GRC Academy Podcast May 9, 2025 S-2 / E-7 00:51:11

CUI Masterclass with Ryan Bonner

Interview with CUI expert Ryan Bonner about the origins of CUI and how to mark and decontrol it.

“Outread the others” – that’s how Ryan Bonner mastered CUI.

If you’re confused about Controlled Unclassified Information (CUI) – you’re not alone. Many defense contractors (not to mention DoD themselves) misunderstand what is CUI, where it comes from, and how to handle it.

In this episode, Ryan Bonner, CEO of DEFCERT, gives a masterclass in understanding CUI from the actual laws and regulations – not just hearsay.

πŸ‘‰ Here are the highlights:

  • What CUI really is – and what it’s not
  • How to use the NARA and DoD CUI registries
  • The proprietary paradox
  • How to decontrol CUI
  • The difference between FCI and CUI
  • DoD memo on determining CMMC levels

This is essential listening for anyone working with the defense industrial base – primes, subs, and especially DoD program managers who want to avoid missteps.

What were your biggest takeaways? Let me know in the comments.

Follow Ryan on LinkedIn: https://www.linkedin.com/in/rybonner/

DEFCERT Website: https://defcert.com/

Thanks to our sponsor Vanta!

Get back time to focus on strengthening security and scaling your business.

Discover the new way to GRC here: https://vanta.com/grcacademy