Challenges & Needs

• No Clear Understanding of a CUI Program: The client was aware that they needed to develop CUI policies, procedures, and processes, yet were unclear on how to build an actual ‘CUI Program’ into their operations.
• Unclear Understanding of CUI itself. The client, like many DoD contractors, incorrectly viewed CUI as a categorization, thus, was unaware that it was actually a process driven program requiring numerous measures to be put into place.
• Challenges with Contractual Requirements: The client had numerous contracts that called for safeguarding provisions for CUI, yet with no actual CUI program in place, they were extremely concerned about possible violations and breach of contract issues.

Our Solution

• Met with senior leadership and provided a complete strategy and plan-of-attack for developing and implementing a CUI program with structured and well-defined policies, procedures, and processes.
• Met with key stakeholders within various departments/divisions for the organization, earning acceptance and support for what would be an aggressive timeframe for project implementation and completion.

Challenges Solved

• Successfully educated all key stakeholders on exactly CUI, the importance of protecting it, along with numerous other issues.
• Identified all known categories of CUI within the client’s environment, along with creating process flow documentation showing how CUI is collected, stored, used and, ultimately, destroyed, as needed.
• Developed comprehensive CUI policies and procedures, and conducted additional training seminars to key stakeholders on the various regulatory and contractual requirements relating to the safeguarding of CUI.
• In summary, developed a CUI program that met all requirements as outlined within DoDI 5200.48.

Value Created

• Put in place a corporate culture that now understands, respects, and truly values the importance of sound CUI practices.
• The broader topic of CUI was now viewed in a multi-dimensional value proposition that not only helps with stronger information security, but with enhanced business development opportunities, and increased client satisfaction and other related measures.