Organizations planning to do business with the U.S. government involving the storage, processing or communication of specially categorized government unclassified information, must meet guidelines and standards for protecting this information and the systems that process it. These standards are described in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. Data and information categorized as requiring this protection is identified by the sponsoring or originating agency but is termed 'Controlled Unclassified Information' (CUI). Categories of CUI are defined and managed by the National Archives and Records Administration (NARA).
For new and small businesses, these requirements may appear daunting or unachievable. Some estimates put the cost at an additional $500 per month, per employee to achieve and maintain such compliance. This might be the case if each small business or organization attempted to implement these requirements on their own.
By creating a secure and compliant architecture in an approved cloud environment and scaling the service to more than a single organization, Assured Bridge can make compliance achievable and affordable allowing you to focus on your product or service, leaving many of the complex security processes to us.