Cybersecurity

CUI

Controlled Unclassified Information, government-created or government-controlled information requiring safeguarding per law or regulation but not classified. CUI triggers CMMC Level 2 requirements and NIST SP 800-171 controls for defense contractors.

From the library

The full analysis on CUI.

The article is where the term meets the practitioner. Read how this concept actually shows up in audit, in remediation, and in the boardroom.

Read the analysis →
The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.