Category: Uncategorized

Thank you to all who attended the CUI program’s first Industry Day.  The day was full of an abundance of products and services being offered to help implement the CUI Program.  Based on the attendance and the outpouring of interest in offering another Industry Day, we will be holding another one possibly in late spring.  We will post more information to the blog when we get more details.  Thanks again.

The following is the most recent version of the NIST 800-171a:

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171a.pdf

On October 18, the National Institute of Standards and Technology (NIST), in coordination with the Department of Defense (DoD) and the National Archives and Records Administration (NARA), will host an informational workshop providing an overview of Controlled Unclassified Information (CUI), the Defense Acquisition Regulations System (DFARS) Safeguarding Covered Defense Information and Cyber Incident Reporting Clause, and NIST Special Publications 800-171 and 800-171A.

This workshop will also feature panels of Federal Government representatives discussing expectations for evaluating evidence and implementing the CUI Security Requirements and industry representatives sharing best practices and lessons learned.

The CUI Security Requirements Workshop is open to all interested stakeholders and is free to attend. The workshop will also be available via webcast; advanced registration is not required for webcast.

To register please sign up here (for online or in person):

https://www.nist.gov/news-events/events/2018/10/controlled-unclassified-information-security-requirements-workshop

(In-person registration closes October 11, 2018.)

DATE: October 18, 2018 

TIME:  7:30 – 5:30

LOCATION: NIST, 100 Bureau Drive, Gaithersburg, Maryland 20899 (Red Auditorium)

Just as the Information Security Oversight Office (ISOO) Director Mark A. Bradley acts as the Executive Agent for the Controlled Unclassified Information (CUI) Program in reforming the protection and handling of unclassified information across Executive Branch agencies, the ISOO Director also serves as the Executive Secretary for the Public Interest Declassification Board (PIDB).

Congress established the PIDB to promote broad public access to an accurate record of the most significant national security decisions and activities of the United States Government.  Serving the President as a joint Executive and Legislative Branch advisory board, the PIDB seats nine members, five appointed by the President and one each by the Speaker and Minority Leader of the House as well as the Majority and Minority Leaders of the Senate. Appointees must be U.S. citizens who are preeminent in the fields of history, national security, foreign policy, intelligence policy, social science, law, or archives.

The PIDB advises the President on the classification and declassification of National Security Information (NSI), providing policy recommendations that promote the appropriate sharing and protection of NSI in the current digital age.  The bipartisan PIDB is in the final stages of preparing a new report to the President recommending a strategy to reduce over-classification, to make classification more precise, and to facilitate more rapid and agile information sharing through digital communications and information systems.

PIDB’s Declassification Technology Working Group, composed of Executive Branch classification and information security officials, have provided input to develop the forthcoming report to the President.  Recommendations in the report focus on issues of modernizing declassification in the management of electronic records across the federal government, and other issues of information security and access vital to the public interest.

PIDB encourages information and security management professionals to comment on the recommendations by subscribing to the PIDB blog Transforming Classification, at: https://transforming-classification.blogs.archives.gov/, where, in the coming weeks, PIDB will publish the report.

The next scheduled webinar will be 15 May 2018 (1-3 EDT). All subscribers to the CUI Blog will receive links and call-in information to access the webinar prior to the event.

The Archivist of the United States, David S. Ferriero, introduces a new CUI video on YouTube, which stresses the critical importance of sharing and protecting CUI.

Addressed to the wide community involved in handling and protecting CUI, the CUI video runs about 12 minutes, and presents discussions on the following topics:

• The definition of CUI, and the distinctions between types of information provided in the CUI Registry;
• The principles of access and sharing as they apply to lawful government purpose and limited dissemination control markings;
• Marking requirements overall, and for email, packages and standard mail;
• Controlled environments, both physical and electronic;
• The reproduction of CUI;
• FAXing CUI;
• Reporting incidents;
• The destruction of CUI; and
• The acceptable indicators for the decontrol of CUI.

In the video, Mr. Ferriero acknowledges the implementation of CUI concepts and tools “as an art practiced by civil servants in every department and agency, and their non-federal partners, working on behalf of the American people.”

The video is available for download from the ISOO website and may be used to support and supplement training and awareness efforts.