This final rule aims to implement security and privacy measures to safeguard CUI and facilitate improved incident reporting to DHS.

As a result of threats and attacks to the Nation’s infrastructure, there is an enterprise-wide need to drive cultural change and further the development and sustainment of the cyber workforce.