{"id":25909,"date":"2022-01-25T13:13:36","date_gmt":"2022-01-25T18:13:36","guid":{"rendered":"https:\/\/www.oxebridge.com\/emma\/?p=25909"},"modified":"2022-01-25T13:22:50","modified_gmt":"2022-01-25T18:22:50","slug":"cmmc-ab-board-bought-themselves-10-medals-because-no-one-else-would-give-them-any","status":"publish","type":"post","link":"https:\/\/www.oxebridge.com\/emma\/cmmc-ab-board-bought-themselves-10-medals-because-no-one-else-would-give-them-any\/","title":{"rendered":"CMMC-AB Board Bought Themselves $10 Medals Because No One Else Would Give Them Any"},"content":{"rendered":"<p>As the CMMC Accreditation Body slides into further irrelevance, its Board is not going down with a fight. Or with dignity.<\/p>\n<p>Right now former (and ousted) Board members are receiving &#8220;Presidential Volunteer Service Award&#8221; medals, along with certificates, to attest to their spirit of volunteerism. There are, of course, a few problems with this.<\/p>\n<p><a href=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-25910\" style=\"border: 1px solid #000000;\" src=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals.png\" alt=\"\" width=\"400\" height=\"341\" srcset=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals.png 820w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-150x128.png 150w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-176x150.png 176w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-768x656.png 768w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-24x20.png 24w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-36x31.png 36w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/medals-48x41.png 48w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><\/a>First, the medals were purchased for $10.50 apiece, as the program is a vanity award, not an actual thing handed out by the President. The Americorps program allows anyone to buy the medals for themselves or their friends, and requires only submitting a spreadsheet of volunteer hours claimed. I spoke to someone at Americorps office, and they confirmed that they do not verify the volunteer hours, nor the truthfulness of any claims made by the applicants. &#8220;<em>We trust people to be honest<\/em>,&#8221; the rep told me. If the paperwork is in order and the check clears, the awards are sent out.<\/p>\n<p>The program is considered a modern take on the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Who%27s_Who\">&#8220;Who&#8217;s Who&#8221; scam registries<\/a>, where someone would buy placement in a book of notable persons in order to pass themselves off as, well, notable.<\/p>\n<p>Second, the awards were purchased by ousted Board member Regan Edens, who was <a href=\"https:\/\/www.oxebridge.com\/emma\/regan-edens-exits-cmmc-ab-after-public-attack-against-industry-advisory-council-member\/\">removed from the Board<\/a> in June of 2021. Edens provides products and services for CMMC, and stood to financially benefit from his role as a &#8220;volunteer&#8221; at the CMMC AB. In truth, Edens was thrown out after publicly clashing with the AB&#8217;s own Industry Advisory Council, calling one member a &#8220;troll&#8221; for questioning his conflicts of interest. That proved too much of a PR nightmare, so Edens was shown the door. CMMC AB CEO Matt Travis later crafted a new story, suggesting Edens was removed as part of the AB&#8217;s crackdown on conflicts of interest. In reality, the remaining Board members nearly all have conflicts, so the story doesn&#8217;t hold up.<\/p>\n<p>Edens buying $10 medals for his pals smacks of a desperate and needy attempt at redemption. It probably worked, though, since they still keep Edens around on the CMMC-AB&#8217;s &#8220;Standards Development Committee,&#8221; a thing that doesn&#8217;t do much since the CMMC-AB isn&#8217;t allowed to develop standards.<\/p>\n<p>So expect to see a lot of posts by conflicted, self-promoting consultants claiming their work at the CMMC-AB was just volunteering, and not an attempt to market their various consulting companies. Even though that&#8217;s exactly what they did.<\/p>\n<p>The work of the Board was largely thrown out as DoD was forced to address industry concerns and release &#8220;CMMC 2.0.&#8221; That reboot removes almost all of the role of the CMMC-AB, as it shifts focus back to self-attestation by defense companies. CMMC-AB accredited audits now only comprise a tiny fraction of the remaining CMMC certifications, under the 2.0 plan.<\/p>\n<p>As a side note, as if to remind you what assholes they are, new CMMC-AB Chair Jeff Dalton &#8212; who also sells CMMC consulting services &#8212; publicly attacked reporter Sara Friedman of\u00a0 Inside Cybersecurity for her reporting. Friedman published a <a href=\"https:\/\/insidecybersecurity.com\/daily-news\/delay-publicly-releasing-cmmc-process-guide-attributed-potential-national-%E2%80%98security%E2%80%99\">piece<\/a> discussing how Dalton had claimed, at a public event, that he was not releasing CMMC assessment process guide due to &#8220;national security concerns.&#8221; That prompted Travis to issue a corrected statement, but Dalton took to LinkedIn and claimed Friedman had misquoted her, even as he then confirmed what she wrote. He also attacked the &#8220;<em>American press<\/em>,&#8221; because if you&#8217;re a patriotic &#8220;volunteer,&#8221; attacking a free press always drives the point home.<\/p>\n<p><a href=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-25911\" style=\"border: 1px solid #000000;\" src=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit.png\" alt=\"\" width=\"400\" height=\"406\" srcset=\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit.png 505w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit-148x150.png 148w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit-24x24.png 24w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit-36x36.png 36w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit-48x48.png 48w, https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2022\/01\/daltonstepsinit-45x45.png 45w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><\/a>I&#8217;m no fan of Friedman, who couldn&#8217;t ask a follow-up question if her life depended on it, but Dalton&#8217;s off his chain here.<\/p>\n<p>I&#8217;m taking bets on how long it will be before Dalton is shown the door like his predecessors Edens, Tchoubineh, Johnson, Schieber, Berman, and&#8230; sorry, I&#8217;ve lost track at this point.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Regan Edens bought medals for himself and his cronies at the CMMC-AB, because of course he did.<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","mc4wp_mailchimp_campaign":[],"footnotes":""},"categories":[157,5],"tags":[7679,7680,7683,7744,7796],"class_list":["post-25909","post","type-post","status-publish","format-standard","hentry","category-humor-2","category-opinion","tag-cmmc","tag-cmmc-ab","tag-cybersecurity-maturity-model-certification","tag-jeff-dalton","tag-regan-edens","et-doesnt-have-format-content","et_post_format-et-post-format-standard"],"_links":{"self":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/25909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/comments?post=25909"}],"version-history":[{"count":3,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/25909\/revisions"}],"predecessor-version":[{"id":25915,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/25909\/revisions\/25915"}],"wp:attachment":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/media?parent=25909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/categories?post=25909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/tags?post=25909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}