The "SmallsCast" Podcast

Listen in as your host Just Nate talks with Mike Crandal, CEO and co-founder of Digital Beachhead.

The Urgency of CMMC 2.0: November 10th is the date for Article 48 implementation, making CMMC a mandatory default clause in all new DoD solicitations. Many small businesses are panicked because they didn't believe it would actually happen.

A History Lesson in Compliance: The discussion traces the evolution from DFARS 7012 to DFARS 7019, which introduced NIST 800-171 controls and the PoAM (Program of Action and Milestones) system. CMMC was created to replace the unreliable self-attestation and perpetual PoAMs.

CMMC 2.0 Levels and Requirements:
Level 1 (FCI): For Federal Contract Information (FCI) only. Requires 15 controls and allows for self-assessment by a senior company representative.

Level 2 (CUI): For Controlled Unclassified Information (CUI). Requires all 110 NIST 800-171 controls and 320 objectives. Self-attestation is allowed for the first 12 months, but prime contractors (like Lockheed or Boeing) can still demand 3CPAO certification immediately.

Understanding CUI: CUI (Controlled Unclassified Information) is a major gray area often defined differently by each government customer. They stress that CUI is not a security classification but a marking, and contractors should only mark information as CUI if the government has explicitly designated it as such.

The Insurance Factor: Cyber insurance companies are now increasingly requiring CMMC-Level certification before they will pay out on a ransomware or data breach claim, making compliance an essential part of risk management.

The Assessment Process: Mike outlines the four phases of a CMMC assessment by a C3PAO (like Digital Beach Head):
Pre-assessment: Initial review of your data and readiness.

Interview & On-site Visit: A deep dive into paperwork, controls, and physical security.

Certification: Receiving a final or conditional certification.

EMAS Upload: Submitting the results to the government's official system.

The typical process for a small business takes three to four weeks.

Cost & Strategy for Small Businesses: The average cost for a Level 2 assessment for a small business is between $40K and $50K (a one-time payment for the three-year certification). For companies with only a small portion of DoD work, they recommend creating a secure, isolated enclave (like a GCC High or Cloud PC VDI solution) to reduce the scope—and cost—of the assessment.

🤝 Guest Spotlight & Resources
Guest: Mike Crandall, CEO and Co-Founder of Digital Beach Head
Company: Digital Beach Head is the only authorized C3PAO in Colorado Springs and one of three in the Mountain Region, specializing in cyber security services and CMMC assessment.
Mike's Contact Information:
Website: digitalbeachhead.com

Email: [email protected]

LinkedIn: Search for Mike Crandall at Digital Beach Head.

To find out more about the Smalls or become a member, please check us out at ⁠⁠⁠⁠⁠⁠⁠www.thesmalls.org⁠⁠⁠⁠⁠⁠⁠
To contact Just Nate:  ⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠
—  Send in a voice message: ⁠⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/message⁠⁠⁠⁠⁠⁠⁠
Support this podcast: ⁠⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/support⁠⁠⁠⁠⁠⁠⁠
⁠⁠⁠⁠⁠⁠⁠www.patreon.com/thesmalls⁠⁠⁠⁠

Listen in as your host Just Nate and Greg talk with Dr. Matt Hortt about the amazing Library located in Greeley, CO.
The Evolution of Libraries and the Link Facility: Dr. Hortt discusses the massive evolution of libraries over the past 25 years, moving away from things like stamped due date cards and VHS/DVDs towards online streaming services and specialized community resources. The new facility, located in Greeley, is called Link (Library and Innovation Center) and encompasses a massive 63,000 square feet. The design for Link was driven by community input that highlighted the need for skills-based development. Key Offerings and Resources: The Link facility combines many resources often found separately in other libraries into one space, including a recording studio, interactive children's areas, and a wood shop. Key features and services mentioned include:
Meeting Spaces: The library offers various meeting spaces, including a boardroom (set up for streaming and public use), smaller 2-3 person spaces, and a flexible events center that can hold approximately 300 people.
• Cost: All meeting spaces and core library services are free to the public, treated as prepaid services via tax dollars.
• Media and Digital Access: The library still carries books (fiction, children's, graphic novels) but relies heavily on digital resources via apps like Hoopla, Libby, and Overdrive for streaming music, movies, audiobooks, and ebooks. Anyone living in the state of Colorado can obtain a library card.
• Specialty Checkouts: Patrons can check out specialty items such as laptops, wireless hotspots, and state park passes (allowing free entry into state parks).
• Maker Space: The maker space is industrial-grade, featuring equipment like laser cutters, 3D printers, UV printers (capable of printing on items like golf balls), and a sublimation machine. Staff with industry experience are available to teach classes and assist the public with projects.
• Certifications: The library is launching a partnership with Snap-on tools (through NC3) to provide hands-on certifications to patrons related to tools and industrial skills.Operational Context and Challenges: The High Plains Library District is a government entity (a special taxing district) funded by property taxes (mill levy), supported by a strong tax base from gas and oil production in Weld County. Although they are exploring using an unstaffed model to become 24/7, they are not currently open around the clock. Dr. Hortt noted that the biggest current challenge is determining the library's next focus based on competing community ideas, securing continued government funding, and overcoming the lack of public awareness regarding the modern capabilities the library offers.
To go to the Library, you can drive to 501 8th Ave, Greeley, CO
To find out more about the Smalls or become a member, please check us out at ⁠⁠⁠⁠⁠⁠⁠www.thesmalls.org⁠⁠⁠⁠⁠⁠⁠
To contact Just Nate:  ⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠
—  Send in a voice message: ⁠⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/message⁠⁠⁠⁠⁠⁠⁠
Support this podcast: ⁠⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/support⁠⁠⁠⁠⁠⁠⁠
⁠⁠⁠⁠⁠⁠⁠www.patreon.com/thesmalls⁠⁠⁠⁠

Listen in as your host Just Nate and Greg talk with Bill Edwards, Director of CUAS Operations and Training, COLONEL, U.S. Army (Retired). Bill is a wealth of knowledge when it comes to counter UAS.
Bill Edwards has developed a sequence of training courses designed to simplify the complex CUAS market:
1. C-Suite and Leader Course: To ensure executive understanding of capital investment needs.
2. Introduction to CounterUAS Technologies and Federal Law.
3. Drone Vulnerability and Risk Assessment: Applying technology knowledge to facility assessment.
4. Drone Emergency Response Planning: Focusing on coordinating with internal and external stakeholders and developing policies.
5. Left of Drone Launch: Focusing on proactive information/intelligence operationalization.
Register for C-UAS Training Course:
Register Now – Counter Unmanned Aerial System (C-UAS)Technology & Federal Law/Drone Vulnerability & Risk Assessment (DVRA)Course – ENSCO Colorado Springs
 Information on the C-UAS training program found here:
C-UAS Training Courses by Bill Edwards | Counter UnmannedAerial Systems | Drone Vulnerability Risk Assessment | ENSCO
To contact Bill: ⁠[email protected]⁠
To find out more about the Smalls or become a member, please check us out at ⁠⁠⁠⁠⁠⁠www.thesmalls.org⁠⁠⁠⁠⁠⁠
To contact Just Nate:  ⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠
—  Send in a voice message: ⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/message⁠⁠⁠⁠⁠⁠
Support this podcast: ⁠⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/support⁠⁠⁠⁠⁠⁠
⁠⁠⁠⁠⁠⁠www.patreon.com/thesmalls⁠⁠⁠

Listen in as your host Just Nate and Greg talk with Chris Hutson, Director of Business Development at Prime Partners.
Prime Partners specializes in providing skilled labor on demand. We take pride in finding the best talent for our partnering companies based on their hiring needs and requirements.
As an Executive Search Services Company, we provide skilled talent to partnering companies to support existing human resource teams and their hiring needs. Our associates are devoted to excellence and have successfully supported client needs since 2019.
The team talk about how Prime Partners can help you with you staffing augmentation.
To find out more about PrimePartners visit their website here: https://www.primepartners.com/https://www.primepartners.com/
To email Chris click here: [email protected]
To find out more about the Smalls or become a member, please check us out at ⁠⁠⁠⁠⁠www.thesmalls.org⁠⁠⁠⁠⁠
To contact Just Nate:  ⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠
—  Send in a voice message: ⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/message⁠⁠⁠⁠⁠
Support this podcast: ⁠⁠⁠⁠⁠https://anchor.fm/thesmalls/support⁠⁠⁠⁠⁠
⁠⁠⁠⁠⁠www.patreon.com/thesmalls⁠⁠⁠

Listen in as your host Just Nate, DK and GG talks with Sarah Wood, Director of Small Business Development Center (SBDC) Serving Boulder County.
The team talk about how SBDC can help both new and old companies. Please see all the upcoming events below:
Ascent - Customer Discovery  (only promote through September 4th)
Virtual
September 4th - 18th
9 am - 11  am
Applications accepted until filled: https://sbdc.colorado.gov/programs-resources/techsource/ascent-workshops
Free
Blueprint for a Resilient Small Business Forum
CU Boulder - University Memorial Center
September 26th
8 am - 12 pm
Registration Link:https://docs.google.com/forms/d/e/1FAIpQLSdcXcJMSIbe0qts8YONoYp6WWpntIpiGd8eMaGtErfwnB5PXQ/viewform
Free
Tech Venture Accellerator - Boulder
Application Deadline September 12th (only promote through this date)Thursdays October 2nd - December 11th
Application Link: https://sbdc.colorado.gov/programs-resources/techsource/tech-venture-accelerator
Location will be announced to chosen applicants.
Free
To find out more about the Boulder County SBDC visit their website here: https://sbdc.colorado.gov/center-locations/boulder
To find out more about the Smalls or become a member, please check us out at ⁠⁠⁠⁠www.thesmalls.org⁠⁠⁠⁠
To contact Just Nate:  ⁠⁠⁠⁠[email protected]⁠⁠⁠⁠
—  Send in a voice message: ⁠⁠⁠⁠https://anchor.fm/thesmalls/message⁠⁠⁠⁠
Support this podcast: ⁠⁠⁠⁠https://anchor.fm/thesmalls/support⁠⁠⁠⁠
⁠⁠⁠⁠www.patreon.com/thesmalls⁠⁠⁠