CUI
-
CMMC Paused. The FAR CUI Rule Didn't.
The CMMC pause touched only third-party verification on DoD contracts. A separate government-wide FAR rule is still moving, and it would extend NIST SP 800-171 Rev 3 to civilian contractors for the first time.
-
CMMC's First Step Is Broken — The Pentagon Still Can't Mark Its Own Data
CMMC's biggest cost driver is not the audit but the Pentagon's decade-long failure to mark its own CUI. Two inspector general reports say the contractors are right.