CMMC compliance is no longer optional; it is a prerequisite for doing business across the North American defense industrial base. This webinar provides a practical, execution focused view on how organizations prepare for compliance through targeted training and structured gap analysis. We will address both CMMC regimes now impacting defense contractors:
- The U.S. Department of Defense Cybersecurity Maturity Model Certification (CMMC 2.0), including Level 1 (FAR 52.204 21) and Level 2 aligned to NIST SP 800 171, and
- Canada’s Canadian Program for Cyber Security Certification (CPCSC), the Canadian counterpart to CMMC, designed to align supplier cybersecurity expectations with U.S. defense requirements.
Attendees will learn how to assess current maturity, close identified gaps, and prepare for third party assessments.
Leading Panelists
Alexis Dubois | COO & Head of Cybersecurity, CertX Canada
Alexis Dubois is a strategic advisor specialized in the resilience of critical infrastructure. As the COO and Head of Cybersecurity at CertX Canada, Alexis bridges the gap between high-level compliance and operational reality. With a career spanning the Manufacturing, Energy, and Defense sectors, he is a Subject Matter Expert in navigating the complexities of IT/OT cybersecurity maturity. Alexis is recognized for transforming dense regulatory frameworks—including CMMC and NIST—into prioritized, actionable roadmaps that strengthen organizational posture without compromising operational efficiency.
Gonda Lamberink | VP Digital Trust, SGS North America
Gonda is a digital trust leader with a career spanning GTM strategy, business development, and M&A across AI and cybersecurity assurance. She’s currently leading SGS’s Digital Trust portfolio and organization for North America.
…with Award Winning Top Global CISOs Pete Green, Kip James and James Gorman and hosted by CISSP Gary Miliefsky.
Browse Cybersecurity Compliance webinars
Similar Webinars
- Inside the Club: How Modern GRC Leaders Engineer for Speed and Scale
- Understanding and Following the RED 3.3 Directive for Products with Wireless Features
- Cybersecurity Law, Regulations and Compliance
- Managing Without Governing? Why Your Organization Needs a Management System to Govern Your Information Resilience Program
