Training & Education

The Department of War has paused the rollout of CMMC Phase 2, but that does not mean CMMC Level 2, NIST SP 800-171, DFARS requirements, or CUI safeguarding obligations have been canceled or suspended. Contractors should use this review period to close security gaps, maintain accurate self-assessments, and continue protecting Controlled Unclassified Information—not put compliance efforts on hold.

CMMC Mythbusters is BACK June 2026! The popular CMMC 2.0/ DFARS training and education series CMMC Mythbusters returns June 16th- 17th, 2026! In three webinars, we will dive into the details of what is considered Controlled Unclassified Information (CUI), break down the definition of Commercial-off-the-Shelf (COTS), and work through how to properly identify and mark CUI. Leading the series is Regan Edens, Chairman of the CMMC Industry Standards Council (CISC) and Chief Transformation Officer of DTC Global. Use this opportunity to learn the latest requirements and ask the questions you need answered. Join us LIVE for CMMC Mythbusters June 16-18 below! Sign up for each part via the links below:  Part 1: "What Exactly Is CUI (Controlled Unclassified Information)?" Part 2: "Commercial-Off-the-Shelf (COTS) vs CUI?" Part 3: "Identifying & Properly Marking CUI" Brought to you by DTC Global, Cross Timbers APEX Accelerator, CUI Supply, TMAC, and the CMMC Industry Standards Council.

Does ITAR or EAR-controlled technical data count as CUI under a DoD contract? In many cases, yes. When export-controlled technical data or technology is provided by the government or generated during DoD contract performance, it may qualify as CUI and require proper marking, access controls, and physical safeguarding. This guide explains how ITAR, EAR, DFARS 252.204-7012, and CUI requirements intersect, what manufacturers need to protect, and how to reduce compliance risk in engineering, production, quality, and visitor-access areas.