CMMC (32 CFR Part 170) Final Rule – Executive Briefing

Join KLC Consulting’s CMMC Certified Assessors (CCA), Layla Paoletti and Kyle Lai, as they provide an executive overview of the 32 CFR Part 170 Final Rule, released on 10/15/2024.

This official Final Rule contains significant changes that may impact DIB organizations.

For Defense contractors, subcontractors, or MSPs, we will cover the significant changes in the final rule that will impact you, including:

  • CMMC Scoping, including CSPs and ESPs
  • POA&M deficiencies allowed (new definitions)
  • CMMC requirements for OSC / OSA using MSPs
  • CMMC requirements for MSPs
  • Phased roll-out timeline
  • New definitions and terminologies

Kyle Lai

Kyle is the President and CISO at KLC Consulting, a certified 3rd Party Assessment Organization (C3PAO), which provides advisory, conducts assessments, and enhances the cybersecurity of the Defense industry supply chain. Kyle also serves on the board of the C3PAO Forum. 

With over 25 years of cybersecurity expertise, Kyle has served as an advisor to renowned organizations such as ExxonMobil, Zoom, DISA (U.S. DoD), Boeing, HP, and Microsoft. His qualifications include CMMC Certified Professional (CCP) and Certified Assessor (CCA) certifications and CISSP, CSSLP, CISA, CIPP/US/G, and ISO 27001 Lead Auditor credentials. Before starting KLC Consulting, Kyle was a CISO at a global I.T. company and Brandeis.

Scroll to Top