vendor taught vs real world scenarios.

Any guidance would be appreciated.

reddit.com
u/xxxTech007 — 22 days ago
▲ 20 r/CMMC

With CMMC Phase 2 suspended for now, how does this affect CMMC consultants, not auditors but consultants that help with SSP, Poa&M's, etc?

I guess it wasn't too much of a shock about yesterdays news. But I'm curious as to how this affects consultants in this area.

The requirements for FUI/CUI are still there and if you need L2, you'll still need to implement all controls and have documentation. So, how are you or your org discussing this change and what changes will you make or not make???

reddit.com
u/xxxTech007 — 1 month ago

Under 20 shares but over 800% gain!!! Just hold????

Aloha!!

So, back during covid, I was really getting into Rocket Lab and what they were doing. Then I bought some stock, I got in at $3.50!!! But then with covid, I got scared I guess and sold it all : (

I got back in at $15, but bought under 20 shares. Now those shares have gained over 800% and that's awesome!!! But what do I do now?? I'm not going to get rich off these shares but I feel I should still hold long term.

Thoughts???

reddit.com
u/xxxTech007 — 3 months ago

ORBT way up this morning!!!

UGH, I so wanted to buy this stock last week!!! Robinhood app doesn't carry it and takes too long for money to transfer over to Schwab. So I totally lost out from buying last week!

Can't believe how much they are up today. Wonder how much it will fall this week.

reddit.com
u/xxxTech007 — 3 months ago
▲ 58 r/ETFs

If you're in your mid 50's not much in savings; What ETF's would you invest in that is more aggressive?

My thinking may be wrong here lol but, if you're in your mid 50's and don't have much in savings, would you be putting your money in more aggressive ETF's?

If you were in your 20's then you would have time to put money into safer ETF's for the long haul. But if you're in your 50's, you don't have that kind of time so I would imagine you wan to be more aggressive.

Am I correct in this thinking?

reddit.com
u/xxxTech007 — 3 months ago
▲ 3 r/ETFs

How will SATS do with the Spacex IPO??

I like SATS a lot as well as xovr and dram. But how do you think they will do with the spacex IPO? Will they pop? I'm hoping so and then dumping. Thoughts??

reddit.com
u/xxxTech007 — 3 months ago
▲ 0 r/ETFs

Want more exposure to Spacex, if you had $5k today, where would you put it?

If you had $5K to put into some etf's or stocks that would be affected by the Spacex IPO, what would you go with? I like SATS, DXYZ, AGIX, NASA

Edit: The thing is, I'm not trying to buy spacex stock, I want to make money on the other stocks that will pop when the spacex IPO happens.

reddit.com
u/xxxTech007 — 3 months ago
▲ 6 r/ETFs

Are ETF's better to have than stocks or just diversify with both? (new)

New to this, so be nice lol

I would imagine that one should diversify with ETF's and stocks?
Thoughts?

reddit.com
u/xxxTech007 — 3 months ago
▲ 1 r/ETFs

Really like XOVR, hope for a pop on Spacex IPO.

I've bought into xovr, dxyz, sats and a few others hoping that they will pop on the spacex IPO. What are your thoughts? What are you holding? Long or short??

reddit.com
u/xxxTech007 — 3 months ago