February 2022

What is CUI? Government created or owned UNCLASSIFIED information that must be safeguarded from unauthorized disclosure. An overarching term representing many difference categories, each authorized by one or more law, regulation, or Government-wide policy. Information requiring specific security measures indexed under one system across the Federal Government. Why is CUI important? The establishment of CUI was a watershed moment in the DoD’s information security program, formally acknowledging that certain types of UNCLASSIFIED information are extremely sensitive, valuable to the United States, sought after by strategic competitors and adversaries, and often have legal safeguarding requirements. Unlike with classified national security information, DoD personnel at all levels of responsibility and across all mission areas receive, handle, create, and disseminate CUI. CUI policy provides a uniform marking system across the Federal Government that replaces a variety of agency-specific markings, such as FOUO, LES, SBU, etc. Where did CUI come from? Executive Order 13556 established CUI on November 4, 2010. Part 2002 of 32 Code of Federal Regulations prescribed Government-wide implementation standards on September 14, 2016. DoD Instruction 5200.48, “Controlled Unclassified Information,” established DoD CUI policy on March 6, 2020. Do you handle CUI? Then you must currently comply with NIST 800-171 or you may be in breach of contact. Are you prepared? We can help!!      

SBA Administrator Guzman Announces New Pilot Program to Bolster Cybersecurity Infrastructure of Emerging Small Businesses SBA will Award $3M in Grants to Help States, Entrepreneurs Combat Rise in Cyber Attacks and Threats WASHINGTON – Today, Administrator Isabella Casillas Guzman, head of the U.S.Small Business Administration (SBA), announced $3 million in new funding for stategovernments to help emerging small businesses across America develop their cybersecurity infrastructure – a priority of the Biden-Harris Administration, outlined in the President’s Bipartisan Infrastructure Law (BIL). As part of the Cybersecurity for Small Business Pilot Program, through the Office of Entrepreneurial Development, state governments are eligible to compete for grants that will help deliver cybersecurity assistance to nascent and start-up business owners. Applications will be accepted from January 26, 2022, through March 3, 2022. “Throughout the COVID-19 pandemic, small businesses have adopted technology at high rates to survive, operate, and grow their businesses. As a result, cybersecurity has become increasingly important as now, more than ever before, small business owners face cyber risks and challenges that could disrupt their operations and competitive advantages. As we seek to build a stronger and more inclusive entrepreneurial ecosystem, we must innovate and provide resources to meet the evolving needs of the growing number of small businesses. With this new funding opportunity, the SBA intends on leveraging the strengths across our state governments, territories, and tribal governments to provide services to help small businesses get cyber ready and, in the process, fortify our nation’s supply chains,” said SBA Administrator Isabella Casillas Guzman. “The bottom line is we must do more to help small businesses combat cybersecurity threats, which continue to increase, evolve and inhibit,” said SBA Associate Administrator for the Office of Entrepreneurial Development Mark Madrid. “This pilot program will empower state governments to expand existing services, innovate, adapt to current environments, develop new resources, and scale solutions to assist more small businesses.  Additionally, expanding access to underserved and underrepresented small business ecosystems will be a critical marker of success.” About the Cybersecurity for Small Business Pilot Program Eligible applicants are comprised of state governments that seek to provide training, counseling, remediation, and other tailored cybersecurity services for emerging small firms in multiple industries. Grantees will be awarded up to $1 million to assist small businesses. Funding details and requirements are available at Grants.gov under “Cybersecurity for Small Business Pilot” (Funding Opportunity Number SB-OEDCS-22-001/CDFA 59.079) offered by the SBA. Applications must be submitted by the stated deadline on the official grant application portal as stated in the funding announcement. To learn more about SBA’s programs and services related to cybersecurity, visit  www.sba.gov/cybersecurity. To find additional SBA local resources, visit www.sba.gov/local-assistance. About the U.S. Small Business Administration The U.S. Small Business Administration helps power the American dream of business ownership. As the only go-to resource and voice for small businesses backed by the strength of the federal government, the SBA empowers entrepreneurs and small business owners with the resources and support they need to start, grow or expand their businesses, or recover from a declared disaster. It delivers services through an extensive network of SBA field offices and partnerships with public and private organizations. To learn more, visit https://www.sba.gov.