Events and Training
New requirements to protect sensitive federal information
The United States Department of Defense (DOD) issued new requirements for contracts that include handling of Controlled Unclassified Information (CUI). The CMMC Final Rule incorporates requirements of the Cybersecurity Maturity Model Certification (CMMC) program for DOD contractors and subcontractors, including those on the CU Boulder campus.
Our campus has implemented and verified a CMMC-compliant environment, allowing us to confidently accept awards that stipulate this requirement. Passing a certification audit by a DOD-authorized assessor in spring 2026 will expand our ability to accept projects that involve CUI.
Why it matters
By maintaining strong compliance practices, CU Boulder advances research excellence, fosters trust with federal sponsors, and strengthens the university’s competitive position in securing and managing federally funded research—all while protecting sensitive government information.
Learn more
CU Boulder has updated the Controlled Unclassified Information Policy and established a CU Data Use Standard to create consistency across campus to meet regulated research CUI compliance. A new CUI Program page will help you better understand CUI and CMMC requirements.
If you have questions about any of these requirements, please email the Office of Compliance, Ethics and Policy.
Compliance, Ethics and Policy Monthly Education Series
The OCEP Monthly Education series is an opportunity to highlight policy and compliance topics across campus.
Interested in presenting at the Compliance, Ethics and Policy Education Series? Email us.
All previous sessions can be viewed in the Training Library.
Thursday, Mar. 19 from noon - 1 p.m.
Zoom
This training hosted by Internal Audit provides an overview of the CU EthicsLine reporting system, including when it should be used, how to submit reports, and how reports are handled once received. By the end of the session, participants will understand what occurs after a report is filed, the protections in place to keep information confidential, and how raising concerns helps uphold safety and accountability within the CU Boulder community.
Compliance Week
Each September, multiple campus partners collaborate on Compliance Week to share out messages about key policies and compliance issues. Throughout the week, students, faculty and staff receive e-memos about topics such as student privacy, voter registration, alcohol and other drugs, and the Annual Security Report, among others.
Learn more about why Compliance Week matters and how you can get involved.