A Training Session on Implementing CUI

On Thursday the 29th of August from 1-3, the CUI Program office will host a in person training session on the implementation of the CUI program.  The training will include a brief background of the program, an update on the status of implementation, and a program elements overview.

The training will be held in the Washington Room at the National Archives building, 701 Constitution Ave NW (please use the special events entrance). We are not offering a call in number for this session.

This event is open to the first 55 people who RSVP to cui@nara.gov and it is intended for those who are supporting or developing a CUI program at their agency or organization.

 

Protecting Controlled Unclassified Information: Comment on Draft NIST SP 800-171 Rev. 2 and Draft NIST SP 800-171B (comment period ends July 19, 2019)

https://csrc.nist.gov/News/2019/draft-sp-800-171-rev-2-and-sp-800-171b

NIST is seeking comments on Draft NIST Special Publication (SP) 800-171 Revision 2Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, and Draft NIST SP 800-171BProtecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets.

The public comment period for both publications ends on July 19, 2019. See the publication details for SP 800-171 Rev. 2 and SP 800-171B for document files and instructions on submitting comments.

Details

Draft NIST SP 800-171 Revision 2 provides minor editorial changes in Chapters One and Two, and in the Glossary, Acronyms, and References appendices. There are no changes to the basic and derived security requirements in Chapter Three. For ease of use, the Discussion sections, previously located in Appendix F (SP 800-171 Revision 1), have been relocated to Chapter Three to coincide with the basic and derived security requirements.

Draft NIST SP 800-171BProtecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets, was developed in the spring of 2019 as a supplement to NIST SP 800-171. This new document offers additional recommendations for protecting Controlled Unclassified Information (CUI) in nonfederal systems and organizations where that information runs a higher-than-usual risk of exposure. When CUI is part of a critical program or a high value asset (HVA), it can become a significant target for high-end, sophisticated adversaries (i.e., the advanced persistent threat (APT)). In recent years, these critical programs and HVAs have been subjected to an ongoing barrage of serious cyberattacks, prompting the Department of Defense to request additional guidance from NIST.

The enhanced security requirements are to be implemented in addition to the basic and derived requirements in NIST SP 800-171, since the basic and derived requirements are not designed to address the APT. The enhanced security requirements apply only to components of nonfederal systems that process, store, or transmit CUI or that provide protection for such components when the designated CUI is contained in a critical program or HVA. The enhanced security requirements are only applicable for a nonfederal system or organization when mandated by a federal agency in a contract, grant, or other agreement.

2nd Industry Day Update

Industry clapart

 

June 21, 2019

10:00 a.m. – 2:00 p.m.

McGowan Theater + Presidential Conference rooms

National Archives Museum

701 Constitution Ave. NW

Washington, DC  20408

This event is FREE to all vendors and attendees!

ISOO is hosting it’s 2nd Industry Day for the Executive Branch entities or other stakeholders (i.e., Agencies, Industry, Non-federal Organizations) to learn about products and services that have been developed for the CUI Program.

The day will begin in the McGowan Theater at 10:00 a.m. with a brief presentation.  The presentation will give an update on the status of the CUI Program implementation, a quick CUI program overview, an update on the FAR (Federal Acquisitions Regulation), what CUI resources are offered, when we will be holding the next Stakeholders webex, and information about our CUI Blog.  Then we will convene to the Presidential conference rooms.

Below is a list of vendors that will have a booth at this event.

WE STILL HAVE 2 BOOTHS AVAILABLE 

     

OOAC   –   TITUS   –   CORE BUSINESS SOLUTIONS, INC. –

SYSARC   –    SERABRYNN   –   SEM   –   INFUSIONPOINTS,  LLC   –   DELOITTE   –   

ACTIVE NAVIGATION   –    COALFIRE   –   IVIS TECHNOLOGIES   –   

SECRESTRUX LLC   –   PKH ENTERPRISES   –   BRMI   –   ACVITS   –

SABINE SOLUTIONS INCORPORATED & ASSURED BRIDGE INCORPORATED    –

       PROTIVITI GOVERNMENT SERVICES   –  FEDERAL RECORDS CENTERS – 

INSIDER THREAT DEFENSE GROUP   –  171 COMPLY   –   

CENTER FOR DEVELOPMENT OF SECURITY EXCELLENCE

                                                         

 

 

 

 

 

 

 

 

 

 

Industry Day Reminder

 

Industry clapart

Industry Day

June 21, 2019

10:00 a.m. – 2:00 p.m.

McGowan Theater + Presidential Conference rooms

National Archives Museum

701 Constitution Ave. NW

Washington, DC  20408

ISOO is hosting our 2nd Industry Day for Executive Branch entities or other stakeholders (i.e., Agencies, Industry, Nonfederal Organizations) to learn about products and services that have been developed for the CUI Program.  If you would like to learn more about the CUI program prior to attending Please be sure to visit the CUI training page at: https://www.archives.gov/cui/traing.html

This event is FREE to all vendors and attendees.

If you are interested in attending please RSVP to CUI@NARA.GOV

If you are interested in a booth, please submit this form to CUI@NARA.GOV

Industry Day Reminder

 

Industry clapart

Industry Day

June 21, 2019

10:00 a.m. – 2:00 p.m.

McGowan Theater + Presidential Conference rooms

National Archives Museum

701 Constitution Ave. NW

Washington, DC  20408

ISOO is hosting our 2nd Industry Day for Executive Branch entities or other stakeholders (i.e., Agencies, Industry, Nonfederal Organizations) to learn about products and services that have been developed for the CUI Program.  If you would like to learn more about the CUI program prior to attending Please be sure to visit the CUI training page at: https://www.archives.gov/cui/training.html

This event is FREE to all vendors and attendees.

If you are interested in attending please RSVP to CUI@NARA.GOV

If you are interested in a booth, please submit this form to CUI@NARA.GOV

WE STILL HAVE BOOTHS AVAILABLE FOR VENDORS!

(Booths will be assigned on a first come, first serve basis)

Industry Day Reminder

 

 

Industry clapart

Industry Day

June 21, 2019

10:00 a.m. – 2:00 p.m.

McGowan Theater + Presidential Conference rooms

National Archives Museum

701 Constitution Ave. NW

Washington, DC  20408

ISOO is hosting our 2nd Industry Day for Executive Branch entities or other stakeholders (i.e., Agencies, Industry, Nonfederal Organizations) to learn about products and services that have been developed for the CUI Program.  If you would like to learn more about the CUI program prior to attending Please be sure to visit the CUI training page at: https://www.archives.gov/cui/traing.html

This event is FREE to all vendors and attendees.

If you are interested in attending please RSVP to CUI@NARA.GOV

If you are interested in a booth, please submit this form to CUI@NARA.GOV

WE STILL HAVE BOOTHS AVAILABLE FOR VENDORS!

(Booths will be assigned on a first come, first serve basis)

The Next CUI Program Update to Stakeholders

There will not be a CUI webinar today as the timelines for the usual notices and production were disrupted by the shutdown. We will resume the webinars with the next scheduled webinar taking place on 17 April 2019 (1-3 EDT). If you have questions or concerns in the meantime please reach out to us here or at our email address: cui@nara.gov

All subscribers to the CUI Blog will receive links and call-in information to access the webinar prior to the event.

Industry Day Reminder and Information

Industry Day

December 10, 2018

9:00 a.m. – 3:00 p.m.

McGowan Theater

National Archives Museum

701 Constitution Ave. NW

Washington, DC  20408

On December 10, 2018 ISOO will be hosting an event for Executive branch entities or other stakeholders (i.e.,  Agencies, Industry, Nonfederal Organizations) to learn about products and services that have been developed for the CUI Program.

This event is FREE to all presenters, vendors, and Attendees.

The following is a breakdown of the vendors and the presenters for the event:

Vendors:

Titus

Sabine Solutions Incorporated (VOSB) & Assured Bridge Incorporated (VOSB)

Federal Records Centers Program

Security Engineered Machinery (SEM) Co., Inc.

Cyber Risk Advisory Coalfire

Savan Group

Dataguise

RegDox Solutions Inc.

Summit 7 Systems

Sera-Brynn

Deloitte Cyber Risk DFARS Team

SecureStrux

Presenters:

9:00 am – 9:35 am: CUI Executive Agent (Opening remarks)

9:35 am – 10:05 am:  TITUS

10:10 am – 10:40 am: Sabine Solutions Incorporated (VOSB) & Assured Bridge Incorporated (VOSB)

10:45 am – 11:15 am: CoalFire

12:05 pm – 12:35 pm: Security Engineered Machinery Co., Inc. (SEM)

12:40 pm – 1:10 pm: Savan Group

1:15 pm – 1:45 pm: Dataguise

If you are interested in attending this event please RSVP to.  There are still plenty of seats for this event, please share this information, all are welcome.

CUI@NARA.GOV

We recommend, prior to the event, that attendees

Familiarize themselves with the program and its requirements.

Please be sure to visit the CUI Training page at:

https://www.archives.gov/cui/training.html

The Event will be streamed live and there will be a internet post with transcript after the event.

https://www.youtube.com/watch?v=6mdVTPk6jlE

ISOO, as the Executive Agent for the CUI Program, does not endorse nor has evaluated any of the products and/or services being offered by the presenters or vendors.

Continue reading “Industry Day Reminder and Information”

Slides from CUI Briefing to Stakeholders on 11/14/2018

Please see the attached slides: Nov, 14 Briefing to Stakeholders

We had great attendance in our webinar yesterday with some great participation in the Q&A period. Thank you to all those who attended. The following topics were covered during the webinar:

  • A brief overview of the CUI program;
  • An update on agency implementation efforts;
  • The status and plans for a CUI Federal Acquisition Regulation Rule;
  • CUI Industry Day Agenda; and,
  • Time for Questions and Answers.