How To Start A Podcast
Work With Us
FeaturesPricingLog InSign Up

The bCast Blog

‍How to build a profitable podcast.

Best Podcasts

The 20 Best CMMC Readiness And Cybersecurity Podcasts For Contractors

Best CMMC Readiness Podcasts for Defense Contractors and Cybersecurity Leaders

Oliver Bugarin
August 20, 2026

Looking for practical CMMC guidance without the jargon? Explore podcasts featuring cybersecurity experts, compliance professionals, and industry leaders discussing CMMC readiness, NIST requirements, security controls, incident response, and protecting sensitive defense information.

Defense Contractors and Cybersecurity Leaders: The 20 Best CMMC Readiness And Cybersecurity Podcasts For Contractors

Let's go!

1. What the CMMC Pause Exposed

The CMMC pause exposed two groups of people: those who had already been doing the work and those who were only waiting for a deadline. In this episode of Trust Issues, Bruno Lecoq and Jeremy Patterson talk about the “good student vs. bad student” divide, why so many contractors fail Phase One, and why IT reporting structure says more than most people think. The biggest lesson to be learned: Treating CMMC like a test to pass is the wrong way to look at security.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify
  • YouTube

2. CMMC Paused. Your Security Obligations Did Not

The CMMC Level 2 suspension has led some contractors to relax, but Dr. Beloved Smart says that is exactly the wrong move. In this episode of Trust Issues, Brandon and Bruno Lecoq speak with Dr. Smart about why CMMC is not going away, why tools without documentation still fail audits, why CMMC Level 1 is basic cybersecurity hygiene, and why AI governance is already becoming the next risk companies are not ready for.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify
  • YouTube

3. Why CMMC became necessary in the first place.

CMMC did not appear overnight - it followed more than a decade of cybersecurity requirements, industry resistance, weak self-assessments, and contractors claiming compliance without doing the work. In this episode of Trust Issues, Brandon and Bruno Lecoq hear from Stacy Bostjanick, VP of Government Services Strategy at Cybersec Investments and former Director of CMMC Policy at the Pentagon, on why CMMC became necessary in the first place. She explains how stolen defense innovation affects every taxpayer and why small contractors can no longer assume attackers are not interested in them.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify
  • YouTube

4. Security Lessons from a Microsoft Veteran

Dive into the evolving world of cybersecurity and compliance with Bruno Lecoq and Brandon Lecoq. This episode uncovers the reality of securing your organization using a streamlined Microsoft approach and why proper implementation takes dedication. Discover the hidden risks of ignoring basic security protocols and how continuous monitoring can protect your business from unseen threats.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify
  • YouTube

5. Trust Issues

Why do so many businesses have trust issues with security and compliance? We’re here to find out. Hosted by Brandon Lecoq and Joseph Candelario, Trust Issues is the podcast that makes cybersecurity and compliance a little less boring (and a lot more human). From SOC 2 nightmares to the myths that keep teams stuck in checklist mode, we dig into real stories, ethical dilemmas, and the psychology that fuels bad security habits. Expect sharp takes, relatable stories, and the occasional existential crisis (nothing that cant be fixed)

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify
  • YouTube

6. Orwellian Optics

Welcome to Orwellian Optics, a podcast by Allio Capital where macroeconomics, policy, politics, and personal finance intersect. Hosted by Joseph Gradante, Andrew J Giannone, and Christopher Morgan, we offer you the tools and insights you need to navigate. Unlike mainstream media, we cut through the noise, offering an educational and independent perspective on how government decisions impact your financial future. Tune in to learn how to take control of your investments and make better choices every time.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify

7. CMMC Compliance Guide

Our experiences inspired the creation of The CMMC Compliance Guide Podcast and its accompanying resources. The podcast began as a way to share what we learned through real-world challenges—like helping that aerospace machine shop—and to provide accessible education for businesses navigating DoD cybersecurity requirements.

The CMMC Compliance Guide Podcast breaks down complex topics like NIST 800-171 and CMMC into actionable, easy-to-understand steps. Whether you’re a subcontractor struggling to meet compliance deadlines or a business owner looking to secure your supply chain, the guide offers practical advice to help you take control of your cybersecurity journey.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

8. Trust.ID Talk: The Digital Certificate and Identity Security Podcast

As digital threats intensify and compliance requirements grow more demanding, Trust.ID Talk is your critical source for mastering digital identity and PKI management. Brought to you by GlobalSign, this podcast targets the real-world challenges faced by IT security leaders, cybersecurity managers, and tech executives in industries like finance, healthcare, education, government and insurance. Each episode offers a front-row seat to conversations with industry pioneers, thought leaders, and subject-matter experts. Together, we address critical issues like crypto-agility, the Google 90-day certificate mandate, the growing demand for certificate automation, and the ever-evolving compliance landscape. With a focus on practical, actionable insights, Trust.ID Talk provides the clarity and solutions you need to tackle today’s cybersecurity risks head-on. From navigating short-lived certificates to preparing for quantum-safe cryptography, Trust.ID Talk equips you with the knowledge and tools needed to stay secure, agile, and prepared for what’s next.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify

9. Signal to Noise

In a world overloaded with information, great leaders separate the signal, the most critical insights that drive success, from the noise of distractions and uncertainty. Signal to Noise by Riviera Partners is the podcast for tech executives, innovators, talent leaders, and investors who need to make meaningful moves, whether in moments of crisis, clarity, or opportunity. In each episode, we sit down with respected leaders to unpack the defining decisions of their careers. Our guests share powerful lessons from the first 100 days of high-stakes roles, bold organizational shifts, and pivotal bets on people, product, and strategy. Whether you're navigating a career-defining transition or simply looking for a sharper perspective, this show delivers the clarity, context, and confidence to help you make your next big move.

Check out their latest episode here:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify

10. Shielded: The Last Line of Cyber Defense

Shielded: The Last Line of Cyber Defense is your definitive guide to navigating the quantum era of cybersecurity. Hosted by experts from PQShield, a global leader in post-quantum cryptography (PQC), this podcast explores how industries can future-proof their defences against the imminent threat of quantum computing. Each episode brings you actionable insights, real-world case studies, and expert interviews with cryptographers, industry leaders, and policymakers shaping the future of cybersecurity. From demystifying quantum-resistant protocols to addressing compliance challenges and implementation strategies, Shielded moves the conversation from why to how in building a quantum-safe world. Whether you're a security engineer, IT professional, or business decision-maker, Shielded arms you with the knowledge and tools to stay ahead of the curve in securing your data. Join us as we decode the challenges of quantum readiness, foster collaborative solutions, and inspire confidence in a safer digital future. Subscribe now to stay updated on the latest trends, standards, and breakthroughs in quantum-resilient cybersecurity.

Check here for their latest episode:

Subscribe here:

  • Fame
  • Apple Podcasts
  • Spotify

11. Mostly Compliant

Hosted by Matt Bruggeman, Director of Federal GTM at A-LIGN, Mostly Compliant is a cybersecurity podcast that brings together experts from across the federal compliance landscape to discuss CMMC, FedRAMP, and other key topics shaping the industry.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

11. Episode#16: CMMC 2.0: Certification Lessons for Defense Contractors and Others

In this episode of Unencrypted Chatter, hosts Richard Mendoza and Aneta Klepacka sit down with Wesley Reinhart, CMMC Program Director at Compass MSP, to break down the Cybersecurity Maturity Model Certification (CMMC 2.0).

Wes shares actionable insights for businesses preparing to meet Department of Defense (DoD) compliance standards — from scoping environments and mapping CUI data to executive buy-in, risk prioritization, and timelines. Whether you’re a small contractor or a major supplier, this discussion will help you understand the real-world impact, urgency, and steps to achieve certification.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

12. Climbing Mount CMMC

Our podcast is dedicated to supporting MSPs/MSSPs and the companies that engage with them. We aim to maintain transparency throughout our journey, especially as we pursue our level two certification. While only a few MSPs are actively participating, we hope this podcast will inspire more involvement.

We have many guests from different branches of the CMMC ecosystem who are professional in their fields. These guests include Brian Hubbard, Joy Beland, Amira Armond and many more!

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

13. Fastest 5 Minutes, The Podcast Government Contractors Can’t Do Without

Podcasts from the international law firm of Crowell & Moring LLP, primarily focusing on the government contracting sector.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

14. CMMC Proof

Welcome to the CMMC Proof Podcast, strategically commanded by Derrich Phillips, a battle-hardened cybersecurity veteran, Certified CMMC Assessor, and Provisional Instructor.

Our mission: to navigate the complex battleground of Cybersecurity Maturity Model Certification (CMMC), with a tactical focus on the unique challenges and breakthrough strategies within the academies of higher education.

Each episode is a strategic operation, featuring elite conversations with the foremost commanders in cybersecurity – CIOs, CTOs, and CISOs from prestigious research universities.

We strategize on crucial topics, including:- Maneuvering through the intricate terrains of CMMC and NIST SP 800-171 compliance in the academic sector.- Decoding encrypted messages of best practices and lessons from the cybersecurity trenches in higher education.- Outflanking cyber threats to protect sensitive research data and intellectual property.- Deploying AI and cutting-edge tech for fortified cybersecurity defenses.

At the CMMC Proof Podcast, our goal is to transform compliance from a battlefield into a training ground for cybersecurity excellence in academia. We equip university leaders and IT warriors with the intelligence and arsenal needed to turn cybersecurity challenges into opportunities for victory and innovation.Join us in the CMMC Proof Podcast for mission-critical insights and actionable intelligence that prepare you for a future where cybersecurity is the stronghold of academic and research success.Salute to a future where cybersecurity compliance is your university's shield and spear in the digital age.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

15. Cyber Security Headlines

Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.

Learn more at https://cisoseries.com

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts

16. Reimagining Cyber

ReimaginingCyber is a series of fireside chats hosted by Rob Aragao and Stan Wisseman, Security Strategists with CyberRes, a Micro Focus line of business. In each episode, we’ll dive into the world of cybersecurity, exploring common challenges, trends, and solutions for today’s CISOs and CIOs.

Every two weeks, a new guest—from industry experts to CISOs—will share what matters most to them.

Each episode is short and bite-sized, running only 15-20 minutes. CyberRes is a Micro Focus line of business, focused on helping companies protect, detect, and evolve their security framework and helping organizations become more cyber resilient.

To learn more, visit CyberResilient.com. Micro Focus is a multinational software and information technology business, headquartered in the UK.

Learn more at https://www.microfocus.com/en-us/cyberres/cyberresilient

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

17. The Cyber Pro Podcast

Focus on our friends and colleagues that are professionals in the cybersecurity and IT space.

Learn more at https://cyberpropodcast.podbean.com

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

18. Govcon Giants

Hosted by government contracting expert, 8(a) business mentor, and founder of the Govcon Giants platform, Eric Coffie. With over 250K+ podcast listens, a thriving YouTube channel of 53K+ subscribers, and a LinkedIn community of 24k+ followers, Eric has built one of the most trusted voices in federal contracting. Govcon Giants isn't just another podcast it ranks on the U.S. procurement leaderboard and is recognized as the #5 overall creator worldwide in procurement, cementing Eric's role as a true authority in this space.

On this podcast, you'll discover how to win more contracts, scale your small business into a sustainable government contracting powerhouse, and learn the insider strategies that have helped countless entrepreneurs break into the $700B+ federal marketplace. Through real conversations with industry leaders, agency insiders, and successful business owners, Eric brings you the playbook for success—covering everything from 8(a) certification and set-asides to subcontracting, teaming, and beyond.

Whether you're just starting out or looking to scale, Govcon Giants is your roadmap to navigating one of the most profitable yet misunderstood markets in the world—government contracting.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

19. Cyber Compliance & Beyond

Welcome to the "Cyber Compliance and Beyond" podcast, a Kratos podcast that will bring clarity to compliance, helping put you in control of cybersecurity compliance in your organization.

Kratos is a leading cybersecurity compliance advisory and assessment organization, providing services to both government and commercial clients across varying sectors including defense, space, satellite, financial services, and health care. Through Cyber Compliance & Beyond, our cyber team of experts will share their insights on the latest compliance issues.

We want to hear from you! What unanswered question would you like us to tackle? Is there a topic you'd like us to discuss? Or, you just have some feedback for us? Let us know on Linked and Twitter at Kratos Defense or by email at ccbeyond@kratosdefense.com.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

20. CMMC News by Jun Cyber

This podcast is dedicated for those who want to stay up to date with the Cybersecurity Maturity Model Certification news.  It utilizes Notebook LM to synthesize news articles from Jun Cyber's blog as well as other official CMMC documentation and produces a podcast.

Podcast Description Disclaimer:

The content presented in CMMC News is generated by AI and is intended for informational and educational purposes only. It should not be taken as official guidance for Cybersecurity Maturity Model Certification (CMMC) compliance. For accurate and tailored advice, we recommend consulting a qualified CMMC consultant or reaching out to Jun Cyber directly. Always rely on certified experts for guidance specific to your organization's needs.

Check here for their latest episode:

Subscribe here:

  • Apple Podcasts
  • Spotify

There you have it...

The 20 Best CMMC Readiness And Cybersecurity Podcasts For Contractors

Information Tips

  1. Understand What CMMC Requires
    Contractors should understand the CMMC framework, applicable security requirements, and how their organization fits into the certification process before beginning a readiness effort.
  2. Know Where CUI Lives
    Identifying Controlled Unclassified Information (CUI), where it is stored, how it is transmitted, and who can access it is an important foundation for effective cybersecurity and compliance.
  3. Build a Complete Asset Inventory
    Organizations need visibility into their hardware, software, systems, cloud environments, users, and other assets that support their operations.
  4. Focus on Documentation
    CMMC readiness is not only about implementing security controls. Contractors should also maintain policies, procedures, evidence, and other documentation demonstrating that required practices are being followed.
  5. Identify Security Gaps Early
    A readiness assessment can reveal weaknesses before they become major compliance problems. Contractors should prioritize gaps based on risk, impact, and the requirements applicable to their environment.
  6. Strengthen Access Controls
    Limiting access to sensitive information, implementing appropriate authentication measures, and regularly reviewing user permissions can help reduce the risk of unauthorized access.
  7. Take Incident Response Seriously
    Contractors should have clear processes for detecting, reporting, investigating, and responding to cybersecurity incidents. A documented plan is much more effective when it is regularly tested.
  8. Manage Third-Party Risk
    Vendors, managed service providers, and other partners can affect an organization's cybersecurity posture. Contractors should understand how third parties interact with systems and sensitive information.
  9. Make Cybersecurity an Ongoing Process
    CMMC readiness should not be treated as a one-time certification project. Security controls, systems, risks, and organizational processes should be continuously monitored and improved.
  10. Learn From Industry Experts
    Cybersecurity podcasts can provide valuable perspectives from compliance specialists, security leaders, assessors, and defense-industry professionals. Listening regularly can help contractors stay informed about changing requirements and emerging threats.

Conclusion

CMMC readiness is an ongoing commitment to protecting sensitive information and strengthening cybersecurity practices. For defense contractors, staying informed is just as important as implementing technical controls. The best CMMC and cybersecurity podcasts provide practical guidance, expert perspectives, and real-world lessons that can help organizations better understand compliance and prepare for evolving cybersecurity expectations.

Whether you are beginning your CMMC journey or strengthening an existing security program, these podcasts can be a valuable resource for learning, staying current, and building a more resilient cybersecurity strategy.

Subscribe to the ones that interest you, and send us an email at grow@fame.so if you know of any great CMMC readiness and cybersecurity podcasts that we've missed!

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Get Started

Related content

The 20 Best CMMC Compliance And Readiness Podcasts For Cybersecurity

The 12 Best Hotel Guest Experience Strategies Podcasts To Follow

The 15 Best Deep Tech Founders Podcasts For Technology Leaders

Guides

how to Start A Podcasthow to Launch A Podcasthow to Promote A Podcast

Where you learn how to start and grow a profitable podcast.

AboutBlogTermsPrivacy
Contact
grow@fame.so