CUI-How to Leverage It
What a Chief Data Officer should know about Controlled Unclassified Information. This will cover (very briefly) the history of protection of sensitive unclassified information in the executive branch and the need for reform. As well as an overview of the policy, requirements, and the philosophy behind them. Next is a review of the standards for protecting and marking CUI as well as how these standards will be extended through contracts and agreements. The use of NIST SP-800-171 will be covered in depth as well as notes on implementation of NIST SP 800-171 and compliance oversight.