top of page



What documents should I study for the CMMC 2.0 Exams?
This blog contains copies of the documents to study for the CMMC 2.0 exams for the CCP and the CCA.
Dr. Jeff Baldwin
May 93 min read


CS5 Engineering Trust Roundtable
Dr. Jeff Baldwin, CEO of Space Coast Cyber and CMMC Lead CCA and Provisional Instructor facilitated the Engineering Trust table at the 2025 CS5 East Conference in National Harbor, MD. Resources: Information Assurance Technical Framework IATF 3.1 (NSA, 2002) NIST SP 800-64 R2: Security Considerations in the System Development Life Cycle (2008) NIST SP 800-160 Volume 1 Rev 1: Engineering Trustworthy Secure Systems (2022) NIST SP 800-160 Volume 2 Rev 1: Developing Cyber-Resilien
Dr. Jeff Baldwin
Oct 14, 20251 min read


What is FedRAMP Moderate Equivalency?
You may have heard a vendor say they are FedRAMP Moderate Equivalent (FRME), but what does that really mean, and how do you know if they...
Dr. Jeff Baldwin
Mar 23, 20254 min read


Facility Scoping for Organizations Seeking Assessment (OSA) of their Information Systems for Cybersecurity Maturity Model Certification (CMMC)
Introduction In the context of CMMC, can an OSA inherit all of Physical and Environmental (PE) security controls from a Cloud Service...
Dr. Jeff Baldwin
Jan 18, 20256 min read


Can you have a POA&M in CMMC?
With the new CMMC rule finalized in 32 CFR Part 170 the questions around how and when to use Plan of Action and Milestones (POA&M) have...
Dr. Jeff Baldwin
Oct 16, 20241 min read


CMMC Day 2024: Security Control Inheritance and Requirements Traceability
On May 6, 2024, Space Coast Cyber CEO, Dr. Jeff Baldwin was honored to be invited back to speak at CMMC Day 2024 on the topic of Security...
Dr. Jeff Baldwin
May 22, 20241 min read


Comparing Risk Management Framework (RMF) and Cybersecurity Maturity Model Certification (CMMC)
ISSA-NOVA Presentation October 19 @5:30pm – Jeff Baldwin on Comparing Risk Management Framework (RMF) and Cybersecurity Maturity Model Certification (CMMC) Check out ISSA-NOVA at https://www.issa-nova.org/ Abstract: The Cybersecurity Maturity Model Certification (CMMC) is currently going through the rulemaking process for inclusion in the Code of Federal Regulations. Requirements for CMMC are expected to be included in DoD contracts in the near future impacting all tiers
Dr. Jeff Baldwin
Oct 18, 20232 min read


CMMC Day Presentation
Dr. Jeff Baldwin presented at CMMC Day 2023 on the topic of "How Creating a Self-Assessment Playbook for System Components Prepares OSCs...
Dr. Jeff Baldwin
May 17, 20231 min read


Certified CMMC Professional (CCP) Training: What to Expect (December 2022)
This 19-minute video provides an overview of what to expect from Certified CMMC Professional (CCP) training from Space Coast Cyber. The...
Dr. Jeff Baldwin
Dec 27, 20221 min read
Blog
bottom of page

