Collaborate on Chrome River Invoice for Public Relations with Ease Using airSlate SignNow

Chrome river invoice for Public Relations

[Music] hello and welcome I'm Mike Martin I'm one of the partner leaders here at AWS hi I'm Sanjeev Nero I'm the CIO at Carney and Company it's an auditing technology and consulting company Jason hi my name is Jason Waldrop and I'm the president of managed services at Red River at Red River is a technology transformation business and we have three business units VAR managed services and programs and I run the managed Services business in GP Mike thank you for having me I'm GP gaurav pal for sure but I'm the CEO and founder of Stack armor we are a ATO acceleration company that helps organizations get cmmc and fisma atos on AWS and AWS gov clown pleasure to be here thank you Sanjeev I know that you've worked with Red River for quite some time right you're you've got a lot of iron trust there but tell us a little bit about this particular project and why you chose to work with them on this project we are very cognizant that I run the technology Services internal to Corning and we can't hire everybody so we look for augmentation from other companies which can help provide the services that we don't want to do organically and Red River has been an excellent partner to us in not only giving us managed Services providing help desk services but also additionally providing compliance and operational Security on platforms such as state of the art so rather than building it internally we have this partnership where we understand the market we understand what the Gap analysis is for the needs that we have and Red River through a range of products particularly focusing on cmmc lately has been really it's been a long journey it's interesting journey and we feel that we are working very well together in providing us enhanced security platform that we continue to build on a really great partnership yeah it is a really wonderful project and Jason we know Red River has a lot of capabilities right but in this particular case you're working with stack armor what was it that stack armor brought to the table sure yeah we um so we've been partnered with stack armor for quite some time uh starting back uh with when 800 171 first came out uh we hired so we ourselves at Red River are federal contractor we hired stack armor to come help us solve um some 800 171 technology compliance issues that we had so when it came time for us to build a cmmc stack for clients like Kearney where now we are going to be subject to compliance slowdowns that they for through their audits it was obvious it was there was not even a question we were gonna go to stack armor to help us solve that problem and GP tell us a little bit about your superpower and how you've helped them solve that problem we were really excited when you know Jason and I met and we talked a little bit about uh red reverse future Direction and we just felt that Red River particularly with the partnership with AWS us was really well positioned to go in and help customers like Carney and others beat some of the CMC compliance challenges let me just say something to this while we are talking about compliance and 800 171 controls and other controls in cmmc we cannot um not talk about operational security both the compliance and the operational security go hand in hand so this is a way for us for me when I look at our company security posture we are not saying you have to be compliant or you have to be secure you have to be both compliant and secure and having platforms like what we are talking about here helps us to have not only a point in time view but an ongoing what we call continuous assessment so that we are aware of threats because they don't come sporadically they are always there and it it is a much better way to be operationally resilient and secure and therefore we are really excited at what happens what capabilities we get through the platforms that we're talking here let's talk about managed services and just the aspect of of how you fill in gaps for your customers where they don't necessarily have the capabilities and skills sure I mean the way in a sentence we explain what we do is we're summer all of a client's I.T Service delivery organization so in the case of of Kearney we we partner together with their internal I.T shop to deliver a common outcome to their clients as a result you can imagine we have a lot of instrumentation and and tools and Telemetry in the environment so all of that becomes in scope for a cmmc level 3 audit and so we had to work extensively with a AWS on the gov Cloud framework to to leverage a lot of the controls that are already built in there put in some of our own stuff with stack armor underneath that to create a foundation and then we started to lay in the requisite Tech stack to support uh sanjiv and Kearney and clients like that right but I think what's really exciting to us is the emergence of you know amazing Partners like Red River who understand the need to go in and provide both the combination of the compliance along with the operational security to meet the needs of customers like Carney and Sanjeev here and so what's interesting to us is really this ability to combine cloud with security and the compliance piece all delivered as one single bundle we want to really reduce some of the time and energy that folks like you know Sanjeev and others have to spend in trying to go and build it and that's why we're really excited by what I think Red River has been able accomplish and you know what we're looking to do even more in the cmmca and so coming back to cmmc it's a very important control if you think about it failing cmmc means we can no longer do business with the federal government so it's a risk we cannot take so we have to make sure we are not only confident we are fully confident that we are secure not just today not just tomorrow but all the time so that's where platforms like what you know gaurav was talking about services like for Json because they're all into the scope of when we get assessed so this is where partnership comes in we trust but we work very closely with Jason and his company to say what controls do you have what are the gaps that you have found in your environment because it's a flow down for us and obviously anything that we discover we share with Jason and his company too so here's where we are here's his additional work that we need to do and it's not just today it's an ongoing word that we continue to do I love that aspect of this is a long-term partnership right this is not just an engagement right there's an engagement that that's going to go on for for a long period of time Jason how about you working with AWS tell us about uh tell us what you want yeah I mean we've been a long time AWS partner and for this specific outcome this this cmmc platform that we've built there's a wide body of controls that we're that we have to confront and adhere to um to to to maintain audit worthiness for ourselves and and our clients and so by virtue of us being able to leverage aws's gov Cloud platform we inherit a whole bunch of those controls and then we work with GP and our team and our application vendors to satisfy you know those things that are not taken care of foundationally by govcloud but govcloud is a massive head start for us on this effort I appreciate that thank you um Sanjeev tell us um what advice would you have for other customers that are considering this journey so at this point looking back three years later one thing that it allowed us to do and I'm deeply grateful is as a CIO of my company I was able to go to the leadership and said cmmc is something where we cannot fail and therefore wherever there is a gap assessment we need to get resources whether it's software Hardware labor whatever or msps so we have continued Shoring up our security posture and this has been absolutely wonderful for us because you know it has mitigated potentially many threats that would otherwise have happened you know anybody who's doing business with the federal government understands the set of regulations that we have to meet so it is a commitment we take seriously it has allowed us to as I said show up our defenses immeasurably thank you Sanjeev just mentioned federal U.S federal government but there's other other customers that could potentially use a solution like this as well tell us a little about what you're thinking Jason from other other customers and other Industries yeah well defense industrial base is is is clearly um you know right in our sites we have dozens of clients that are that are in the defense industrial base many of them have not been as Progressive on the subject as as Kearney has kearney's really leaned into this and is is very prepared and honestly we think this fall as this law starts to come together and the stuff starts to make it into contracts that there's going to be a lot of folks Racing for help to catch up on this on this initiative and we hope that we can be one small part of helping the the broader Government Contracting community and defense industrial base get compliant you know we think maybe we can accelerate that their their time to compliance by 30 to 50 percent because of the body of work that we've put together so hopefully we're out we're able to help a lot of these these folks are going to be in a pinch outstanding and GP what about let's say higher ed would uh would this be a great solution for universities absolutely Mike I think you know again uh building on what Jason said I think we just see the defense industrial base and even larger right so as we what we call the critical infrastructure space There are 16 industry segments defined as critical infrastructure by by sisa and so one of the interesting things we are seeing is definitely research institutions educational institutions any organization that receives significant Federal money and so therefore is hosting Federal data absolutely must go in and demonstrate compliance with CMC as well as you know other similar security Frameworks and I think one of the things that sort of really impressed me was just you know the leadership that I saw from Jason and you know when I saw them going through the C-3PO assessment I was like wow you guys are the first and only MSP that really takes this seriously and you're prepared to be leaning in and offered this you know C-3PO assess platform to all of these other organizations that right now are struggling and I think it's you know truly sort of a huge opportunity for us to ease the pain of some of these organizations in the higher ed and education space um that will desperately need a solution like this let me just add this to to you know cmmc is a framework is only applicable at this time potentially to DOD but there are other framework that are potentially being considered for example DHS is looking at Cyber hygiene but this is one of the cases where federal government is really taking the lead think about and Cloud security think about fisma and what that means and now think about cmmc so it's setting a gold standard or what controls need to be met by systems in different Industries so I really do think cmmc is going to be adopted at a much more a scale in different Industries not just DOD and much more broadly much more broadly we appreciate you joining us today and we hope you've learned a little bit about this unique solution it's very differentiated that stack armor and Red River have put together for us around cmmc foreign