1 00:00:00,000 --> 00:00:07,040 Welcome to the Quick 10 Podcast brought to you by Quick Track, focusing on all things 2 00:00:07,040 --> 00:00:12,880 FedCon and cyber defense from different perspectives and different personalities all in 10-ish 3 00:00:12,880 --> 00:00:13,880 minutes. 4 00:00:13,880 --> 00:00:18,040 Here's your host, Derek White. 5 00:00:18,040 --> 00:00:22,440 All right. 6 00:00:22,440 --> 00:00:27,040 Thank you for joining us again on the next episode of the Quick 10 Podcast. 7 00:00:27,040 --> 00:00:29,480 Super, super, super excited for this one. 8 00:00:29,480 --> 00:00:31,760 Can't wait to get rolling. 9 00:00:31,760 --> 00:00:37,440 Today's guest is Allison Giddens, president of operations at Wintech Incorporated. 10 00:00:37,440 --> 00:00:40,040 Allison, how are you? 11 00:00:40,040 --> 00:00:41,040 I am good. 12 00:00:41,040 --> 00:00:42,040 How are you? 13 00:00:42,040 --> 00:00:43,520 I like your necklace there. 14 00:00:43,520 --> 00:00:44,520 That's nice. 15 00:00:44,520 --> 00:00:45,600 Here we go. 16 00:00:45,600 --> 00:00:52,320 It's Wolves' back, Nas Reid, anybody who pays attention to sports in the NBA. 17 00:00:52,320 --> 00:00:54,440 I'm a diehard Timberwolves fan. 18 00:00:54,440 --> 00:01:00,000 We've got Western Conference Finals, Dallas office here at Berlin, and Quick Track, Minneapolis 19 00:01:00,000 --> 00:01:02,840 office have a lot on the line for breaking, right? 20 00:01:02,840 --> 00:01:04,680 So very jazzed up on this side. 21 00:01:04,680 --> 00:01:05,680 How are you doing? 22 00:01:05,680 --> 00:01:06,680 Everything good? 23 00:01:06,680 --> 00:01:07,680 I'm good. 24 00:01:07,680 --> 00:01:08,680 I'm good. 25 00:01:08,680 --> 00:01:16,640 I'm not really that big of a basketball fan, but I watch my Braves like anybody else. 26 00:01:16,640 --> 00:01:20,960 I'm not excited about some of the way that they're playing, but hey, I love my Braves 27 00:01:20,960 --> 00:01:21,960 no matter what. 28 00:01:21,960 --> 00:01:24,880 See that Braves, that's another... 29 00:01:24,880 --> 00:01:25,880 I know. 30 00:01:25,880 --> 00:01:26,880 I'm sorry. 31 00:01:26,880 --> 00:01:27,880 Your Falcons and your Braves, man. 32 00:01:27,880 --> 00:01:28,880 I'm sorry. 33 00:01:28,880 --> 00:01:32,200 We got you on the Braves side, so it's okay. 34 00:01:32,200 --> 00:01:35,000 We still don't talk about 1998 Vikings Falcons here. 35 00:01:35,000 --> 00:01:39,480 Well, if it makes you feel any better, neither do we when it comes to the Patriots. 36 00:01:39,480 --> 00:01:44,440 Well, you and everybody else, yeah, nobody wants to talk about the Patriots. 37 00:01:44,440 --> 00:01:45,440 Boo. 38 00:01:45,440 --> 00:01:47,320 Well, congratulations on all the quarterbacks. 39 00:01:47,320 --> 00:01:48,320 So good luck to you. 40 00:01:48,320 --> 00:01:49,320 Thank you. 41 00:01:49,320 --> 00:01:50,320 Thank you. 42 00:01:50,320 --> 00:01:51,320 We're starting a club. 43 00:01:51,320 --> 00:01:52,320 Oh, it's so good. 44 00:01:52,320 --> 00:01:53,320 All right. 45 00:01:53,320 --> 00:02:00,400 Well, so today's episode is titled, CMMC from a Small Business Perspective. 46 00:02:00,400 --> 00:02:02,800 So thank you again for joining. 47 00:02:02,800 --> 00:02:09,560 You are one of the top voices in my opinion, in our opinion, when it comes down to the 48 00:02:09,560 --> 00:02:14,560 small business side of things, the OSC, the organization seeking certification side of 49 00:02:14,560 --> 00:02:15,560 things. 50 00:02:15,560 --> 00:02:19,240 But I have two disclaimers I want to make. 51 00:02:19,240 --> 00:02:21,840 One, we're going to go over in time today. 52 00:02:21,840 --> 00:02:24,960 So the 10-ish minutes, we're probably going to go over because this is going to be a great 53 00:02:24,960 --> 00:02:25,960 topic. 54 00:02:25,960 --> 00:02:35,320 Two, are we, I'm asking you, Allison, are we at all affiliated at all financially, customer 55 00:02:35,320 --> 00:02:36,320 relation? 56 00:02:36,320 --> 00:02:37,320 Nothing. 57 00:02:37,320 --> 00:02:38,320 No, no. 58 00:02:38,320 --> 00:02:42,640 Outside of that, the check for $100,000 you gave me to do the podcast. 59 00:02:42,640 --> 00:02:44,760 No, there's been. 60 00:02:44,760 --> 00:02:47,360 That was just to help you guys pay for for. 61 00:02:47,360 --> 00:02:52,040 But anyway, oh, oh, oh, oh, oh, oh, we, um. 62 00:02:52,040 --> 00:02:53,040 Yeah. 63 00:02:53,040 --> 00:02:57,300 So I do want to make the disclaimer, Allison and Wintek are not a customer or not a partner. 64 00:02:57,300 --> 00:02:58,480 There's no affiliation. 65 00:02:58,480 --> 00:03:01,680 We are peers and friends from the industry. 66 00:03:01,680 --> 00:03:09,000 You know, kudos to you for being on a lot of the industry events, being very involved 67 00:03:09,000 --> 00:03:10,000 in the community. 68 00:03:10,000 --> 00:03:12,560 Again, I think that carries a ton of weight. 69 00:03:12,560 --> 00:03:18,440 I've sent your stuff to prospects in relationships that have come up over the years because your 70 00:03:18,440 --> 00:03:22,000 take on things related to CMMC are very valuable. 71 00:03:22,000 --> 00:03:23,000 So thank you for doing that. 72 00:03:23,000 --> 00:03:24,000 Appreciate that. 73 00:03:24,000 --> 00:03:25,000 Yeah, you bet. 74 00:03:25,000 --> 00:03:26,000 All right. 75 00:03:26,000 --> 00:03:27,960 So let's get into it. 76 00:03:27,960 --> 00:03:31,960 Let's talk a little bit about, you know, your side of it. 77 00:03:31,960 --> 00:03:34,160 I'll just tee it up to you. 78 00:03:34,160 --> 00:03:37,120 Go into a little bit of things before I ask you just a couple of questions that I want 79 00:03:37,120 --> 00:03:39,440 to make sure we get in here. 80 00:03:39,440 --> 00:03:40,440 You know, Wintek. 81 00:03:40,440 --> 00:03:41,440 Yeah. 82 00:03:41,440 --> 00:03:43,920 Allison Giddens, day in the life of you. 83 00:03:43,920 --> 00:03:49,240 What's some of the stuff you want to share regarding the CMMC life that you've learned 84 00:03:49,240 --> 00:03:50,240 and that you're living? 85 00:03:50,240 --> 00:03:51,440 Oh, man. 86 00:03:51,440 --> 00:03:59,560 So I was on a panel a few years ago and a question asked was, is cybersecurity the number 87 00:03:59,560 --> 00:04:03,040 one risk on your day to day life? 88 00:04:03,040 --> 00:04:06,800 And I went down the line and a bunch of the big primes, they were all like, yeah, yeah, 89 00:04:06,800 --> 00:04:07,800 yeah. 90 00:04:07,800 --> 00:04:09,240 Got to me and I was like, no. 91 00:04:09,240 --> 00:04:14,320 And it was almost like the record stop that, you know, and so the day in the life of me, 92 00:04:14,320 --> 00:04:15,920 I'll give you kind of a perspective. 93 00:04:15,920 --> 00:04:19,160 Yesterday, yesterday was a heck of a day. 94 00:04:19,160 --> 00:04:23,120 Right off the bat, walked in to find that we had a problem with a machine. 95 00:04:23,120 --> 00:04:25,160 We were trying to get back online to run some parts. 96 00:04:25,160 --> 00:04:31,280 Then a couple hours later, we found out that a very large shipping carrier had misplaced 97 00:04:31,280 --> 00:04:36,360 an order for us that was, oh, I don't know, eighty thousand dollars worth of parts. 98 00:04:36,360 --> 00:04:39,600 And it was MIA. 99 00:04:39,600 --> 00:04:47,160 And then a couple hours after that, we got notified that one of our machinists was leaving 100 00:04:47,160 --> 00:04:49,160 the company to go be closer to family. 101 00:04:49,160 --> 00:04:53,280 And we kind of had to in a pinch figure out what we were going to do about that. 102 00:04:53,280 --> 00:04:55,840 Meanwhile, we're preparing for an audit. 103 00:04:55,840 --> 00:05:00,480 And then I got word that there was some material that we were expecting to hit our dock today 104 00:05:00,480 --> 00:05:01,600 to make some parts. 105 00:05:01,600 --> 00:05:03,980 And it's not going to be here until June. 106 00:05:03,980 --> 00:05:13,040 So you have all these other things that are happening while I'm managing CMMC at Wintec. 107 00:05:13,040 --> 00:05:15,800 So yeah, that's just a couple of things going on. 108 00:05:15,800 --> 00:05:17,800 That was the morning. 109 00:05:17,800 --> 00:05:21,720 There's no other business out there that has people wearing multiple hats as the president 110 00:05:21,720 --> 00:05:22,720 of operations. 111 00:05:22,720 --> 00:05:23,720 So it's good. 112 00:05:23,720 --> 00:05:26,280 You have, that sounds like three hours of work a week. 113 00:05:26,280 --> 00:05:27,280 That's not bad. 114 00:05:27,280 --> 00:05:28,280 Due to my sleep. 115 00:05:28,280 --> 00:05:29,280 Yeah, right. 116 00:05:29,280 --> 00:05:31,400 Oh, well, that's I mean, that's it, right? 117 00:05:31,400 --> 00:05:37,880 That is that is part of the we'll call it bottleneck frustration is going button. 118 00:05:37,880 --> 00:05:40,760 Cybersecurity is a big deal. 119 00:05:40,760 --> 00:05:45,240 And now you can look at the news today in late May of just the last couple of days of 120 00:05:45,240 --> 00:05:47,960 some pretty serious stuff that's going on. 121 00:05:47,960 --> 00:05:51,400 That's in no relation to CMMC for the most part, right? 122 00:05:51,400 --> 00:05:53,060 It's scary stuff. 123 00:05:53,060 --> 00:05:54,420 So small, okay. 124 00:05:54,420 --> 00:06:00,560 So to peel it back a little bit, small, small business, medium enterprise, you know, you 125 00:06:00,560 --> 00:06:04,400 name it, everyone's got challenges when it comes to cybersecurity requirements until 126 00:06:04,400 --> 00:06:06,220 it becomes second nature. 127 00:06:06,220 --> 00:06:10,700 There's always going to be challenges on the outcomes because you can't touch and feel 128 00:06:10,700 --> 00:06:11,700 most of it. 129 00:06:11,700 --> 00:06:16,880 You just have to to know versus believe is kind of our thing here. 130 00:06:16,880 --> 00:06:29,100 So from a biggest frustration side of of your day to day, you can go back a year or two 131 00:06:29,100 --> 00:06:31,960 years just in general. 132 00:06:31,960 --> 00:06:34,560 You know, this isn't a complaint fest or anything like that. 133 00:06:34,560 --> 00:06:39,660 But what is your biggest frustration that you'd like to see become less frustrating 134 00:06:39,660 --> 00:06:44,600 if you were able to rub the genie lamp and have things happen? 135 00:06:44,600 --> 00:06:50,500 I think one of the biggest frustrations in my world is managing up. 136 00:06:50,500 --> 00:06:55,980 So and I can only imagine what it's like in a small business where you're not the one 137 00:06:55,980 --> 00:06:58,600 who ultimately has authority over things. 138 00:06:58,600 --> 00:07:04,900 But when we get things from when we get orders from customers that are big primes or when 139 00:07:04,900 --> 00:07:10,560 we get communication from our government friends and partners, when there's no consistency, 140 00:07:10,560 --> 00:07:16,320 whether that's marking of data, whether that's communication of flow down, everything in 141 00:07:16,320 --> 00:07:21,360 between, it's really hard for us to continue to follow the rules when we don't really know 142 00:07:21,360 --> 00:07:27,320 what they are or when we're being kind of told to do things that in writing, it's not 143 00:07:27,320 --> 00:07:31,880 what it says or it's the opposite, you know, where we'll get things, we'll get overkill, 144 00:07:31,880 --> 00:07:36,400 we'll get a joke that I have a 41 page purchase order for an $800 bracket. 145 00:07:36,400 --> 00:07:39,440 It's like, come on, guys, come on. 146 00:07:39,440 --> 00:07:44,200 You know, it's one of those if everything is a priority, then nothing is a priority. 147 00:07:44,200 --> 00:07:50,120 So I think my frustration, my biggest frustration is, you know, I'm a manufacturer, you tell 148 00:07:50,120 --> 00:07:53,080 me what it is that you need and I will do it. 149 00:07:53,080 --> 00:07:54,080 Yeah. 150 00:07:54,080 --> 00:08:00,360 Okay, then let me ask you a follow up question to that because this comes up a lot. 151 00:08:00,360 --> 00:08:07,280 So now granted, disclaimer here is that you're one of the nicest people on the planet and 152 00:08:07,280 --> 00:08:08,960 also very knowledgeable in this space. 153 00:08:08,960 --> 00:08:10,760 So a little bit easier maybe for you. 154 00:08:10,760 --> 00:08:18,840 So what are some strategies that and advice you can give on how to communicate upstream? 155 00:08:18,840 --> 00:08:20,480 That's a good question. 156 00:08:20,480 --> 00:08:24,320 You know, like, you know, it's never perfect, you don't just get to walk into an office, 157 00:08:24,320 --> 00:08:25,320 right? 158 00:08:25,320 --> 00:08:29,560 So what are some ways that you've seen success on getting some of the answers that you need 159 00:08:29,560 --> 00:08:36,080 to at least at the very least, give you something to stand on as you make very impactful decisions 160 00:08:36,080 --> 00:08:38,120 around getting these requirements in place? 161 00:08:38,120 --> 00:08:42,160 Well, I think it goes without saying, you always want things in writing, right? 162 00:08:42,160 --> 00:08:47,680 But sometimes I really think it matters the relationship between the parties. 163 00:08:47,680 --> 00:08:54,280 So how I personally work with a buyer at a prime is going to be slightly different than 164 00:08:54,280 --> 00:09:00,680 it would say somebody directly at DLA or DOD. 165 00:09:00,680 --> 00:09:06,040 You know, there might there's a time and a place to pick up the phone, have a conversation. 166 00:09:06,040 --> 00:09:08,640 You leave less to email tone when you do that. 167 00:09:08,640 --> 00:09:12,120 And you can follow it up with an email to get things in writing. 168 00:09:12,120 --> 00:09:17,980 So it's you can say and do things to allow the other party to save face. 169 00:09:17,980 --> 00:09:24,200 So just like I am not by any stretch of the imagination, a technical, you know, genius 170 00:09:24,200 --> 00:09:32,200 with CMMC, there's there's no way I can pick up the phone and call my my buyer at a prime 171 00:09:32,200 --> 00:09:38,920 and say, hey, you flow down the bars 252.204 dash 7012. 172 00:09:38,920 --> 00:09:43,680 But I'm looking at the data that you sent and I don't see anything marked. 173 00:09:43,680 --> 00:09:44,680 Will you help me? 174 00:09:44,680 --> 00:09:46,360 You know, did I miss this? 175 00:09:46,360 --> 00:09:48,480 Because it's a little bit unfamiliar to me. 176 00:09:48,480 --> 00:09:52,160 And now, you know, you're letting them kind of be the bigger person and say something 177 00:09:52,160 --> 00:09:54,320 like, oh, it was flowed to us. 178 00:09:54,320 --> 00:09:56,060 And so I just copy pasted my bad. 179 00:09:56,060 --> 00:09:57,520 Let me take that out. 180 00:09:57,520 --> 00:10:00,560 Or you know, oh, gosh, yeah, you're right. 181 00:10:00,560 --> 00:10:01,800 It doesn't have marking on it. 182 00:10:01,800 --> 00:10:03,880 Let me go talk to my government customer. 183 00:10:03,880 --> 00:10:08,680 And you know, you're allowing that other person to have those kinds of, you know, you're 184 00:10:08,680 --> 00:10:10,000 not putting them on defense. 185 00:10:10,000 --> 00:10:13,680 You're not telling them they're they don't know their job because they probably very 186 00:10:13,680 --> 00:10:14,760 much know their job. 187 00:10:14,760 --> 00:10:16,480 It's just just like us. 188 00:10:16,480 --> 00:10:19,840 We're being we're being told, you know, you've got to be experts about everything. 189 00:10:19,840 --> 00:10:26,000 So I think that's that's a key in that how to handle those kinds of circumstances and 190 00:10:26,000 --> 00:10:28,480 then follow it up with the email, you know, get everything in writing. 191 00:10:28,480 --> 00:10:31,600 So hey, thanks again for talking to me. 192 00:10:31,600 --> 00:10:33,680 You know, look out for that purchase order update. 193 00:10:33,680 --> 00:10:37,000 So that's that's that's that's good. 194 00:10:37,000 --> 00:10:41,120 That's that's what one of the biggest things that we share, too, is, you know, if you're 195 00:10:41,120 --> 00:10:47,240 going to get stuck in this situation in the future, the and you can't get the answer, 196 00:10:47,240 --> 00:10:48,240 get it in writing. 197 00:10:48,240 --> 00:10:50,720 And if they don't do diligence means a lot. 198 00:10:50,720 --> 00:10:54,720 Obviously, if this was a risk based only approach, that would be great in some cases. 199 00:10:54,720 --> 00:10:59,240 But you know, you're a business, you've got deliverables, you've got, you know, they don't 200 00:10:59,240 --> 00:11:02,300 expect you to go out of business, right, by trying to figure stuff out. 201 00:11:02,300 --> 00:11:04,720 So that's great advice. 202 00:11:04,720 --> 00:11:09,360 Pretty much echo that on our side as well, too. 203 00:11:09,360 --> 00:11:15,520 Another question that I'm excited to hear your answer on is, you know, it's it's the 204 00:11:15,520 --> 00:11:19,400 middle of twenty twenty four. 205 00:11:19,400 --> 00:11:25,480 If you could hop in the telephone booth time machine with Bill and Ted and go on an excellent 206 00:11:25,480 --> 00:11:28,040 adventure. 207 00:11:28,040 --> 00:11:29,040 Not a bogus journey. 208 00:11:29,040 --> 00:11:30,040 Let's go. 209 00:11:30,040 --> 00:11:34,280 Excellent adventure and go back five years from today. 210 00:11:34,280 --> 00:11:41,360 What would you tell yourself and other small businesses, manufacturers that you know today? 211 00:11:41,360 --> 00:11:46,320 What would you tell them five years ago that you think would help on the impact side for 212 00:11:46,320 --> 00:11:47,320 today? 213 00:11:47,320 --> 00:11:48,320 Five years ago. 214 00:11:48,320 --> 00:11:50,160 So five years ago would be what? 215 00:11:50,160 --> 00:11:52,480 May of twenty nineteen or twenty twenty. 216 00:11:52,480 --> 00:11:54,000 I mean, stuff. 217 00:11:54,000 --> 00:11:58,800 OK, first off, stock up on Lysol wipes and masks. 218 00:11:58,800 --> 00:12:03,320 No, if I could tell them all over again. 219 00:12:03,320 --> 00:12:04,320 Right. 220 00:12:04,320 --> 00:12:10,440 So we actually went to we were not in we weren't in a terrible place then. 221 00:12:10,440 --> 00:12:21,120 But I think that if I knew what was coming, I probably would have maybe upgraded or change 222 00:12:21,120 --> 00:12:26,040 our infrastructure a little bit sooner than we did. 223 00:12:26,040 --> 00:12:31,300 I think I was gun shy to do certain things along the way, thinking it was going to rock 224 00:12:31,300 --> 00:12:38,720 the boat much quicker than or much more much more significantly than it did. 225 00:12:38,720 --> 00:12:39,960 I think it's a business owner. 226 00:12:39,960 --> 00:12:45,000 You know, we we're kind of gun shy at times to make big changes because if it's not broken, 227 00:12:45,000 --> 00:12:47,160 where are we fixing it? 228 00:12:47,160 --> 00:12:49,880 And so the moment that somebody says, well, you need to do this because it's going to 229 00:12:49,880 --> 00:12:50,880 improve your security. 230 00:12:50,880 --> 00:12:55,280 You know, what we're thinking is, oh, my gosh, that means that now so and so is it's going 231 00:12:55,280 --> 00:12:56,280 to look different. 232 00:12:56,280 --> 00:12:59,400 The interface and their creature habit and they're going to be ticked off. 233 00:12:59,400 --> 00:13:00,920 And I don't want to tick off my employees. 234 00:13:00,920 --> 00:13:03,400 I want to make this easy for them. 235 00:13:03,400 --> 00:13:09,280 I think that if it's important finding a partner, whether it's an MSP or consultant or somebody 236 00:13:09,280 --> 00:13:14,400 internally, it's important to find somebody you trust who understands the business processes. 237 00:13:14,400 --> 00:13:20,280 And I think if we could do it all over, maybe I just would have done certain things to improve 238 00:13:20,280 --> 00:13:22,000 our stance a little bit sooner. 239 00:13:22,000 --> 00:13:25,160 I would have maybe expedited some things. 240 00:13:25,160 --> 00:13:29,160 But I think it's important that people realize that you just want to be better than you were 241 00:13:29,160 --> 00:13:30,400 yesterday. 242 00:13:30,400 --> 00:13:32,800 So it's OK for the baby steps. 243 00:13:32,800 --> 00:13:33,800 That's OK. 244 00:13:33,800 --> 00:13:41,800 Well, I'm going to assume that's because that's a that's a terrific answer and that you because 245 00:13:41,800 --> 00:13:46,000 you know what you know and you've put the time in, you know, you assume you don't just 246 00:13:46,000 --> 00:13:48,880 go out to the market and say, I'm going to talk to the cheapest person out there because 247 00:13:48,880 --> 00:13:51,880 that doesn't usually end up in a great spot. 248 00:13:51,880 --> 00:13:57,840 But you know, how does how does it feel personally when when you're you're you're heading up 249 00:13:57,840 --> 00:14:02,400 the CMMC stuff by knowing that stuff, knowing that you've put the time and effort and do 250 00:14:02,400 --> 00:14:05,640 you mean, do you feel like you sleep better now than you would if you would have waited 251 00:14:05,640 --> 00:14:08,360 until like a year ago to start working on this stuff? 252 00:14:08,360 --> 00:14:10,000 Would that would that freak you out at night? 253 00:14:10,000 --> 00:14:15,800 Oh, yeah, I think I mean, looking around at people that are kind of waking up and now 254 00:14:15,800 --> 00:14:20,720 all of a sudden starting, it like makes me itch. 255 00:14:20,720 --> 00:14:23,240 You know, it's like, oh, gosh. 256 00:14:23,240 --> 00:14:26,800 And to some people, it's kind of and I am not. 257 00:14:26,800 --> 00:14:30,960 I mean, I know you called me a nice person, but I don't really think I mean, yes, my husband 258 00:14:30,960 --> 00:14:33,680 and he'll probably disagree with you. 259 00:14:33,680 --> 00:14:39,040 But there there are some things that like I'll look around at some of these smaller 260 00:14:39,040 --> 00:14:43,440 businesses that are maybe 20 percent defense industrial based. 261 00:14:43,440 --> 00:14:46,480 And so they're just now waking up saying, you know, maybe I should start doing these 262 00:14:46,480 --> 00:14:47,840 things. 263 00:14:47,840 --> 00:14:50,520 And I'm just like, what are you do? 264 00:14:50,520 --> 00:14:55,560 Like, if this was not a significant part of your business, why are you already all of 265 00:14:55,560 --> 00:14:57,760 a sudden? 266 00:14:57,760 --> 00:15:00,440 Now pulling the trigger on things. 267 00:15:00,440 --> 00:15:04,520 And I don't know, I you don't know what you don't know. 268 00:15:04,520 --> 00:15:11,960 And you know, I take for granted that that as co-owner of Wintec, I have a business partner 269 00:15:11,960 --> 00:15:16,540 that handles the manufacturing and sales perspective. 270 00:15:16,540 --> 00:15:20,480 So if it were just me, I don't know if I'd be this involved. 271 00:15:20,480 --> 00:15:22,600 I don't know that I'd have the time to be this involved. 272 00:15:22,600 --> 00:15:25,080 It's all about resource constraints. 273 00:15:25,080 --> 00:15:27,720 So yeah, I don't know. 274 00:15:27,720 --> 00:15:34,520 I definitely itch when I see that there are people just now kind of getting with the program. 275 00:15:34,520 --> 00:15:35,520 Yeah. 276 00:15:35,520 --> 00:15:39,520 Well, that that, you know, Twilight Zone time machine or whatever you want to call it, you 277 00:15:39,520 --> 00:15:41,800 go back in time. 278 00:15:41,800 --> 00:15:45,760 You know, there was efforts to be made to have resources to help individuals like you 279 00:15:45,760 --> 00:15:51,440 and companies like yours to to try to do the right thing. 280 00:15:51,440 --> 00:15:57,240 And I think that came with the expertise just wasn't there on it's not just a gap assessment. 281 00:15:57,240 --> 00:16:03,040 It's not just a it's not just a build a poem and have a system security plan in place and 282 00:16:03,040 --> 00:16:04,760 get to it when you have time. 283 00:16:04,760 --> 00:16:06,400 Of course, that was accepted. 284 00:16:06,400 --> 00:16:08,440 Unfortunately, we all know that story. 285 00:16:08,440 --> 00:16:10,240 And that's why CMMC exists. 286 00:16:10,240 --> 00:16:15,680 But at the same time, you know, I think you hit on one of the biggest things, too, is 287 00:16:15,680 --> 00:16:17,960 you do have to kind of peel it back to the atoms, right? 288 00:16:17,960 --> 00:16:22,400 You really have to go back, go back to what you can control, know what you know. 289 00:16:22,400 --> 00:16:23,400 You know who works there. 290 00:16:23,400 --> 00:16:26,720 You know what they access, you know, where data flows. 291 00:16:26,720 --> 00:16:27,720 Understanding that is huge. 292 00:16:27,720 --> 00:16:28,720 That's that's always a big thing. 293 00:16:28,720 --> 00:16:33,760 So I think that's one of the big takeaways is every time you see a breach in the news, 294 00:16:33,760 --> 00:16:34,760 right? 295 00:16:34,760 --> 00:16:36,720 Everything large, small doesn't matter. 296 00:16:36,720 --> 00:16:38,280 Every single time. 297 00:16:38,280 --> 00:16:39,880 They always seem to struggle with. 298 00:16:39,880 --> 00:16:43,240 Well, gosh, I didn't realize that those people had access to that. 299 00:16:43,240 --> 00:16:47,080 I didn't realize that the credentials are being shared. 300 00:16:47,080 --> 00:16:49,000 And you know, you you look at that. 301 00:16:49,000 --> 00:16:51,080 Of course, it's easy to say that after it happens. 302 00:16:51,080 --> 00:16:55,840 But you know, I go back to you should start with least privilege access. 303 00:16:55,840 --> 00:17:00,320 And Allison should have access to things that probably 95 percent of your company shouldn't 304 00:17:00,320 --> 00:17:02,160 have access to if not more. 305 00:17:02,160 --> 00:17:05,800 So that makes just such a firmer foundation. 306 00:17:05,800 --> 00:17:06,800 So I like that. 307 00:17:06,800 --> 00:17:11,480 Where you're coming from with that is is having a better foundation on your. 308 00:17:11,480 --> 00:17:15,560 Gosh, that sounds so cliche about having a better foundation on your cybersecurity and 309 00:17:15,560 --> 00:17:20,000 how your data is handled, whether it's related to CMMC or just your your what matters to 310 00:17:20,000 --> 00:17:21,360 you most intellectual property. 311 00:17:21,360 --> 00:17:25,200 Well, it's hard because, you know, if you're a if you're a small business and this is the 312 00:17:25,200 --> 00:17:31,800 way you've always done it to some small businesses, you're what I'm hearing is, OK, you need to 313 00:17:31,800 --> 00:17:33,760 change the way you're doing everything. 314 00:17:33,760 --> 00:17:35,540 And that's not what you're saying. 315 00:17:35,540 --> 00:17:37,400 But that's what's being heard. 316 00:17:37,400 --> 00:17:39,800 You know, is, oh, wait, you want to take access away? 317 00:17:39,800 --> 00:17:44,400 Well, then that means that in my head, all the stuff in that folder on the server, on 318 00:17:44,400 --> 00:17:50,040 the file server that's on Pram now, you know, now four out of five of my office people shouldn't 319 00:17:50,040 --> 00:17:51,040 have it. 320 00:17:51,040 --> 00:17:52,040 Yeah. 321 00:17:52,040 --> 00:17:56,520 But what if I'm out of town and I need them to send banking instructions to it's probably 322 00:17:56,520 --> 00:17:59,240 a bad example because of all the fishing spearfishing. 323 00:17:59,240 --> 00:18:04,020 But you know, what if I'm out of town and I need them to send, you know, the such and 324 00:18:04,020 --> 00:18:07,160 such to to my customer? 325 00:18:07,160 --> 00:18:12,800 We fall into this trap of, well, everybody wears a lot of hats, so everybody needs access. 326 00:18:12,800 --> 00:18:15,360 And that very well might be true in some circumstances. 327 00:18:15,360 --> 00:18:20,400 But if it is, document it, write it down, explain why. 328 00:18:20,400 --> 00:18:21,640 Yep. 329 00:18:21,640 --> 00:18:22,640 Go through risk. 330 00:18:22,640 --> 00:18:27,480 You know, what happens if to this company, if, you know, I just say Christmas bonuses. 331 00:18:27,480 --> 00:18:31,000 That's like one of my things I always go to is you have obligations. 332 00:18:31,000 --> 00:18:33,380 We're not talking about trying to build Fort Knox. 333 00:18:33,380 --> 00:18:37,240 You know, this is but multifactor authentication. 334 00:18:37,240 --> 00:18:39,560 You know, it's it sounds scary. 335 00:18:39,560 --> 00:18:43,280 You know, I say it at Christmas time and my parents and my family go, you know, and I've 336 00:18:43,280 --> 00:18:46,360 just it's not, you know, give them a little presentation and we get it. 337 00:18:46,360 --> 00:18:47,360 We got it set up. 338 00:18:47,360 --> 00:18:48,600 And now they're accustomed to it. 339 00:18:48,600 --> 00:18:49,600 It takes a half second. 340 00:18:49,600 --> 00:18:50,600 Most of the time. 341 00:18:50,600 --> 00:18:52,480 But yes, it's not that simple. 342 00:18:52,480 --> 00:18:54,520 If just say, well, that solves everything. 343 00:18:54,520 --> 00:18:56,520 But you know, that's what they're asking. 344 00:18:56,520 --> 00:18:57,520 Right. 345 00:18:57,520 --> 00:19:01,720 They're asking to lower the risk of things that you should be doing before you start 346 00:19:01,720 --> 00:19:06,600 putting on the stuff that is more advanced so that if you have to be against more advanced 347 00:19:06,600 --> 00:19:11,680 from there, you can build it up versus, you know, bolting stuff on and just throwing stuff 348 00:19:11,680 --> 00:19:12,680 at the wall. 349 00:19:12,680 --> 00:19:14,240 So well, this was awesome. 350 00:19:14,240 --> 00:19:18,320 I know we are over in time and that's OK because we can. 351 00:19:18,320 --> 00:19:21,960 And that's the beauty of not having anything scripted. 352 00:19:21,960 --> 00:19:25,360 But again, thank you, Allison, for joining. 353 00:19:25,360 --> 00:19:31,760 I will say if you liked what you heard or you've seen, if you're watching this on YouTube, 354 00:19:31,760 --> 00:19:34,160 go on LinkedIn, follow Allison. 355 00:19:34,160 --> 00:19:35,240 Her perspectives are great. 356 00:19:35,240 --> 00:19:40,600 She just put out a piece the other day, which I thought was great from your perspective 357 00:19:40,600 --> 00:19:42,680 of manufacturer. 358 00:19:42,680 --> 00:19:45,520 And you know, as time goes on, things are going to change. 359 00:19:45,520 --> 00:19:46,520 Perspectives are going to change. 360 00:19:46,520 --> 00:19:48,120 Opinions are going to change. 361 00:19:48,120 --> 00:19:49,480 Attitudes are going to change. 362 00:19:49,480 --> 00:19:51,680 You know, businesses should be ready for that. 363 00:19:51,680 --> 00:19:55,000 So thank you again. 364 00:19:55,000 --> 00:19:57,960 And we'll have you on again in the future for sure. 365 00:19:57,960 --> 00:20:03,620 And for those that are listening on their favorite podcast platform, make sure you subscribe 366 00:20:03,620 --> 00:20:04,620 or follow. 367 00:20:04,620 --> 00:20:05,620 YouTube, same thing. 368 00:20:05,620 --> 00:20:09,760 So you don't miss out on future episodes as we start to ramp some of these up. 369 00:20:09,760 --> 00:20:14,320 It'll be interesting to have Allison on again and see how your perspective maybe has changed 370 00:20:14,320 --> 00:20:17,600 based on other dominoes falling the way that they will. 371 00:20:17,600 --> 00:20:18,600 So yes. 372 00:20:18,600 --> 00:20:19,600 All right. 373 00:20:19,600 --> 00:20:20,600 Well, thanks again. 374 00:20:20,600 --> 00:20:25,200 Take care and we'll see you next time. 375 00:20:25,200 --> 00:20:26,200 Go Timberwolves. 376 00:20:26,200 --> 00:20:27,200 Yeah, Wolves back. 377 00:20:27,200 --> 00:20:34,560 Thank you for listening to this episode and make sure to subscribe to the Quick 10 Podcast 378 00:20:34,560 --> 00:20:39,440 wherever you get your podcasts and check us out on YouTube as well. 379 00:20:39,440 --> 00:20:46,240 For more information about Quick Track, visit our website at www.quicktrack.com. 380 00:20:46,240 --> 00:21:05,480 And we'll see you next time.