CUI Masterclass with Ryan Bonner

CUI Masterclass with Ryan Bonner

From GRC Academy by Jacob Hill

May 9, 2025 · 51 min · Season 2 · Episode 7

About this episode

Ryan Bonner provides a masterclass on Controlled Unclassified Information (CUI) and its implications for defense contractors.

"Outread the others" - that's how Ryan Bonner mastered CUI. If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselves) misunderstand what is CUI, where it comes from, and how to handle it. In this episode, Ryan Bonner, CEO of DEFCERT, gives a masterclass in understanding CUI from the actual laws and regulations - not just hearsay. 👉 Here are the highlights: What CUI really is - and what it’s not How to use the NARA and DoD CUI registries The proprietary paradox How to decontrol CUI The difference between FCI and CUI DoD memo on determining CMMC levels This is essential listening for anyone working with the defense industrial base - primes, subs, and especially DoD program managers who want to avoid missteps. What were your biggest takeaways? Let me know in the comments. Follow Ryan on LinkedIn: https://www.linkedin.com/in/rybonner/ DEFCERT Website: https://defcert.com/ ----------- Thanks to our sponsor Vanta! Get back time to focus on strengthening security and scaling your business. Discover the new way to GRC here: https://vanta.com/grcacademy ----------- Governance, Risk, and Compliance…

People in this episode

Host: Jacob Hill

Guest: Ryan Bonner

Topics covered

  • Controlled Unclassified Information
  • defense contractors
  • CMMC
  • NARA and DoD registries
  • information security
  • defense industrial base

Keywords

  • CUI
  • DoD
  • defense contractors
  • NARA
  • CMMC
  • information security
  • DEFCERT

Sponsors

Vanta

Mentioned in this episode

Organizations: DEFCERT, NARA, DoD

More episodes of GRC Academy

Explore listener stats, chart rankings, contacts and more on the GRC Academy podcast page.