91´ó»ÆѼ

Dear colleagues,

As principal investigators (PIs) on the CU Boulder campus, we want to make sure that you are aware of new requirements in sponsored project awards that include handling of Controlled Unclassified Information (CUI).

Why it matters

By maintaining strong compliance practices, CU Boulder advances research excellence, fosters trust with federal sponsors, and strengthens the university’s competitive position in securing and managing federally funded research—all while protecting sensitive government information.

What's the latest?

On Sept. 10, the Department of Defense (DOD) published a final rule () implementing the Ìýprogram for DOD contractors and subcontractors. CMMC is a multi-level framework developed by the DOD to protect sensitive federal information shared with contractors and research institutions. As of Nov. 10, the CMMC Final Rule requires DOD to include CMMC requirements in contracts that include handling of CUI.

Our campus has implemented and verified a CMMC-compliant environment, allowing us to confidently accept awards that stipulate this requirement. If you are pursuing a proposal or receive a contract that includes the handling of CUI, please contact your Proposal Analyst or Contract OfficerÌýfor guidance.

CU Boulder's actions and next steps

• CU Boulder has updated the Controlled Unclassified Information PolicyÌý²¹²Ô»å established a Ìýto create consistency across campus to meet regulated research CUI compliance.
• The new CUI Program pageÌýwill help you better understand CUI and CMMC requirements.
• A townhall for PIs is being planned for the early part of the spring semester. More information will be shared soon.
• This spring, CU Boulder will undergo a certification audit by a DOD-authorized assessor to demonstrate our campus’s compliance with CUI and CMMC requirements. Having certified infrastructure will expand our ability to accept projects that involve CUI.
• To support understanding of these new requirements, an updated training course is being developed in Percipio and will be required of all PIs who will handle CUI. More information will be provided soon.

If you have questions about any of these requirements, please contact your Proposal Analyst or Contract Officer in the Office of Contracts and Grants.

Thank you,

Massimo Ruzzene
Senior Vice Chancellor for Research and Innovation, Dean of the Institutes

Marin Stanek
Vice Chancellor of Information Technology