AHLA's Speaking of Health Lawpodcast

CMMC and Health Care Organizations: Applicability, Risk, and Readiness

Tuesday, March 31, 2026

The Cybersecurity Maturity Model Certification (CMMC) is gaining attention. Although CMMC originated within the Department of Defense, its reach is expanding into the health care ecosystem, often in ways that health care organizations don’t fully anticipate. Dave Bailey, Vice President of Consulting Solutions & Strategy, Clearwater, speaks with Jenifer McIntosh, Of Counsel, Stinson LLP, about when CMMC applies, how it differs from familiar health care compliance frameworks, and why third-party and supply chain risk are central to CMMC readiness. They also explore where health care organizations may be underestimating their CMMC exposure and what practical steps they can take to prepare. Sponsored by Clearwater.

Watch this episode: https://www.youtube.com/watch?v=_uiJ0SGhtXk

Learn more about Clearwater: https://clearwatersecurity.com/ 

Essential Legal Updates, Now in Audio

AHLA's popular Health Law Daily email newsletter is now a daily podcast, exclusively for AHLA Comprehensive members. Get all your health law news from the major media outlets on this podcast! To subscribe and add this private podcast feed to your podcast app, go to americanhealthlaw.org/dailypodcast.

Stay At the Forefront of Health Legal Education

Learn more about AHLA and the educational resources available to the health law community at https://www.americanhealthlaw.org/