Remove blog cui-designations
article thumbnail

How to Identify Authorized Recipients of Controlled Unclassified Information

Etactics

In the defense industrial base, Controlled Unclassified Information (CUI) flows up and down the supply chain. But who should or shouldn’t have access to CUI? To answer this, we must look at the laws and regulations that govern access to CUI. Now that this is a little easier to understand, what does it mean for sharing CUI?

article thumbnail

Everything You Need to Know About CUI Designations

Etactics

As organizations prepare for CMMC, the first question they need to answer is what controlled unclassified information (CUI) they have. This will determine the scope of information systems that process, store, or transmit CUI. In an ideal world, the government marks all CUI when it flows to contractors. What isn’t CUI?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Ultimate CMMC Scoping Guide: A Matrix for Every Level

Etactics

The purpose of this blog is to provide a resource that documents how to tailor the 320 objectives within NIST SP 800-171A to the CMMC scope. The Level 2 Scoping Guide applies to organizations handling controlled unclassified information (CUI). Definition of Controlled Unclassified Information (CUI). CUI is a subset of FCI.

article thumbnail

NIST SP 800-171 vs 800-53: Everything You Need to Know

Etactics

In this blog, we look at two of their well known special publications (SP) and discuss: How to derive CMMC Strategies from the RMF NIST SP 800-53 Explained NIST SP 800-171 Explained Conclusion How to derive CMMC Strategies from the RMF This blog will explain the role SP 800-53 plays within the Risk Management Framework (RMF).

article thumbnail

What CMMC Stands For and Why You Need Know It

Etactics

Luckily for you, the rest of this blog post explains what CMMC is and why you need to know it. To put it simply, COTS contractors don’t need to adhere to CMMC because they don’t deal with or modify their products to handle controlled unclassified information (CUI). In the past, the guidance on CUI was more or less based on good faith.

article thumbnail

[ANSWERED] What is CMMC 2.0?

Etactics

CMMC is an assessment standard designed to ensure that defense contractors comply with current cybersecurity requirements. It doesn't matter if organizations handle Controlled Unclassified Information (CUI) or Federal Contract Information (FCI). Level 2 (Advanced) Companies should be compliant with CMMC’s level 2 if they deal with CUI.

article thumbnail

An In-Depth Look Into CMMC Level 3 Requirements

Etactics

Maybe that’s what ultimately led you to this blog post. However, Level 2 is more of a temporary designation given to organizations that are in pursuit of Level 3. Luckily, the CMMC-AB designed the pyramid above to help illustrate how the Levels within the model work. The fear throughout your office is justifiable. via CMMC-AB.