CUI Workshop: The FAR CUI Rule and NIST 800-171 Rev 3

MSPs are still wrapping their heads around the CMMC Program requirements and helping their customers align with NIST 800-171 Rev 2. Don't look now, but there’s a new sheriff in town: The FAR CUI Rule, and this is much broader reaching than CMMC.

The DoW initiated third-party assessments for NIST 800-171 Rev 2 controls as the first of many Federal agencies required to protect CUI. What are the other agencies up to?

The FAR CUI Rule (clauses FAR 52.240-6 and FAR 52.240-7) is expected to be published by the end of 2026, so this working session will focus on NIST 800-171 Rev 3 and corresponding requirements and how they will impact contractors working with both DoW and other federal agencies.

This workshop will cover:

• What organizations will NIST 800-171 Rev 3 apply to?
• What would you look for in their contracts?
• What does the transition from Rev 2 to Rev 3 entail, especially focused on MSP
• implementation and support?
• What reporting requirements are MSPs needing to track?
• What opportunity does this represent to MSPs that have been focusing on CMMC?