Achieve Controlled Unclassified Information (CUI) Compliance

Meet your DFARS Cyber Security Requirements

Agencies and businesses that perform work for the federal government are under increasing pressure to comply with standards for safeguarding, handling and marking controlled unclassified information (CUI). Executive Order 13556 and NIST SP 800-171, Revision 1 Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations, outline recommended requirements for protecting the confidentiality of CUI for those operating outside federal datacenters and systems.

Adding further pressure, the United States Department of Defense (DoD) is leveraging these recommendations when requiring civilian organizations to meet the security requirements for protecting the confidentiality of Covered Defense Information (CDI) as spelled out in clauses 252.204-7008 (Compliance with Safeguarding Covered Defense Information Controls) and 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting) of the Defense Federal Acquisition Regulation Supplement (DFARS).

With these mandates, the government is providing greater protection for unclassified data and at the same time enhancing the openness and uniformity of government data. By standardizing and simplifying the safeguarding and dissemination of unclassified information through CUI compliance, the Order addresses the often-confusing guidance on how to handle what was previously designated as Sensitive but Unclassified (SBU) information. Currently there are over 100 different ways to classify SBU resulting in inefficient, inconsistent, often opaque handling of information.

If your organization is seeking to satisfy the recommendations of NIST 800-171, achieve CUI compliance and meet DFARS requirements, we can help. The TalaTek team of experts has experience in helping clients meet Federal CUI standards efficiently and effectively. Our CUI analysis and compliance process will help you:

• Inventory data:  Understand who uses it, where is it located, how is it currently protected, where does it end up, who do you need to train?
• Assess the environment: Know what processes, infrastructure, and output data exposed to
• Build process: Create a CUI specific compliance solution for your environment
• Identify gaps: Outline corrective actions required to help you achieve CUI compliance
• Educate staff: Identify and train personnel on handling and marking CUI data and using the federal CUI registry

TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS)

The foundation of all our cybersecurity and risk services is our TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS). This cloud-managed service becomes the central system of record for your integrated risk management program. Using TiGRIS, the TalaTek team collects and analyzes data and delivers your findings and action plans. With this key information in place, you can leverage TiGRIS as the foundation of your NIST 800-171 and CUI compliance program, integrating all of your risk, compliance and IT security data into a single system of record to provide a true enterprise view of your risk and compliance status.

TiGRIS ensures your governance, risk and compliance processes are centralized, integrated and efficient, and provides you with powerful data aggregation and risk measurement across your organization. The result is immediate visibility to risk measures and compliance status, enabling timely and informed risk decisions and prioritization across the enterprise.