Bøger udgivet af CMMC Information Institute

To properly "live" the United States Government's Controlled Unclassified Information ("CUI") Program, federal agenices, government contractors, and others handling CUI must occasionally refer back to the language in several laws, regulations, and government-wide policies ("documents"). Often, remembering which documents are relevant and knowing where to look for these documents can be a challenge. This book puts many of these critical documents at your fingertips. You'll always know where to go to find the information you need, and to flip back and forth between the documents to better understand how their requirements are interrelated.Although this book is useful on its own, it is meant as a supplement to the author's CUI Informed and CUI Fundamentals books. This book includes copies of:Executive Order 13556: Establishes the CUI Program and grants NARA the authority to create corresponding regulations that apply to federal agencies.32 CFR 2002: NARA's regulation that defines the CUI Program and how federal agencies are to handle nonpublic, unclassified information going forward.NARA's CUI Marking Guide: Describes how CUI should be marked in many of its various forms and across a wide variety of scenariosNARA's CUI FAQs: Answers 34 of the questions most frequently asked by federal employees and government contractors about the CUI ProgramDoDI 5200.48: Defines the United States Department of Defense's ("DoD") implementation of the Controlled Unclassified Information ProgramDoDI 5230.24: Defines a specific attribute of DoD's CUI program, when, how, and by whom distribution statements are to be applied to DoD technical information

Based on lessons learned as a result of the 9/11 attacks, the United States Government's Controlled Unclassified Information ("CUI") program fundamentally reshapes the way the Federal Government identifies and protects unclassified but still sensitive information. Among other changes, it requires those handling CUI to shift from a "need-to-know" to a "lawful government purpose" mindset and to properly identify and mark CUI before it is disseminated. Transformational changes such as these are neither quick nor are they easy, especially at the scale of the United States Federal Government. As the government adopts these changes, a lot of misinformation is being spread about the CUI program. That misinformation makes it hard for those handling CUI to truly understand what is expected, and required, of them.That's where this book comes in. It cuts through the misinformation and teaches you critical concepts such as:How to identify CUIThe difference between designating and marking CUIWho is authorized to designate CUIHow to properly mark CUIWho is authorized to handle CUIThe difference between need-to-know and lawful government purposeHow to safeguard CUIWhat to do in the event of a CUI spillAnd much more!In short, it helps you become ... CUI Informed.If you are looking for a high-level overview of the CUI program, this probably isn't the right book for you. My other book on the CUI program, CUI Fundamentals, explores the topic through a series of 100 questions (and answers!). It will give you the knowledge you need to spot potential misinformation without you having to wade through all the gory details of the CUI program.If you are a compliance professional, Contracting Officer, lawyer, policymaker, or are in another role that needs a deep understanding of the CUI program, this is the book for you. In short, this book will help you become...CUI Informed.