Section 1526 of the fiscal 2022 National Defense Authorization Act (NDAA) required the Pentagon to assess DoD's controlled unclassified information (CUI) program 180 days after the enactment of the NDAA, as part of the law's requirement for the Pentagon to create a cybersecurity framework for the U.S. defense industrial base. By press time on July 14, DoD had not responded to an email query about whether the Pentagon has established such a cybersecurity framework with the CUI assessment. The cybersecurity…
