Managing CUI Compliance: Strategies for Federal Contractors

From parts invoices for jetfighters, to network design documents and engineering drawings, DoD and/or government contractors have to interact with sensitive data including Controlled Unclassified Information (CUI) and Federal Contract Information (FCI). This information is not only sensitive but regulated with protection enforced by programs such as the DoD’s Cybersecurity Maturity Model Capability (CMMC) requiring companies to establish secure environments, limiting access, and reporting incidents.

Join Tom Cowles, Vice President of Governance, Risk and Compliance at Box and Doug Barbin, president and managing principal at Schellman (CMMC/FedRAMP assessor) in a Box Community roundtable on how to meet CMMC requirements and address content security for CUI and FCI as well as ITAR, DFARS, HIPAA and other regulations. This will be an interactive discussion with your peers to discuss best practices, experiences and managing through this evolving landscape.

Topics we’ll cover:

• Insights on working through the CMMC 2.0 compliance process
• Examples of CUI “enclaves”
• Securing CUI content while providing a collaborative user experience
• Managing through uncertainty in a changing regulatory environment