Navigating Compliance: FCI and CUI Requirements for Federal Contractors
TrustedSec Advisory Compliance Services Practice Lead Chris Camejo provides a comprehensive overview of the definition, scope, and protection requirements for government contractors handling FCI and CUI, and the relationship between FCI and CUI contract clauses and NIST cybersecurity standards.
Many government contractors and subcontractors receive contract clauses related to the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) but are confused about what information falls into these categories. Understanding these classifications is critical as the Department of Defense (DOD) has published the Cybersecurity Maturity Model Certification (CMMC) 2.0 final rule for the protection of FCI and CUI, which will take effect on December 16, 2024.
During this webinar, attendees left with the knowledge and understanding of:
- What FCI is and how to protect it using the government-wide FAR 52.204-21 clause
- Useful background information on the government CUI program and the definition of CUI
- How government contractor CUI protection obligations work
- How to identify and mark CUI
TrustedSec Advisory Compliance Services Practice Lead Chris Camejo provides a comprehensive overview of the definition, scope, and protection requirements for government contractors handling FCI and CUI, and the relationship between FCI and CUI contract clauses and NIST cybersecurity standards including FAR 52.204-21, DFARS 252.204-7012, CMMC, NIST SP 800-171, NIST SP 800-172, NIST SP 800-53, and FedRAMP. He also uses the current DOD CUI protection contract clauses to explain the most widespread CUI protection program and show how organizations can be left with misconceptions about the types of information they are handling.
Stay ahead of the curve and ensure your organization is ready to meet the Federal Government's evolving cybersecurity expectations!