How to build a profitable podcast.
Best CMMC and Cybersecurity Podcasts for Compliance and Security Leaders
CMMC compliance is about more than checking boxes. Explore podcasts that help businesses understand cybersecurity requirements, strengthen their security programs, prepare for assessments, and learn from experienced cybersecurity and compliance professionals.
CMMC and Cybersecurity Compliance: The 20 Best CMMC And Cybersecurity Podcasts For Security Leaders
Let's go!
CMMC costs can spiral fast, and the problem usually starts even before a single control is implemented. In this episode of Trust Issues, Bruno Lecoq speaks with Christina Reynolds, Registered Practitioner Organization leader and author of Scope Small, Win Big, about why contractors need to scope CUI before securing everything, why Microsoft 365 Commercial can sink a CMMC package, and why Phase One scoring requirements still matter even while Phase Two is paused.
Check here for their latest episode:
Subscribe here:
The CMMC Level 2 suspension has led some contractors to relax, but Dr. Beloved Smart says that is exactly the wrong move. In this episode of Trust Issues, Brandon and Bruno Lecoq speak with Dr. Smart about why CMMC is not going away, why tools without documentation still fail audits, why CMMC Level 1 is basic cybersecurity hygiene, and why AI governance is already becoming the next risk companies are not ready for.
Check here for their latest episode:
Subscribe here:
CMMC did not appear overnight - it followed more than a decade of cybersecurity requirements, industry resistance, weak self-assessments, and contractors claiming compliance without doing the work. In this episode of Trust Issues, Brandon and Bruno Lecoq hear from Stacy Bostjanick, VP of Government Services Strategy at Cybersec Investments and former Director of CMMC Policy at the Pentagon, on why CMMC became necessary in the first place. She explains how stolen defense innovation affects every taxpayer and why small contractors can no longer assume attackers are not interested in them.
Check here for their latest episode:
Subscribe here:
Dive into the evolving world of cybersecurity and compliance with Bruno Lecoq and Brandon Lecoq. This episode uncovers the reality of securing your organization using a streamlined Microsoft approach and why proper implementation takes dedication. Discover the hidden risks of ignoring basic security protocols and how continuous monitoring can protect your business from unseen threats.
Check here for their latest episode:
Subscribe here:
Why do so many businesses have trust issues with security and compliance? We’re here to find out. Hosted by Brandon Lecoq and Joseph Candelario, Trust Issues is the podcast that makes cybersecurity and compliance a little less boring (and a lot more human). From SOC 2 nightmares to the myths that keep teams stuck in checklist mode, we dig into real stories, ethical dilemmas, and the psychology that fuels bad security habits. Expect sharp takes, relatable stories, and the occasional existential crisis (nothing that cant be fixed)
Check here for their latest episode:
Subscribe here:
Welcome to Orwellian Optics, a podcast by Allio Capital where macroeconomics, policy, politics, and personal finance intersect. Hosted by Joseph Gradante, Andrew J Giannone, and Christopher Morgan, we offer you the tools and insights you need to navigate. Unlike mainstream media, we cut through the noise, offering an educational and independent perspective on how government decisions impact your financial future. Tune in to learn how to take control of your investments and make better choices every time.
Check here for their latest episode:
Subscribe here:
As digital threats intensify and compliance requirements grow more demanding, Trust.ID Talk is your critical source for mastering digital identity and PKI management. Brought to you by GlobalSign, this podcast targets the real-world challenges faced by IT security leaders, cybersecurity managers, and tech executives in industries like finance, healthcare, education, government and insurance. Each episode offers a front-row seat to conversations with industry pioneers, thought leaders, and subject-matter experts. Together, we address critical issues like crypto-agility, the Google 90-day certificate mandate, the growing demand for certificate automation, and the ever-evolving compliance landscape. With a focus on practical, actionable insights, Trust.ID Talk provides the clarity and solutions you need to tackle today’s cybersecurity risks head-on. From navigating short-lived certificates to preparing for quantum-safe cryptography, Trust.ID Talk equips you with the knowledge and tools needed to stay secure, agile, and prepared for what’s next.
Check here for their latest episode:
Subscribe here:
In a world overloaded with information, great leaders separate the signal, the most critical insights that drive success, from the noise of distractions and uncertainty. Signal to Noise by Riviera Partners is the podcast for tech executives, innovators, talent leaders, and investors who need to make meaningful moves, whether in moments of crisis, clarity, or opportunity. In each episode, we sit down with respected leaders to unpack the defining decisions of their careers. Our guests share powerful lessons from the first 100 days of high-stakes roles, bold organizational shifts, and pivotal bets on people, product, and strategy. Whether you're navigating a career-defining transition or simply looking for a sharper perspective, this show delivers the clarity, context, and confidence to help you make your next big move.
Check out their latest episode here:
Subscribe here:
Shielded: The Last Line of Cyber Defense is your definitive guide to navigating the quantum era of cybersecurity. Hosted by experts from PQShield, a global leader in post-quantum cryptography (PQC), this podcast explores how industries can future-proof their defences against the imminent threat of quantum computing. Each episode brings you actionable insights, real-world case studies, and expert interviews with cryptographers, industry leaders, and policymakers shaping the future of cybersecurity. From demystifying quantum-resistant protocols to addressing compliance challenges and implementation strategies, Shielded moves the conversation from why to how in building a quantum-safe world. Whether you're a security engineer, IT professional, or business decision-maker, Shielded arms you with the knowledge and tools to stay ahead of the curve in securing your data. Join us as we decode the challenges of quantum readiness, foster collaborative solutions, and inspire confidence in a safer digital future. Subscribe now to stay updated on the latest trends, standards, and breakthroughs in quantum-resilient cybersecurity.
Check here for their latest episode:
Subscribe here:
Our experiences inspired the creation of The CMMC Compliance Guide Podcast and its accompanying resources. The podcast began as a way to share what we learned through real-world challenges—like helping that aerospace machine shop—and to provide accessible education for businesses navigating DoD cybersecurity requirements.
The CMMC Compliance Guide Podcast breaks down complex topics like NIST 800-171 and CMMC into actionable, easy-to-understand steps. Whether you’re a subcontractor struggling to meet compliance deadlines or a business owner looking to secure your supply chain, the guide offers practical advice to help you take control of your cybersecurity journey.
Check here for their latest episode:
Subscribe here:
In this episode of Unencrypted Chatter, hosts Richard Mendoza and Aneta Klepacka sit down with Wesley Reinhart, CMMC Program Director at Compass MSP, to break down the Cybersecurity Maturity Model Certification (CMMC 2.0).
Wes shares actionable insights for businesses preparing to meet Department of Defense (DoD) compliance standards — from scoping environments and mapping CUI data to executive buy-in, risk prioritization, and timelines. Whether you’re a small contractor or a major supplier, this discussion will help you understand the real-world impact, urgency, and steps to achieve certification.
Check here for their latest episode:
Subscribe here:
Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement.
We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!
Check here for their latest episode:
Subscribe here:
Podcasts from the international law firm of Crowell & Moring LLP, primarily focusing on the government contracting sector.
Check here for their latest episode:
Subscribe here:
Welcome to the CMMC Proof Podcast, strategically commanded by Derrich Phillips, a battle-hardened cybersecurity veteran, Certified CMMC Assessor, and Provisional Instructor.
Our mission: to navigate the complex battleground of Cybersecurity Maturity Model Certification (CMMC), with a tactical focus on the unique challenges and breakthrough strategies within the academies of higher education.
Each episode is a strategic operation, featuring elite conversations with the foremost commanders in cybersecurity – CIOs, CTOs, and CISOs from prestigious research universities.
We strategize on crucial topics, including:- Maneuvering through the intricate terrains of CMMC and NIST SP 800-171 compliance in the academic sector.- Decoding encrypted messages of best practices and lessons from the cybersecurity trenches in higher education.- Outflanking cyber threats to protect sensitive research data and intellectual property.- Deploying AI and cutting-edge tech for fortified cybersecurity defenses.
At the CMMC Proof Podcast, our goal is to transform compliance from a battlefield into a training ground for cybersecurity excellence in academia. We equip university leaders and IT warriors with the intelligence and arsenal needed to turn cybersecurity challenges into opportunities for victory and innovation.Join us in the CMMC Proof Podcast for mission-critical insights and actionable intelligence that prepare you for a future where cybersecurity is the stronghold of academic and research success.Salute to a future where cybersecurity compliance is your university's shield and spear in the digital age.
Check here for their latest episode:
Subscribe here:
Hosted by Matt Bruggeman, Director of Federal GTM at A-LIGN, Mostly Compliant is a cybersecurity podcast that brings together experts from across the federal compliance landscape to discuss CMMC, FedRAMP, and other key topics shaping the industry.
Check here for their latest episode:
Subscribe here:
ReimaginingCyber is a series of fireside chats hosted by Rob Aragao and Stan Wisseman, Security Strategists with CyberRes, a Micro Focus line of business. In each episode, we’ll dive into the world of cybersecurity, exploring common challenges, trends, and solutions for today’s CISOs and CIOs.
Every two weeks, a new guest—from industry experts to CISOs—will share what matters most to them.
Each episode is short and bite-sized, running only 15-20 minutes. CyberRes is a Micro Focus line of business, focused on helping companies protect, detect, and evolve their security framework and helping organizations become more cyber resilient.
To learn more, visit CyberResilient.com. Micro Focus is a multinational software and information technology business, headquartered in the UK.
Learn more at https://www.microfocus.com/en-us/cyberres/cyberresilient
Check here for their latest episode:
Subscribe here:
Focus on our friends and colleagues that are professionals in the cybersecurity and IT space.
Learn more at https://cyberpropodcast.podbean.com
Check here for their latest episode:
Subscribe here:
Hosted by government contracting expert, 8(a) business mentor, and founder of the Govcon Giants platform, Eric Coffie. With over 250K+ podcast listens, a thriving YouTube channel of 53K+ subscribers, and a LinkedIn community of 24k+ followers, Eric has built one of the most trusted voices in federal contracting. Govcon Giants isn't just another podcast it ranks on the U.S. procurement leaderboard and is recognized as the #5 overall creator worldwide in procurement, cementing Eric's role as a true authority in this space.
On this podcast, you'll discover how to win more contracts, scale your small business into a sustainable government contracting powerhouse, and learn the insider strategies that have helped countless entrepreneurs break into the $700B+ federal marketplace. Through real conversations with industry leaders, agency insiders, and successful business owners, Eric brings you the playbook for success—covering everything from 8(a) certification and set-asides to subcontracting, teaming, and beyond.
Whether you're just starting out or looking to scale, Govcon Giants is your roadmap to navigating one of the most profitable yet misunderstood markets in the world—government contracting.
Check here for their latest episode:
Subscribe here:
Welcome to the "Cyber Compliance and Beyond" podcast, a Kratos podcast that will bring clarity to compliance, helping put you in control of cybersecurity compliance in your organization.
Kratos is a leading cybersecurity compliance advisory and assessment organization, providing services to both government and commercial clients across varying sectors including defense, space, satellite, financial services, and health care. Through Cyber Compliance & Beyond, our cyber team of experts will share their insights on the latest compliance issues.
We want to hear from you! What unanswered question would you like us to tackle? Is there a topic you'd like us to discuss? Or, you just have some feedback for us? Let us know on Linked and Twitter at Kratos Defense or by email at ccbeyond@kratosdefense.com.
Check here for their latest episode:
Subscribe here:
This podcast is dedicated for those who want to stay up to date with the Cybersecurity Maturity Model Certification news. It utilizes Notebook LM to synthesize news articles from Jun Cyber's blog as well as other official CMMC documentation and produces a podcast.
Podcast Description Disclaimer:
The content presented in CMMC News is generated by AI and is intended for informational and educational purposes only. It should not be taken as official guidance for Cybersecurity Maturity Model Certification (CMMC) compliance. For accurate and tailored advice, we recommend consulting a qualified CMMC consultant or reaching out to Jun Cyber directly. Always rely on certified experts for guidance specific to your organization's needs.
Check here for their latest episode:
Subscribe here:
There you have it...
The 20 Best CMMC And Cybersecurity Podcasts For Security Leaders
1. Understand What CMMC Requires
Choose podcasts that explain CMMC requirements in practical terms, including certification levels, assessment expectations, security practices, and how requirements apply to different organizations.
2. Look for NIST SP 800-171 Coverage
For organizations handling Controlled Unclassified Information (CUI), prioritize podcasts that explain NIST SP 800-171 and how its security requirements translate into real-world cybersecurity practices.
3. Focus on Assessment Readiness
The most useful podcasts go beyond explaining regulations. Look for episodes covering gap assessments, evidence collection, System Security Plans, documentation, scoping, and common assessment challenges.
4. Learn From Cybersecurity Practitioners
Prioritize shows featuring CMMC assessors, CISOs, compliance consultants, cybersecurity engineers, and defense-industry professionals. Their experiences can provide practical lessons that aren't always obvious from the regulations.
5. Pay Attention to CUI and Scope
Understanding where CUI is stored, processed, and transmitted is essential to determining the scope of a cybersecurity program. Podcasts that discuss data flows, system boundaries, and asset inventories can be particularly valuable.
6. Follow Regulatory Developments
CMMC requirements and implementation details can evolve. Choose podcasts that regularly discuss DoD updates, CMMC program developments, assessment requirements, and related federal cybersecurity regulations.
7. Look for Real-World Case Studies
The best cybersecurity podcasts often discuss actual incidents, assessment findings, implementation challenges, and lessons learned. These examples can make complex compliance requirements much easier to understand.
8. Don't Ignore Documentation
Strong cybersecurity technology alone doesn't automatically demonstrate compliance. Look for podcasts that discuss policies, procedures, evidence, logging, training records, security plans, and other documentation needed to demonstrate that controls are actually operating.
9. Balance Compliance With Cybersecurity
CMMC should not be treated as a checklist exercise. The most valuable podcasts connect compliance requirements with broader security objectives such as threat prevention, incident response, access control, vulnerability management, and continuous monitoring.
10. Turn Listening Into Action
Don't just listen and move on. After each episode, identify one actionable takeaway your organization can implement—such as reviewing a control, updating a policy, improving documentation, or addressing a security gap.
CMMC and cybersecurity podcasts can be a valuable resource for defense contractors, IT professionals, compliance teams, and security leaders trying to navigate an increasingly complex cybersecurity landscape. The best shows combine regulatory updates with practical implementation advice, expert perspectives, real-world case studies, and lessons from organizations working through compliance challenges.
Whether you're preparing for a CMMC assessment, strengthening your NIST SP 800-171 practices, managing CUI, or simply looking to improve your organization's cybersecurity posture, the right podcasts can make complicated topics easier to understand and keep your team informed.
Start with a few podcasts that align with your role and security goals, listen consistently, and turn the most useful insights into concrete action. Continuous learning is one of the simplest ways to stay prepared, strengthen cybersecurity, and build long-term CMMC readiness.
Subscribe to the ones that interest you, and send us an email at grow@fame.so if you know of any great CMMC and cybersecurity podcasts that we've missed!
