News & Analysis as of May 5, 2025

Controlled Unclassified Information (CUI)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Navigating CMMC Compliance and Key Insights from the National 8(a) Small Business Conference

Womble Bond Dickinson on 2/26/2025

The recent National 8(a) Small Business Conference underscored pressing challenges and critical updates regarding the Cybersecurity Maturity Model Certification (CMMC) Program, now in an advanced phase known as CMMC 2.0. The...more

The Proposed Rule to Amend FAR Guidance on Safeguarding CUI – Care to Comment?

Husch Blackwell LLP on 2/24/2025

The FAR Council issued a proposed rule that would amend the several FAR provisions and add new clauses to provide guidance on the safe handling of CUI. Public comments on the proposed rule are being accepted until March 17,...more

FAR Council Proposes Compliance with NIST SP 800-171 for Non-Defense Contractors

Holland & Knight LLP on 2/20/2025

Earlier this year, the FAR Council issued a proposed rule to implement the Controlled Unclassified Information (CUI) Program as it relates to federal contracts. The proposed rule is "just one element of a larger strategy to...more

Client Alert: FAR Council Issues Long-Awaited Proposed Rule to Implement Controlled Unclassified Information Program

Jenner & Block on 1/22/2025

On January 15, 2025, the Department of Defense (DOD), General Services Administration (GSA), and the National Aeronautics and Space Administration (NASA) (collectively, “the FAR Council”) issued a long-anticipated proposed...more

FAR Council Publishes Proposed Rule Imposing New Security Requirements on Contractors Handling CUI

Woods Rogers on 1/21/2025

On January 15, 2025, the Federal Acquisition Regulatory Council published a proposed rule (the FAR CUI Rule) that would amend the Federal Acquisition Regulation (FAR) to impose government-wide cybersecurity, training, and...more

After a Short 15-Year Wait, the Government Finally Tries to Define What the Heck Controlled Unclassified Information (CUI)...

Kilpatrick on 1/17/2025

Over the last two decades, federal contractors have been frustrated by the Government’s hodgepodge approach to regulating Controlled Unclassified Information (CUI). Various agencies have implemented differing definitions,...more

They Did It. They Really Did It! The Arrival of the FAR CUI Proposed Rule

McCarter & English Blog: Government Contracts... on 1/17/2025

After years of anticipation, the Federal Acquisition Regulation (FAR) Council has announced the arrival of its proposed rule to enhance the safeguarding of Controlled Unclassified Information (CUI) in federal contracts (the...more

Department of Defense Issues Class Deviation Delaying Application of NIST SP 800-171, Revision 3

Bass, Berry & Sims PLC on 5/9/2024

On May 2, the Department of Defense (DOD) issued a class deviation to DFARS 252.204-7012 “to provide industry time for a more deliberate transition upon the forthcoming release of [National Institute of Standards and...more

DHS Implements New Security and Privacy Measures for Controlled Unclassified Information

Pillsbury Winthrop Shaw Pittman LLP on 7/21/2023

The Department of Homeland Security amended its regulations due to the urgent need to protect Controlled Unclassified Information. On June 21, 2023, the Department of Homeland Security (DHS or Department) issued a final...more

DHS Updates Cybersecurity Regulations Clarifying Old and New Obligations

PilieroMazza PLLC on 7/12/2023

The Department of Homeland Security (DHS) recently released a final rule (Final Rule), effective July 21, 2023, updating the Homeland Security Acquisition Regulation (HSAR) to include cybersecurity provisions aimed at...more

DoDIG Audit of Controlled Unclassified Information (CUI) Program: Findings and Next Steps for Contractors

Bradley Arant Boult Cummings LLP on 6/26/2023

The Department of Defense Inspector General (DoDIG) recently released its “Audit of the DoD’s Implementation and Oversight of the Controlled Unclassified Information [CUI] Program” (DODIG-2023-078). The audit highlights some...more

NIST Releases Initial Public Draft of NIST SP 800-171, Revision 3 for Protection of Sensitive Government Information

Sheppard Mullin Richter & Hampton LLP on 5/26/2023

The National Institute of Standards and Technology (NIST) has released an initial public draft of NIST SP 800-171, Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. Compliance...more

[Webinar] CMMC – Practical Solutions to Managing and Securing CUI Data, Perspectives of a Foreign Defense Contractor - November...

Ankura on 11/2/2022

Currently defense contractors who receive or create Controlled Unclassified Information (“CUI”) from or for the U.S. Department of Defense (“DoD”) are subject to several contract-based cybersecurity requirements, including...more

DoD to Contracting Officers: Demand Compliance and Seek Consequences for Material Breaches of Cybersecurity Requirements by...

Wilson Sonsini Goodrich & Rosati on 8/9/2022

On June 16, 2022, the Department of Defense (DoD) issued a memorandum to its contracting officers emphasizing their obligation to monitor compliance by DoD contractors with the cybersecurity requirements of their contracts....more

DOD Suspends CMMC Version 1.0 and Charts a New Course With “CMMC 2.0”

Wiley Rein LLP on 11/8/2021

WHAT: On November 4, 2021, the U.S. Department of Defense (DOD) announced the completion of a months-long internal review and significant changes to the strategic direction of its Cybersecurity Maturity Model Certification...more

NIST Proposes Draft Enhanced Security Requirements for Protecting CUI

Sheppard Mullin Richter & Hampton LLP on 7/30/2020

NIST recently released the final public draft of SP 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 (formerly Draft NIST SP...more

DoD Has Released Model Version 1.0 of the Cyber Maturity Model Certification Framework

Pillsbury Winthrop Shaw Pittman LLP on 2/4/2020

- DoD has released the final version of the CMMC framework. - DoD anticipates that CMMC requirements will appear in a limited number of solicitations starting in October 2020 and that they will appear in all DoD...more

ADG Insights | NIST set to "enhance" contractor cybersecurity duties

Hogan Lovells on 10/7/2019

Through ADG Insights, we share with you the top legal and political issues affecting the aerospace, defense, and government services (ADG) industry. Our ADG industry team monitors the latest developments to help our clients...more

DoD’s Recently Released Draft Framework Signals Significant Changes in Cybersecurity Requirements

Bass, Berry & Sims PLC on 10/1/2019

A major shift in cybersecurity requirements for Department of Defense (DoD) contractors is about to come into effect—earlier this month the DoD released for public comment the long-anticipated Version 0.4 of the draft...more

Vulnerable Systems: Contractor Protection of Controlled Unclassified Information at Risk

Bass, Berry & Sims PLC on 8/7/2019

The Department of Defense (DoD) Inspector General recently issued a report summarizing the findings of an audit into the protection of Controlled Unclassified Information (CUI) on contractor networks. Based on an in-depth...more

Cyber Update: DoD Contractor Cybersecurity Certification and 33 New Enhanced Controls to Combat the Advanced Persistent Threat

Sheppard Mullin Richter & Hampton LLP on 6/27/2019

The Government remains intensely focused on how best to protect its Controlled Unclassified Information (CUI) once it is released to contractors. In a shift from its initial approach of “we will take the contractor’s word for...more

Never Stop Never Stopping: Defense Department Quietly Unveils Proposed Cybersecurity Capability Model Certification Standards And...

McCarter & English Blog: Government Contracts... on 6/26/2019

Cybersecurity. It’s never over, is it? In what can only be described as a “soft” release, the Department of Defense (DoD) has slowly and quietly begun to reveal its intent to provide federal contractors with formal...more

45 Results

View per page

Page: of 2

Cybersecurity › Data Protection › Controlled Unclassified Information (CUI)

Navigating CMMC Compliance and Key Insights from the National 8(a) Small Business Conference

The Proposed Rule to Amend FAR Guidance on Safeguarding CUI – Care to Comment?

FAR Council Proposes Compliance with NIST SP 800-171 for Non-Defense Contractors

Client Alert: FAR Council Issues Long-Awaited Proposed Rule to Implement Controlled Unclassified Information Program

FAR Council Publishes Proposed Rule Imposing New Security Requirements on Contractors Handling CUI

After a Short 15-Year Wait, the Government Finally Tries to Define What the Heck Controlled Unclassified Information (CUI)...

They Did It. They Really Did It! The Arrival of the FAR CUI Proposed Rule

Department of Defense Issues Class Deviation Delaying Application of NIST SP 800-171, Revision 3

DHS Implements New Security and Privacy Measures for Controlled Unclassified Information

DHS Updates Cybersecurity Regulations Clarifying Old and New Obligations

DoDIG Audit of Controlled Unclassified Information (CUI) Program: Findings and Next Steps for Contractors

NIST Releases Initial Public Draft of NIST SP 800-171, Revision 3 for Protection of Sensitive Government Information

[Webinar] CMMC – Practical Solutions to Managing and Securing CUI Data, Perspectives of a Foreign Defense Contractor - November...

DoD to Contracting Officers: Demand Compliance and Seek Consequences for Material Breaches of Cybersecurity Requirements by...

DOD Suspends CMMC Version 1.0 and Charts a New Course With “CMMC 2.0”

NIST Proposes Draft Enhanced Security Requirements for Protecting CUI

DoD Has Released Model Version 1.0 of the Cyber Maturity Model Certification Framework

ADG Insights | NIST set to "enhance" contractor cybersecurity duties

DoD’s Recently Released Draft Framework Signals Significant Changes in Cybersecurity Requirements

Vulnerable Systems: Contractor Protection of Controlled Unclassified Information at Risk

Cyber Update: DoD Contractor Cybersecurity Certification and 33 New Enhanced Controls to Combat the Advanced Persistent Threat

Never Stop Never Stopping: Defense Department Quietly Unveils Proposed Cybersecurity Capability Model Certification Standards And...

“Internet of Things” Guidance to be Added to Cybersecurity Requirements for Agencies and Federal Contractors

DoD Issues New Guidance to Drive Compliance with NIST 800-171 Cybersecurity Requirements

Cybersecurity Update—Round II

Cybersecurity › Data Protection › Controlled Unclassified Information (CUI)

"My best business intelligence, in one easy email…"