National Law Review
7/21/2026

CUI, FOCI, Quantum, and CMMC: The Federal Government Issues a Wave of Proposed Rules to Safeguard Government Information
Short summary
The federal government has issued a wave of proposed rules to safeguard government information, including a new DoD FOCI rule expanding foreign ownership reporting to non-cleared contractors, an updated FAR CUI rule requiring NIST SP 800-171 Rev 3 compliance, and cybersecurity framework updates. The FOCI rule reaches contractors at any tier with contracts exceeding $5M. These changes represent a significant compliance burden for federal contractors.
- •DoD proposed FOCI rule expands foreign ownership reporting to non-cleared contractors above $5M threshold
- •Updated FAR CUI rule moves to FAR Part 40 and requires NIST SP 800-171 Rev 3 compliance
- •Contractors should review ownership structures, NISS registration, and CUI safeguarding systems now
Generated with AI, which can make mistakes.
Is this a good recommendation for you?


