Trust Issues · 2026-04-28 · 48 min
The CMMC journey is a lot harder than people think it is, and we’re unpacking the truth on this episode of Trust Issues. Tune in as hosts Brandon and Bruno Lecoq sit down with Raymond King, Senior Customer Success Manager at BEMO, to unpack the real CMMC compliance journey - from the initial self-assessment through final audit. What You’ll Learn: Why self-attestation is a false confidence play How CMMC sprawls across your entire organization, not just IT The culture-first truth separates six-month timelines from eighteen-month struggles SOC 2 compliance is trivially easy compared to CMMC's rigor The GRC platform paradox - why buying Drata or Vanta doesn't make you compliant Why only 1,000 companies hold CMMC Level 2 certification today Turns out CMMC really isn't a checkbox - it's a foundational shift in how your entire organization operates. Episode Chapters: 00:00 Introduction 01:39 From Microsoft Government Specialist to CMMC Reality Check 04:54 Three Types of CMMC Customers: Who Moves Fast and Who Stalls 11:50 The 18-Month Journey: What a Real CMMC Level 2 Audit Actually Looks Like 14:54 GFE Users Aren't Out of Scope - Your Biggest Security Gap 16:21 SOC 2 vs.
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
Can You Create CUI? CMMC Scope, ERP Systems, and Contractor Risk ExplainedCMMC Compliance Guide · on CMMC compliance80 / 100
91. Your AI Integration Is a Lit Match Over a Gas-Soaked Hay PileUnHacked · on CMMC compliance54 / 100
Frank Raimondi | Continuous Vulnerability Management in the Age of AIMSP Business School · on CMMC compliance52 / 100
How to Build a Cross-Functional CMMC Readiness Team74 / 100
Why CMMC became necessary in the first place.88 / 100
Has CMMC Changed Cybersecurity Culture Forever?65 / 100
The four phases of a CMMC assessment84 / 100
Treat AI agents like human employees80 / 100