Category: Analysis and Opinion
Comments on FAR CUI Rule
The CUI Institute is proud to have offered comments on the FAR CUI Rule to the FAR Council. Our suggestions include changes…
READ MORE
CMMC: A National Imperative
The United States needs to establish a single baseline set of security requirements that must be in place to safeguard others’ sensitive…
READ MORE
Leveraging NIST SP 800-171 Attestation Letters from FedRAMP 3PAOs and CyberAB C3PAOs
Some DoD contractors are making significant investments to enhance their cybersecurity. This article discusses an approach those contractors can use to help…
READ MORE
The Impact of the NIST SP 800-171 Rev. 3 Discussion Draft on CMMC and Related Programs
NIST released a discussion draft of SP 800-171 Rev 3 late last week. This article describes the impact that discussion draft will…
READ MORE
DoD Adding New Arrows to Contracting Officers’ Quivers (via SPRS)
DoD published a notice that DFARS 252.204-7024 will soon be published. This new clause requires contracting officers to consider supply chain risk…
READ MORE
2022 Year End CMMC Program Status Update
2022 saw a lot of changes to the CMMC program, and even to the government’s approach to supply chain cybersecurity. In this…
READ MORE
The $0 CMMC Level 2 Compliance Fallacy
Government representatives have stated that complying with CMMC 2.0 Level 2 shouldn’t cost contractors or the government anything, because contractors have been…
READ MORE
When is CUI not CUI?
Imagine the following scenario: As part of Project Road Runner, a new initiative, the United States Army, a portion of the Department…
READ MORE
DoD CIO’s Office Town Hall Recording and Summary
The DoD CIO's office held a town hall on 2022-FEB-10. They discussed a variety of topics including CMMC 2.0. Several take-aways came…
READ MORE
NIST SP 800-171 Implementation Priorities
NIST SP 800-171 can be overwhelming for contractors. In this article, we present a prioritized approach to implementing the 110 controls of…
READ MORE