The following is the most recent version of the NIST 800-171a:
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171a.pdf
Month: August 2018
15 Aug 2018 (1-3 EDT) CUI Program Update to Stakeholders (Webinar link and call-in information)
Participants can join the event directly at:
Dial-in Number: 800-988-0218
Audience passcode: 8866011
Conference number: PWXW7882322
The webinar will include:
- A brief overview of the CUI program;
- An update on agency implementation efforts;
- The status and plans for a CUI Federal Acquisition Regulation Rule;
- A review of upcoming events; and,
- Time for Questions and Answers. Note: During the webinar, participants may submit questions through the instant messenger feature.
CUI Updated Training Videos
ISOO has developed seven new training modules. These videos offer the most up-to-date information about the CUI Program.
- Introduction to Marking CUI (updated August 6, 2018): This video provides an overview of how to mark documents, emails, presentations, systems, and other files that contain CUI. It specifically addresses the designation indicator and the CUI banner marking, including the CUI control marking, CUI category markings, and Limited Dissemination Control Markings. It also discusses portion marking, the use of cover sheets, marking multi-page documents, and decontrolling CUI.
- Marking Commingled Information: This video describes how to mark documents that contain both CNSI and CUI. Specifically, it covers portion and banner markings and how to mark emails and presentations.
- Controlled Environments (updated August 6, 2018): This video presents the viewer with examples of two environments, one that is considered suitable for the storage and handling of CUI and one that is not. It discusses why controlled environments are important and the different approaches agencies can take to creating their own controlled environments.
- Destruction of CUI (updated August 6, 2018): This video discusses the different destruction methods that are appropriate for CUI when it is no longer needed.
- Lawful Government Purpose (updated August 6, 2018): This video addresses the principle of Lawful Government Purpose, or the standard for deciding when to share and when not to share CUI.
- Freedom of Information Act FAQs (updated August 7, 2018): This video addresses some of the most frequently asked questions about CUI and FOIA.
- Freedom of Information Act Panel Discussion (updated August 7, 2018): This video is a discussion of CUI and FOIA expanding on the concepts covered in the July 3, 2014 memo Revised Guidance regarding Controlled Unclassified Information and then Freedom of Information Act.
Agencies (and stakeholders) may wish to use these videos to supplement their CUI Program training. However, it is important to note that ISOO does not track completion of these modules, so if your organization wishes to require viewing of these videos as part of your CUI training program, you must download and run them from organization’s training platform. MP4 versions will be made available for download from the CUI Registry in the coming weeks.
NIST Hosted Controlled Unclassified Information Security Requirements Workshop
On October 18, the National Institute of Standards and Technology (NIST), in coordination with the Department of Defense (DoD) and the National Archives and Records Administration (NARA), will host an informational workshop providing an overview of Controlled Unclassified Information (CUI), the Defense Acquisition Regulations System (DFARS) Safeguarding Covered Defense Information and Cyber Incident Reporting Clause, and NIST Special Publications 800-171 and 800-171A.
This workshop will also feature panels of Federal Government representatives discussing expectations for evaluating evidence and implementing the CUI Security Requirements and industry representatives sharing best practices and lessons learned.
The CUI Security Requirements Workshop is open to all interested stakeholders and is free to attend. The workshop will also be available via webcast; advanced registration is not required for webcast.
To register please sign up here (for online or in person):
(In-person registration closes October 11, 2018.)
DATE: October 18, 2018
TIME: 7:30 – 5:30
LOCATION: NIST, 100 Bureau Drive, Gaithersburg, Maryland 20899 (Red Auditorium)