Jeff Farr

Opening remarks by Jim Bridenstine, CEO of Quantum Space, former Administrator of NASA, and former U.S. Representative from Oklahoma. Stacy Bostjanick, Vice President of Government Services Strategy at Cybersec Investments and former Chief Defense Industrial Base Cybersecurity official, delivers the keynote, “State of the Ecosystem,” addressing CMMC enforcement, certification bottlenecks, workforce constraints, and the future of the Defense Industrial Base. The program includes “The Prime Perspective”; “The CMMC Journey,” moderated by Michael Turner with Anders Erickson, Brandon Szych-Brown, Don Ackerman, and Scott Bernoudy; and “C3PAO AAA (Ask Assessors Anything),” moderated by Preston Smith with Katie Dodson, Kevin Mann, Kyle Lai, and Mark Debry. Additional sessions cover CUI identification, cybersecurity governance, the CMMC Phase 2 pause, NIST SP 800-171 Revision 3, CUI scoping and data flow, assessor selection, shared responsibility between organizations and MSPs, and preparing environments, documentation, evidence, and personnel for Level 2 assessments. Hands-on workshops address the 320 CMMC controls and related organizational decisions, stakeholder alignment and scoping risks, agentic AI for documentation and System Security Plan creation, NIST assessment objectives, evidence collection, access control, incident response, and practical CMMC implementation.