CUI Reference Guide
Select Laws, Regulations, and Government-Wide Policies Related to the United States Government's CUI Program
Published on 18. September 2023
Book
Paperback/Softback
206 pages
979-8-9891037-9-9 (ISBN)
Description
To properly "live" the United States Government's Controlled Unclassified Information ("CUI") Program, federal agenices, government contractors, and others handling CUI must occasionally refer back to the language in several laws, regulations, and government-wide policies ("documents"). Often, remembering which documents are relevant and knowing where to look for these documents can be a challenge. This book puts many of these critical documents at your fingertips. You'll always know where to go to find the information you need, and to flip back and forth between the documents to better understand how their requirements are interrelated.
Although this book is useful on its own, it is meant as a supplement to the author's CUI Informed and CUI Fundamentals books.
This book includes copies of:
Executive Order 13556: Establishes the CUI Program and grants NARA the authority to create corresponding regulations that apply to federal agencies.
32 CFR 2002: NARA's regulation that defines the CUI Program and how federal agencies are to handle nonpublic, unclassified information going forward.
NARA's CUI Marking Guide: Describes how CUI should be marked in many of its various forms and across a wide variety of scenarios
NARA's CUI FAQs: Answers 34 of the questions most frequently asked by federal employees and government contractors about the CUI Program
DoDI 5200.48: Defines the United States Department of Defense's ("DoD") implementation of the Controlled Unclassified Information Program
DoDI 5230.24: Defines a specific attribute of DoD's CUI program, when, how, and by whom distribution statements are to be applied to DoD technical information
More details
Series
Edition
Reference Guide ed.
Language
English
Product notice
Paperback (trade)
Unsewn / adhesive bound
Dimensions
Height: 229 mm
Width: 152 mm
Thickness: 11 mm
Weight
307 gr
ISBN-13
979-8-9891037-9-9 (9798989103799)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Person
Jim is the General Counsel and Director of Education at Continuous Compliance LLC, the provider of the¿FutureFeed¿compliance acceleration platform.¿ Jim¿brings a broad range of legal, technical, and business expertise to the Continuous Compliance team. He is a Founding Director and former Board Treasurer of the¿CMMC Accreditation Body¿(now called the CyberAB), and earned his¿CMMC Provisional Instructor ("PI"), Certified CMMC Professional ("CCP"), and Certified CMMC Assessor ("CCA") certifications from the CyberAB.
Jim also authored and taught the first official CMMC course, the¿CyberAB's initial Registered Practitioner course.¿ Jim earned a BSECE from Drexel University and JD and LLM degrees from George Mason University. He spent most of his professional career working in the cybersecurity field. Jim has worked for and counseled a variety of organizations, from various portions of the United States government, including the U.S. House of Representatives and United States Coastguard; to government contractors, including Unisys Corporation and The Johns Hopkins University Applied Physics Laboratory; to start-up technology and consulting companies.¿¿ Jim regularly speaks at domestic and international cybersecurity conferences and has been called upon as an expert witness on cybersecurity, IT, and government contracts issues.
He is the author of¿CUI Fundamentals¿and¿CUI Informed,¿books¿about the government's Controlled Unclassified Information ("CUI") program. Jim is also the co-author of a CCP curriculum taught nationally by several training providers. Jim's research into the application of Enterprise Risk Management techniques to the field of cyber and privacy governance has been published by the Supreme Court of Singapore in their¿National Law Journal¿and in two different books published by¿LexisNexis. Jim is also a co-founder of the CMMC Information Institute, a non-profit organization helping small businesses to better understand and meet their cybersecurity and data privacy obligations.