Skip to content
Under attack? Call +1.864.800.0550CareersStoreBlind spot check
Talk to a Principal EngineerTalk to an engineer
Compliant

FCI, CUI, ITAR, EAR, FAR, DFARS: the cheat sheet

By Kyl Gaston1 min read

The short answer

The six terms overlap but are not interchangeable Some govern sharing, others govern protection; mixing them means complying with the wrong rule Know which applies to your data before an assessment, not after

Six tiles in red and grey

FCI. CUI. ITAR. EAR. FAR. DFARS. If your company touches a federal contract, mixing up even one of these is not a paperwork problem. It is a contract-ending one.

Most teams assume they know the difference. Then an auditor asks them to prove it, and the room goes quiet.

Here is what trips people up: these terms overlap, but they are not interchangeable. One governs what you can share. Another governs how you must protect it. Confuse the two, and you can be fully "compliant" with the wrong rule entirely.

We broke down all six in plain English, including how to tell at a glance which one applies to the data sitting on your network right now.

If you handle government data, this is the cheat sheet you want before your next assessment, not after.

Read it here 馃憞 https://lnkd.in/e35T4B47

#DefenseContracting #CMMC #Cybersecurity #CUI #ITAR #Compliance #GovCon #TheThe Vizius Group

Where we can help

Related offering 路 Compliant

CUI & ITAR Enclave Design and Build

"How much of the company really has to be in scope?"

Free tool 路 about 2 minutes

Take the blind spot check

Four questions for a quick read, then go deeper on your weakest area.

More in Compliant

Compliant

When the "optional" document becomes the one everyone reads

Kyl examines the DoD CIO's voluntary "Brilliant at the Basics" lists, published alongside the CMMC pause, which bring back practices removed in the move to CMMC 2.0. He notes the tension between relieving cost burden and the reappearing expectations.

Kyl Gaston 路 2 min read

Compliant

The Revolutionary FAR Overhaul deserves a place on your list

While attention is on CMMC, the Revolutionary FAR Overhaul may renumber every Part 52 provision and clause, which would break clause matrices and templates. Kyl notes that FAR 52.204-21's 15 FCI controls overlap with CMMC Level 1 without being the same obligation, and that public comment is open.

Kyl Gaston 路 1 min read

Compliant

CMMC without the ransom note

A counter to fear-driven CMMC marketing. Kyl frames compliance as a set of habits, illustrated with haiku about protecting CUI and MFA prompts, and calls for a clear plan instead of panic.

Kyl Gaston 路 1 min read

All Compliant posts 路 All Insights

Talk to a Principal Engineer

Got a question one of these posts didn't answer? Ask the engineer who would do the work.

REQUEST PRICING