CMMC 2.0 vs. ISO/IEC 27001 vs. NIST 800-171: What You Need to Know

The CMMC, NIST 800-171, and ISO/IEC 27001 frameworks include the application of a structured approach to cybersecurity and a formal risk assessment process, and the implementation of customized security controls. However, each of them has a distinct scope. 

The webinar covers

• US legislative overview, impacts and update in NIST adoption
• Weaving together NIST PF and NIST 800-171
• Quick definitions for CMMC / 27001 / 800-171
• Common scope elements between CMMC / 27001 / 800-171
• Differences in scope between CMMC / 27001 / 800-171
• When to implement each of the three
• How these three can support each other
• The link between these three and cyber insurance
• How each of these is used to measure and implement compliance

Presenters: 

Anthony English 

One of the top cybersecurity professionals in Atlantic Canada with extensive Canadian and International experience in cybersecurity covering risk assessment, management, mitigation, security testing, business continuity, information security management systems, architecture security reviews, project security, security awareness, lectures, presentations and standards-based compliance.

George Usi 

George Usi is the CEO of Omnistruct Inc, a GaaS (cyber Governance as a Service) company with a vision to be the safety airbag of cyber risk and compliance. 

After more than twenty-five years in internet open standards, networking, and security, George recognized that getting hacked in an Internet-delivered world was a matter of when. He also recognized that cyber laws with the potential of steep fines for business leaders who neglect to illustrate cyber security diligence would evolve with more aggressive sanctions in arrears of hacker success. So, he ideated a goal to eliminate cyber risk and set a mission for Omnistruct to be the “safety airbag” of cyber compliance. With a continuous audit and documentation approach, business owners can protect consumer privacy rights when they ideate, illustrate, and continuously measure their cyber posture using a new US guideline in cyber risk developed by NIST.

George attended California State University Chico, is a graduate of California State University Sacramento and a graduate of the Stanford Latino Executive Initiative (SLEI-ed) and Latino Business Action Network (LBAN) Graduate School of Business certificate program.

Link of the recorded webinar on Youtube:

Slides of the webinar: