Proposed Rule Defining Federal Contractors Use of Controlled Unclassified Information

What: On January 15, 2025, the Department of Defense (DOD), General Services Administration (GSA), and National Aeronautics and Space Administration (NASA) published a proposed rule that would require contractors to adopt a standardized process for handling Controlled Unclassified Information (CUI). 

Why: The proposed rule would require contractors to mark and store CUI. All contracts including potential CUI will have specific sections of the contract that denote the CUI within the contract. Small contractors must safeguard and report any security incidents by preserving and protecting images of all known affected systems after reporting to the government. 

Action: Comments are due by March 17, 2025

Read the proposed rule and submit comments.

Advocacy contact: Send an email to David Mullis at david.mullis@sba.gov