Eddie Minyard

What Happens When the Government Doesn’t Mark CUI — And How Contractors Should Respond

In the world of federal contracting, few topics generate as much confusion and debate as Controlled Unclassified Information (CUI). Contractors frequently encounter this scenario: A Statement of Work (SOW) arrives unmarked. Technical deliverables—such as technology designs or site plans—are created based on requirements stated in that SOW. When the question of CUI marking arises, pushback […]
Read More

Protecting CUI: It ain’t just about CMMC

Two Rule Changes You Need to Follow By Ed Minyard, CBCP, CISM, CCP(pending), CMMC-RPCISO, ResponseForce1 LLC If you hold federal contracts — DoD, GSA, or otherwise — two significant regulatory developments deserve your attention right now. One has been in the news. One was issued without any public notice at all. Between them, they are […]
Read More

AI and CUI : The Threat No Policy Memo Will Solve

The CMMC practitioner community is asking the right question: what about the risks in using AI? With AI-enabled lateral movement now a credible threat vector — not just a theoretical one — defense contractors face a challenge that a simple “don’t paste CUI into ChatGPT” policy memo simply cannot solve. That kind of policy is […]
Read More

But it’s only a Cat 1…

Understanding Hurricane Categories Hurricanes are categorized using the Saffir-Simpson Hurricane Wind Scale, which ranges from Category 1 (the lowest) to Category 5 (the highest). This scale is based on a hurricane’s maximum sustained wind speed and provides estimates of potential property damage. The Dangers of Category 1 Hurricanes Despite being the lowest on the scale, […]
Read More

Strengthening Your CMMC Compliance Journey: The Critical Role of Managed Security Services

The Cybersecurity Maturity Model Certification (CMMC) framework represents a paradigm shift in how defense contractors approach cybersecurity. As organizations navigate the complex requirements of protecting Controlled Unclassified Information (CUI) and Federal Contract Information (FCI), many are discovering that achieving and maintaining CMMC compliance requires more than just implementing security controls—it demands ongoing expertise, monitoring, and […]
Read More