CMMC & FIPS-Validated Cryptography: Essential Guide 🔐

What is a FIPS-validated crypto module and why do I need one? Watch this video for an overview of how to find FIPS-validated cryptographic modules and why we need them.

Presented by Kelly Hood, CMMC RP | CISSP (@KellyHood_)

**Note: This presentation was recorded based on the CMMC v1.02 guidance referencing SC.3.177. The CMMC has been updated to v2.0 - however, the same practice requirement is in the updated standard as SC.L2-3.13.11. As only the reference has changed and not the actual content of the requirement, the recommendations in this video and the information on how to evaluate FIPS-validated cryptography is still relevant to the CMMC v2.0 model.

Optic Cyber Solutions Resources
Resource Home Page: https://www.opticcyber.com/resources....
CMMC v1.02 Profile Template: https://www.opticcyber.com/resources/...
SPRS Scoring Worksheet: https://www.opticcyber.com/resources/templates/Optic-SPRS-Worksheet.xlsx

NIST CMVP Resources
Validated Modules: https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search
Validation in Progress: https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List

CMMC Resources
CMMC-AB Home Page: https://www.cmmcab.org/
CMMC Model v1.02: https://www.acq.osd.mil/cmmc/docs/CMM...
CMMC Level 1 Assessment Guide: https://www.acq.osd.mil/cmmc/docs/CMM...
CMMC Level 3 Assessment Guide: https://www.acq.osd.mil/cmmc/docs/CMM...