GSA’s New CUI Security Requirements: A Turning Point for Federal Contractors
In January 2026, the U.S. General Services Administration (GSA), the federal agency that manages government contracting and procurement, released updated guidance on how Controlled Unclassified Information (CUI) must be secured when it resides in contractor systems. The new procedural guide titled “Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process [CIO-IT-Security-21-112-Rev-1]” introduces a […]