Industry News and Headlines

New GSA Guidance on Protecting CUI in Contractor Systems, Plus a Look Ahead at Pending FAR Changes

The General Services Administration issued a five‑phase procedural guide to protect Controlled Unclassified Information (CUI) in contractor‑owned systems, outlining concrete deliverables from preparation through continuous monitoring. A parallel FAR Council proposal would embed a standardized CUI clause, a new form, and an eight‑hour incident‑reporting deadline across federal contracts. Together, the guidance and rule signal a shift toward uniform, program‑based CUI management rather than ad‑hoc agency practices. Contractors that adopt the roadmap now will face fewer compliance surprises when the FAR amendment finalizes.