{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Secure Talk Podcast","title":"Why you could fail your CMMC Level 2 C3PAO audit | Secure Talk with Logan Therrien ","html":"","width":"100%","height":180,"duration":3219,"description":"You did your self assessment and received a perfect 110 score, congratulations! You met with your C3PAO and scored less than 0. What happened!\nHow can two CMMC assessors examine the same defense contractor and arrive at completely different scores? A lack of rigor in assessment methodology could mean the entire certification system is measuring the assessor — not your security. Logan Therrien, Chief Strategy Officer at Kieri Solutions and one of the original C3PAO lead assessors in the U.S., joins Justin Beals to expose a critical flaw in how CMMC Level 2 assessments are conducted today: no standardized evidence sampling methodology.\nThis episode is for DoD contractors, compliance consultants, and defense industry executives who want to understand what's at stake — and how to navigate assessments before the rules tighten further.\nWhat you'll learn:\n\nWhy NIST 800-171 was intentionally vague — and how that backfired for assessors\nHow one assessor might review a single evidence point while another reviews 100%\nWhat ISO 17020 accreditation will require of C3PAOs and why it matters now\nWhat the 48 CFR expansion means for 118,000+ contractors in the supply chain\nHow to prepare for an assessment so it feels like an open-book test\n\nLogan also co-authored the peer-reviewed paper \"The Need for Standardized Evidence Sampling in CMMC Assessments: A Survey-Based Analysis of Assessor Practices\" (with John Hastings) — one of the first data-driven studies of assessment methodology in the CMMC ecosystem.\nChapters\n\n00:00 Introduction to Secure Talk and Psychometrics\n01:45 Understanding CMMC and Its Implications\n05:32 Logan Therian's Background and Insights\n09:16 The Challenges of Assessment Methodologies\n16:10 The Scale and Impact of CMMC Assessments\n20:31 Navigating Standards in Cybersecurity\n23:53 Evidence Testing in CMMC Assessments\n27:43 The Importance of Reliable and Accurate Assessments\n36:22 Building Trust Between Industry and Defense\n41:46 Future Directions in CMMC...","thumbnail_url":"https://img.transistorcdn.com/FI5U-V5f7xdITFyeJIbD7DHq2VtWIj7V7SxzbEqbbTM/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS81NzRj/MTkwYWEwN2IzMjIw/ZjRhZTE0MGJiYjhi/N2YxMS5qcGc.webp","thumbnail_width":300,"thumbnail_height":300}