Regulatory Phishing by Hunton Andrews Kurth LLP

Latest Episodes:

The Current State of the CMMC Market with Carter Schoenberg Aug 14, 2026

Show notes

Carter Schoenberg joins government contracts and cybersecurity attorney Eric Crusius to discuss the CMMC Phase 2 pause, its impact on the CMMC marketplace and whether it may affect how companies prioritize cybersecurity readiness.

Carter also shares his predictions for what may come next once the pause ends.

Join us for an informative conversation.

Do We Still Need CMMC? A Conversation with Stacy Bostjanick. Jul 31, 2026

Show notes

Stacy Bostjanick joins Hunton partner Eric Crusius on Regulatory Phishing to discuss the origins of the CMMC program, where it is at now and what we should expect from the Phase 2 pause. Join us for a lively and fascinating conversation.

The Future of CMMC with Andy Sauer Jul 20, 2026

Show notes

Andy Sauer, the CEO of Andy Sauer, a managed services provider and C3PAO joins Eric Crusius to discuss the future of CMMC and what the CIO's announcement about the program could mean. Please join us for an interesting and lively conversation.

The Pentagon Pauses CMMC Phase 2 with Jacob Horne Jul 14, 2026

Show notes

In this episode of Regulatory Phishing, Eric Crusius discusses the implications of the news that the Pentagon has paused implementation of Phase 2 ahead of the November 10, 2026 milestone. Then Jacob Horne joins Eric as they discuss the program and what to expect moving forward and the impact on contractors in the defense space.

Is the Pentagon Accelerating CMMC Implementation? May 26, 2026

Show notes

In this episode of Regulatory Phishing, Eric Crusius discusses some newer timing issues that have arisen that may require contractors to obtain a CMMC certification earlier than anticipated. Eric discusses new opportunities requiring CMMC, contracting officer discretion to include CMMC in existing contracts and when CMMC is required in the solicitation process.

CMMC Roundtable: Practical Solutions to Your CMMC Questions Feb 17, 2026

Show notes

After much anticipation, Cybersecurity Maturity Model Certification (CMMC) is here. This webinar featuring speakers from different parts of the ecosystem examines what we see as CMMC rolls out, and how we are helping our clients and others through those issues.

They include:

How to identify Controlled Unclassified Information
Organizational culture changes needed for CMMC
Common tools to help companies get compliant
Roadblocks in getting ready for assessments
Common pre-assessment, assessment, and post-assessment issues to consider
The regulatory and False Claims Act risks

Attorney Advertising. Case results depend upon a variety of factors unique to each case. Case results do not guarantee or predict a similar result in any future case. Unless otherwise noted, attorneys not certified by the Texas Board of Legal Specialization.

Finding the Right MSP to Manage Your CUI Oct 03, 2025

Show notes

In this episode of Regulatory Phishing, Eric Crusius is joined by Ed Bassett, who is the Chief Cybersecurity Evangelist at NeoSystems and a member of the board of the MSP Collective. Managed Service Providers play a vital role in the protection of CUI assets and choosing the right MSP can be a daunting task. Ed and Eric discuss what companies should look for when choosing an MSP and how an MSP can impact a company's efforts undergo a successful CMMC assessment.

Click here to learn more about MSP Collective.

The Role of Cloud Service Providers in the CMMC Ecosystem Oct 03, 2025

Show notes

Michael Greenman from Deltek joins Eric Crusius to discuss how cloud service providers (CSPs) have emerged as key players in the cybersecurity compliance landscape. From supporting DFARS 7012, CMMC and ITAR compliance, today's government contracting regulatory frameworks increasingly rely on CSPs to demonstrate FedRAMP Moderate Authorization or Equivalency to reduce risk. This episode explores how CSPs support an organization's compliance journey, with a focus on the shared responsibility model, evidence generation, and the rising demand for independently assessed, secure environments. We also unpack what "FedRAMP Authorized" vs. "FedRAMP Equivalency" really means for contractors working with the Department of Defense, and how CSP partnerships can impact a contractor's ability to win government work under emerging regulations like CMMC.

Click here for more about the Deltek Clarity Government Contracting Industry Study

A Closer Look at the CMMC Rollout Oct 01, 2025

Show notes

The regulations released by the Department of Defense/War roll out the CMMC program over a number of years. In this episode of Regulatory Phishing, we will look at the timing and what it means for the Defense Industrial Base.

The DFARS CMMC Final Rule is Here! Sep 19, 2025

Show notes

In this episode of Regulatory Phishing, government contracts and cybersecurity attorney Eric Crusius discusses the latest rule released by the Department of Defense implementing the Cybersecurity Maturity Model Certification (CMMC) program and the implications and timing of the rule. Eric also discusses what changed from the proposed version of the rule and what is next for the CMMC program.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Regulatory Phishing by Hunton Andrews Kurth LLP

Related Podcasts

Links

Stay Connected