Strategic Scoping: Simplifying CMMC Compliance

August, 2024

The August 2024 tech talk was presented by Scott Dawson and Rick Krick

Abstract

Uncover the art of ‘scoping’ to streamline your CMMC journey, focusing on defining the IT boundaries that contain CUI. Learn how to not only simplify CMMC compliance but also make it more cost-effective for small businesses. The presentation includes how to narrow your scope using a CUI Enclave model and reduce cost for compliance and assessment.

About the Presenters

Scott Dawson is the President and Co-Founder of Core Business Solutions, an ISO and Cybersecurity consulting company headquartered in Lewisburg, Pennsylvania.

Scott is a quality management expert and consultant with over 30 years of experience, Scott has helped thousands of American businesses implement ISO 9001 and other ISO and cybersecurity standards.

At Core Business Solutions, Scott co-created the first cloud-based document control system, the CORE Compliance Platform, which helps thousands of users achieve and maintain ISO certification. He has developed simplified programs for implementing ISO 9001, ISO 27001, ISO 20000-1, ISO 14001, ISO 45001, CMMC, CMMI, and more. Core is a member of the Cyber AB and a Registered Provider Organization (RPO) relating to the CMMC standard.

Scott is a voting member of the US ISO TAG (Technical Advisory Group) TC 176, the national entity providing input into the development of the ISO 9001 standard. In 2001, Scott founded the “ISO 9001 for Small Business” group on LinkedIn, which serves 16,000 members worldwide.

Along with his brother, Scott received the 2017 Entrepreneurial Achievement Award from Ben Franklin Technology Partners. He received his Master’s degree from Denver Seminary in 1986.

Looking ahead, Scott is leading the way into new realms of ISO and cybersecurity compliance solutions to help American businesses flourish.

Rick Krick, Director of Security Solutions for Core Business Solutions

Rick has worked in security solutions for the past 14 years and has been a Quality Management System consultant for over 30 years. Because of his vast experience with multiple industry segments, he currently manages the Security Solutions Team at Core. He is trained in the following Standards: ISO 9001, AS9100, AS9120, ISO 14001, ISO 27001, ISO 20000-1, ISO 45001, CMMC, and CMMI, among others. Rick’s been a teacher, a software developer, and a consultant for many years. Rick has a great sense of humor and enjoys teaching the benefits of a strong QMS and cybersecurity systems. Rick is a member of the Cyber AB.

Past Presentations

Why Battle-Tested Software Engineering Still Matters in the Age of AI

The June 2026 Tech Talk was presented by Mario BenitezAbstractWhile use of AI in developing and maintaining software is increasing globally, this use is relatively new, and proven practices for using AI effectively are still emerging. There are different ways to use...

The SEA Data Warehouse

The April 2026 Tech Talk announced the availability of the SEA Data WarehouseAbstractThe Data Warehouse Working Group was initiated in September 2022, with the purpose of advancing the state of the practice and the art of software engineering by providing a source of...

Agentic Coding: The Earthquake That Topples the Software Factory

The March 2026 Tech Talk was presented by Larry MaccheroneAbstractThe tectonic plates beneath software development are shifting. They are moving too fast to predict what the landscape will look like when the earthquake hits. Still, we are sure that the coming...

Why Program Increment Estimates Miss: Hidden Variables for Planning

The February 2026 Tech Talk was presented by Dr. Bill Nichols and Dr. Tapajit Dey AbstractWhat is a credible range of dates for when the work in a product increment might finish? Software development work includes many sources of uncertainty, including the size of the...

Lessons from Using LLMs to Check Software Security

The January 2026 Tech Talk was presented by Dr. Mark ShermanAbstractLarge language models (LLMs) like ChatGPT are transforming the landscape of software development and evaluation, although claims of AI replacing programmers are often overstated. This session delves...

Process Isn’t a Four-Letter Word

The November 2025 Tech Talk was presented by David TumaAbstractAgile methods emerged as a direct rebellion against the heavyweight processes of the 1990s. And the Team Software Process (TSP) did too, by brilliantly reimagining process in a lightweight, agile way that...

Agile Strategy: Onward and Upward

The September 2025 Tech Talk was presented by Linda Parker GatesAbstractThis talk describes the application of Agile principles to strategic planning. It explores how applying balanced Agile values — such as prioritizing individuals and interactions, delivering...

Engineering of Complex Systems at NAVAIR: We Must Do More With Less!

The June 2025 tech talk was presented by Jeff SchwalbAbstractAt NAVAIR, we are experiencing a dwindling engineering workforce at the same time that we are trying to meet increasing demands for support to our warfighters. We have a combination of efforts uplifting the...

Victims vs. Victors: Navigating Career Uncertainty with Resilience

The May 2025 tech talk was presented by David VanEppsAbstractSetbacks are inevitable. Travel freezes, budget cuts, hiring slowdowns, layoffs — challenges like these can shake our sense of stability. While we can’t always control what happens, we can control how we...

Applying STPA to Improve Safety and Reliability of AI-Enabled Systems

The April 2025 tech talk was presented by Timothy DavisonAbstractThis talk explores the application of System-Theoretic Process Analysis (STPA) to enhance the safety and reliability of AI-enabled systems. STPA provides a structured and scalable approach to identifying...

Drive Improved Holistic Business Results with Lean/Agile Practices

The February 2025 tech talk was presented by Fred KoosAbstractAgile practices have roots in Lean Thinking and the Toyota Production System. These are holistic approaches to improve business results. As the word “Agile” was coined in 2001, the applications were...

Clarify Your Acceptance Criteria with GIVEN-WHEN-THEN

The January 2025 tech talk was presented by Matt McConnellAbstractGherkin, also known as GIVEN-WHEN-THEN, is an effective method for writing Acceptance Criteria at many levels in software development. It treats the software as a black box, focusing on the inputs,...

A Powerfully Simple Planning Framework

The December 2024 tech talk was presented by Dr. Brad HodginsAbstractUsing this very effective five-step approach, teams and individuals can create a detailed plan that will enable them to track their progress as they execute that plan. Organizations run on schedules...

Share This