Did you know you have enough leverage to move the Pentagon?
Is your Program Office and Contracting Officer not providing your organization guidance on CUI?
While you may not have enough leverage to move the whole Pentagon, you do for at least your Program Office and Contracting Officer.
This episode of “As the CMMC Churns” briefly explores the leverage DoD Instruction 5200.48, Controlled Unclassified Information (CUI) gives you. And yes, you can even use DoDI 5200.48 to get DFARS Clause -7012 taken out of your contract.
Key CMMC Organizations
- National Archives & Records Administration Controlled Unclassified Information (CUI) Homepage
- DoD CIO’s Cybersecurity Maturity Model Certification (CMMC) Home Page
- Cyber Accreditation Body (Cyber-AB)
- Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page
- Defense Industrial Base (DIB) Cybersecurity Portal
Key Regulations
Key Acquisition References
- 48 CFR § 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems
- DFARS Clause 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.
- DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
- DFARS Clause 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS Clause 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
- DFARS Clause 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements.
