The CyberCall Podcast
The Voice of Cybersecurity for MSPs & MSSPs!
The CyberCall is the weekly podcast where cybersecurity meets business reality. Hosted by Andrew Morgan, Founder of Right of Boom, this is the go-to show for Managed Service Providers (MSPs), virtual CISOs (vCISOs), and IT leaders navigating the complex world of cyber risk, compliance, and AI.
Each episode features raw, practical conversations with the sharpest minds in cybersecurity—from operators in the trenches to CISOs, researchers, policymakers, and toolmakers shaping the future. If you care about protecting your clients, growing your practice, and becoming the security partner businesses trust—this podcast is your playbook.
Co hosts: Phyllis Lee, VP of Content at CIS & Gary Pica, President of TruMethods
The CyberCall Podcast
What 997 Responses Say About CMMC’s Future
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Jason Miller, Executive Editor of the Federal News Network put out a two-part investigation last week on the CMMC pause, and we are really glad he agreed to join The CyberCall, because he got access to DoD’s own RFI results and the task force summary.
When the pause was announced in July, we were told it was about cost, burden and not having enough assessors. Jason’s reporting looks at each of those against what industry actually told DoD. The average assessment cost respondents reported was around $47,000, not the $600,000 figure we heard. Assessment capacity was never more than about half used during Phase 1. And most of the cost people complained about traces back to implementing 800-171, which hasn’t gone anywhere.
Part two gets into the options the task force laid out, including restarting Phase 2 with a smaller group, moving to Rev 3, and fixing CUI marking.
So we’ll start with what he found, then get into where this is heading and what it means for the 2,400 or so companies that already have their Level 2 certification. Jason, thanks for being here.