[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-395391-105":59,"doc-detail-395391-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","healthcare-and-the-dod-preparing-for-cmmc-compliance","Healthcare and the DoD - Preparing for CMMC Compliance","","Healthcare and the DoD - Preparing for CMMC Compliance outlines how the U.S. Department of Defense established the Cybersecurity Maturity Model Certification (CMMC) program and why it matters for healthcare organizations handling ePHI. It addresses common questions about the difference between CMMC and other healthcare cybersecurity frameworks, then explains the CMMC rulemaking process, current status, and expected compliance timelines. Key milestones include the draft and proposed rule cycles, Federal Register publication, public comment period, and the projected 32 CFR implementation pathway.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":35,"@type":76,"position":81},"https://docshare.wps.com/document/healthcare/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/healthcare-and-the-dod-preparing-for-cmmc-compliance/395391/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/healthcare-and-the-dod-preparing-for-cmmc-compliance/395391.png","ImageObject",300,407,{"name":92,"@type":93},"Connor ","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-09-26",true,{"@type":102,"interactionType":103,"userInteractionCount":34},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Why did the Department of Defense establish the CMMC program, and why is it significant for healthcare organizations handling ePHI?","Question",{"text":112,"@type":113},"The session explains that DoD created CMMC as a program with significance for healthcare organizations handling ePHI, focusing on aligning cybersecurity requirements with compliance expectations.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What are the key differences between CMMC and other cybersecurity frameworks healthcare organizations may already know?",{"text":117,"@type":113},"The material is structured to compare CMMC against other cybersecurity frameworks already familiar to healthcare organizations and highlight where CMMC differs.",{"name":119,"@type":110,"acceptedAnswer":120},"What compliance timelines and rulemaking milestones should healthcare organizations expect for CMMC certification?",{"text":121,"@type":113},"The timeline covers the draft and proposed rule stages, Federal Register publication, the public comment period, subsequent reviews, adjudication, and projected steps leading to final implementation, including the 32 CFR pathway.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},395391,1791013050,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":34,"category_name":35,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":34,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":56,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":144,"preview_page_count":4},687207022233,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","# Healthcare and the DoDPreparing for CMMC Compliance\n\nJuly 31,2024  \nLogistics  \n■All attendees in “Listen Only Mode”  \n■Please ask content related questions in Q&A  \nRecording,final slides,and resources shared within 24 hours  \nPlease take a few minutes to provide feedback via survey prompt atthe end of this session  \n# Introductions/About Clearwater&Redspin\n\nDave Bailey,EMBA,CISSP |Moderator  \nVP,Consulting Services,Security at Clearwater  \n■ 24 years in cybersecurity with 14 years focused on protecting the healthcare industry  \n·Served as Director of Technology and Security at Mary Washington Healthcare responsible for technology leadership andacted as designated HIPAA Security Official (2009-2016)  \nClearwater  \n·Subject Matter Expert in cyber risk management,NIST Cybersecurity Framework assessment and implementation  \nRedspin.  \nA Dvision of Clea  \n·Experience in advising boards and senior leaders in cyber incidents,risk analysis,and strategy development  \n·Served 13 years in the United States Air Force,both on Active Duty and Reserves as a Communications and InformationOfficer with assignments at the Pentagon,Langley AFB,Eskan Village Saudi Arabia,and Peterson AFB.  \nCHRISTUS  \nHealth。  \n# Introductions/About Christus Health,a USFHP\n\nDave Duclos,CISA,CISM,CISSP,CDPSE,CPHIMS|Panelist  \nDirector and Deputy CISO,ITSEC/Cybersecurity at Christus Health  \n·Joined Christus Health in 2017 as System Director &Deputy CISO,leading SOC and SAC teams.  \n·Former Senior VP of IT and CISO in a multi-state hospital and emergency room company.  \n·Held various technical leadership roles in telecom,education,law enforcement,and the US Air Force over 25+years.  \n·Holds bachelor's degrees in business management and computer &information science,an MBA,and severalprofessional certifications(CISA,CISM,CISSP,CDPSE,CPHIMS).  \n■ Active in professional organizations including FBI InfraGard,ISC2,ISACA,and HIMSS.  \n## Introductions\n\nDr.Thomas Graham |PanelistVP,CISO at Redspin  \n·15+years of Cybersecurity Leadership in the Commercial Healthcare and Government space  \n·6 years leading the Mitigation and Remediation group for the Defense Health Agency(DHA)  \n·4years as an Information Security officer for MARCORSYSCOM and the Defense Information Security Agency(DISA)  \nRedspin.  \n·Current Chair-Management Information Systems(MIS)Advisory Board at East Carolina University(ECU),Prior memberof HIMSS Security and Privacy Committee,Member AFCEA and HIMSS  \nA Diwvision of Clearwater  \n·FedHealth IT Award for Innovation winner  \n·Ph.D.in Information Technology,MS in Technology Systems,and MBA  \n·Certified CMMC Assessor(CCA)and Provisional Instructor(PI)  \n·Architect of the first CMMC Authorized C3PAO  \nIntroductions  \n30+years of experience in information technology and cyber security operations in the United States Army  \n·5+years providing consultation and management to the defense industrial base (DIB),health care systems,and theirsupporting businesses  \n·Cybersecurity Maturity Model Certification(CMMC)Certified Assessor(CCA)and Certified Professional(CCP)  \n·Member of the Exam Development Committee,developing and validating the certification examination for theCybersecurity Assessor and Instructor Certification Organization(CAICO)  \n·BA in Business Administration;MBA Business Administration and Strategic Leadership,Graduate of the United StatesArmy Sergeants Major Academy,Class 62  \nRobert Teague |Panelist  \nDirector,CMMC Services,at Redspin  \nRedspin.  \nA Division of Clearwater  \n·Member of the CMMC Standards Council  \n# Healthcare and the DoDPreparing for CMMC Compliance\n\n# CMMC Background &Importance\n\n■Explain why the Department of Defense established the CMMCprogram and its significance for healthcare organizations handlingePHI?  \n## ■What are the key differences between CMMC and other\n\ncybersecurity frameworks that healthcare organizations mightalready be familiar with?  \n# Rulemaking Process and Compliance Timelines:\n\n■Provide an overview of the cur","cbCaiatwQuZJxxJB","https://ap.wps.com/l/cbCaiatwQuZJxxJB","pdf",1701503,"English","# Healthcare and the DoDPreparing for CMMC Compliance\n## CMMC Background &Importance\n## What are the key differences between CMMC and other cybersecurity frameworks?\n## Rulemaking Process and Compliance Timelines:","[{\"question\":\"Why did the Department of Defense establish the CMMC program, and why is it significant for healthcare organizations handling ePHI?\",\"answer\":\"The session explains that DoD created CMMC as a program with significance for healthcare organizations handling ePHI, focusing on aligning cybersecurity requirements with compliance expectations.\"},{\"question\":\"What are the key differences between CMMC and other cybersecurity frameworks healthcare organizations may already know?\",\"answer\":\"The material is structured to compare CMMC against other cybersecurity frameworks already familiar to healthcare organizations and highlight where CMMC differs.\"},{\"question\":\"What compliance timelines and rulemaking milestones should healthcare organizations expect for CMMC certification?\",\"answer\":\"The timeline covers the draft and proposed rule stages, Federal Register publication, the public comment period, subsequent reviews, adjudication, and projected steps leading to final implementation, including the 32 CFR pathway.\"}]","Healthcare and the DoD - Preparing for CMMC Compliance | PDF",1790418806,48]