CUI Reference Guide

To properly "live" the United States Government's Controlled Unclassified Information ("CUI") Program, federal agenices, government contractors, and others handling CUI must occasionally refer back to the language in several laws, regulations, and government-wide policies ("documents"). Often, remembering which documents are relevant and knowing where to look for these documents can be a challenge. This book puts many of these critical documents at your fingertips. You'll always know where to go to find the information you need, and to flip back and forth between the documents to better understand how their requirements are interrelated.

Although this book is useful on its own, it is meant as a supplement to the author's CUI Informed and CUI Fundamentals books.

This book includes copies of:

• Executive Order 13556: Establishes the CUI Program and grants NARA the authority to create corresponding regulations that apply to federal agencies.
• 32 CFR 2002: NARA's regulation that defines the CUI Program and how federal agencies are to handle nonpublic, unclassified information going forward.
• NARA's CUI Marking Guide: Describes how CUI should be marked in many of its various forms and across a wide variety of scenarios
• NARA's CUI FAQs: Answers 34 of the questions most frequently asked by federal employees and government contractors about the CUI Program
• DoDI 5200.48: Defines the United States Department of Defense's ("DoD") implementation of the Controlled Unclassified Information Program
• DoDI 5230.24: Defines a specific attribute of DoD's CUI program, when, how, and by whom distribution statements are to be applied to DoD technical information

James ("Jim") Goepel is a lawyer (JD and LLM from The George Mason University School of Law) and engineer (BSECE from Drexel University). He earned Provisional Instructor, Provisional Assessor, Certified CMMC Professional, and Certified CMMC Assessor certifications from the CMMC Accreditation Body (the "Cyber AB".)Jim has had a diverse career in and out of government. Prior to law school, Jim was a civilian engineer with the United States Coast Guard and worked in the civilian space program. He was also a software developer on US government contracts, and developer and systems administrator for several organizations, including for the United States Congress, where he managed and secured systems which processed approximately 85% of the legislation that came before Congress.During and since law school, Jim has advised government contractors, from small businesses to $1B+ organizations, on legal, cybersecurity, business operations, IT, intellectual property, technology transfer, and other topics. Jim is a co-founder of the CMMC Information Institute, a non-profit (501(c)(3)) educational organization. He is also a former professor at Drexel University, where he created and taught undergraduate and graduate cybersecurity courses. Jim is also one of the Founding Directors of the Cyber AB. During his tenure, he was elected as Board Treasurer and created and taught the ecosystem's first official CMMC educational program.