Accessibility Tools

Skip to main content

Access World-Class NIST RMF Documentation with ASP Learn More

Per DoDI 5200.48, What is the Defense Counterintelligence and Security Agency’s (DCSA) role regarding CUI?

  • Arlington Security Portal - Show on: Side Bar

DCSA has the following eight (8) cleary mandated responsibilities:

  1. Administering the DoD CUI Program for contractually established CUI requirements for contractors in classified contracts.
  2. Assessing contractor compliance with NISP in accordance with 32 CFR 2003 and NIST SP 800-171.
  3. Establishing and maintaining a process to notify the DoD CIO, USD (R&E), and USD(A&S) of threats related to CUI for further dissemination to DoD Components and contractors.
  4. Providing security education, training, and awareness to DoD personnel and contractors through the CDSE.
  5. Providing security assistance and guidance to the DoD Components on the protection of CUI when DoD Components establish CUI requirements in DoD classified contracts for NISP contractors falling under DCSA security oversight.
  6. Serving as the DoD-lead to report Unauthorized Disclosure (UD) of CUI, except for the reporting of cyber incidents in accordance with Section 252.204-7012, associated with contractually established CUI system requirements in DoD classified contracts for NISP contractors falling under DCSA oversight.
  7. Coordinating with the DoD Chief Information Officer (CIO) regarding the implementation of uniform security requirements when the information systems or network security controls for unclassified and classified information are included in DoD classified contracts for NISP contractors falling under DCSA oversight.
  8. Consolidating DoD Component input on the oversight of CUI protection requirements in DoD classified contracts for NISP contractors under DCSA security oversight.

Source: https://www.dodcui.mil/Portals/109/Documents/Policy%20Docs/DoDI%205200.48%20CUI.pdf

Need to Implement a DoD CUI Program? Talk to Arlington

DoD contractors - and other contractors providing services to federal agencies - need to have in place established policies, procedures, and processes regarding CUI that’s resident within their information systems. What federal contractors need is a CUI Program. Arlington can help, as we offer the following CUI services and solutions:

  • CUI Scoping & Gap Assessments
  • CUI Policy Development
  • CUI Identification
  • CUI Contractual Language Review
  • CUI Marking (Digital)
  • CUI Marking (Physical)

Arlington Security Portal

Get Access to 100 + NIST RMF security and privacy policies & procedures, programs, and plan templates.

Learn More