CMMC Compliance: Cutting Through the Confusion
March 4, 2025
Cybersecurity leaders want to know, in plain terms, what they need to do when it comes to CMMC to ensure compliance and customer contractual obligations. Join us for a conversation with cybersecurity experts about what’s actually needed to stay on track with CMMC compliance. We’ll dive into the real gaps you may be facing and break down the key actions required—without the noise or industry jargon. If you’ve been wondering what’s missing from your current plan or what really matters for success, this is the perfect session to get the answers in clear, straightforward terms.
You May Like These Posts
Why Maturity Matters: Overcoming GRC Cognitive Overload with the Maturity Model
Please join Kayne McGladrey, author of the GRC Maturity Model and Cheri Hotman as they explore the GRC (Governance, Risk, and Compliance) Maturity Model, a powerful tool for organizations to assess and enhance their cybersecurity practices. Achieving maturity in GRC is crucial for navigating complex regulatory landscapes and boosting overall effectiveness. Through self-assessments, organizations can […]
Real Life GRC Horror Stories: Top Mistakes Haunting Your Program
Just in time for Halloween, we’re pulling back the curtain on the Top 10 GRC Nightmares plaguing organizations today. From programs that only exist to “pass the audit,” to treating compliance as a checkbox exercise, these haunting mistakes can leave your organization more vulnerable than you realize. In this session, we’ll identify the most common […]
Securing AI: Balancing Innovation, Risk, and Reality
AI adoption is exploding—but so are the risks. From data exposure and prompt injection to unregulated model training, most organizations are using AI without fully grasping where their data lives or how it’s being secured. In this session, we’ll unpack the real meaning of “securing AI,” exploring how risk, governance, and innovation must coexist. You’ll […]
Stop Asking If AI Is Trustworthy. Start Asking If Your System Is Governable
Organizations are under pressure to adopt AI quickly, but many are still trying to govern AI-enabled systems with approaches suited for more predictable environments: policies, approvals, framework mappings, testing, and after-the-fact monitoring. Those mechanisms still matter, but they are not enough when systems retrieve changing context, invoke tools, operate through delegated authority, and create consequences […]
The Audit Trap: Why Passing isn’t Protection
Think passing an audit means your cybersecurity program is solid? Think again. Many organizations unknowingly expose themselves to greater risk by relying on compliance checkmarks rather than a true security strategy. In this session, we’ll uncover the hidden dangers of audit-driven security, why "passing" may leave you more vulnerable, and the real steps leaders must […]
Security Awareness Training – Verizon 2025 Data Breach Investigations Report
In this 15-minute training, the HG team breaks down the most critical findings from Verizon’s 2025 Data Breach Investigations Report (DBIR)—and what they mean for real-world security programs. We cover the sharp rise in third-party breaches, the growing threat of GenAI misuse, and the continued dominance of ransomware and credential-based attacks. You’ll walk away with […]
Choosing the Right Cybersecurity Framework: A Practical Guide for Leaders
Speakers: Cheri Hotman and Tanya WadeHosted by: Hotman Group Why Choosing the Right Framework Matters Passing an audit is no longer enough. Many organizations still treat cybersecurity as a one-time project, something to "check off" rather than an integrated, living part of their business operations. During this session, Cheri Hotman and Tanya […]
People, Process, Technology: It Takes All 3
When it comes to navigating the maze of Governance, Risk, and Compliance, there's one simple rule: finding perfect harmony between cutting-edge tech and good, old-fashioned human know-how. Picture this: a Chief Information Security Officer (CISO) paints a vision of the future where compliance is seamlessly automated. "In two to three years, we'll have everything […]
What Operationalized GRC Actually Looks Like: From Silos to Systems
Many organizations believe their GRC program is operational because audits are passing and tools are in place. In reality, operationalized GRC behaves very differently. Risk has clear ownership. Information flows across teams. Gaps surface early instead of being hidden. In this session, Cheri Hotman and Peter Spier walk through what an operationalized GRC program actually […]
Post A Comment
Endless audits and customer demands were never supposed to replace real security.
We build, implement, and run Cyber GRC programs that reduce risk, protect the business, and still pass audits.
Hotman Group is a certified
woman-owned business (WOSB)
Hotman Group, LLC
Fort Worth, TX
Privacy Policy | Terms of Service | All Rights Reserved © Hotman Group, LLC