The Federal Acquisition Regulation (FAR) Council issued its long awaited proposed rule on Controlled Unclassified Information (CUI) on January 15, 2025. The proposed rule establishes a common form to be used by all federal agencies at the contract formation stage to identify contract‑related CUI, prescribes requirements for contractor protection of CUI, and creates a formal reporting process for security incidents involving CUI. Below, we examine these and several other noteworthy aspects of the proposed rule and their implications for contractors.
Read the full blog post.