Ooey Cooey
Expert advice about Controlled Unclassified Information (CUI).
www.the-cyberadvisor.com
Episodes
9 episodes
Episode 2 - How to Build a Trusted Cyber Compliance Ecosystem to Manage Cost and Risk
This episode is for informational purposes only and does not constitute legal advice. In this episode, I break down why building a trusted ecosystem of vendors, consultants, peers, and industry voices is essential ...
Special Edition- My Bar Exam Experience
In this special edition of Ooey Cooey, Leslie Weinstein—a recent graduate of the University of Baltimore School of Law—shares her firsthand experience taking the February 2026 Maryland UBE while it is still fresh. This episode is dedic...
Episode 1 - What is CMMC and How Does it Effect Me?
If you are considering entering the Department of Defense market—or you are already in it but hoping CMMC might quietly go away—this episode is for you.In this foundational discussion, I break down:What CMMC actually is (and ...
Episode 0: Ooey Cooey Is Back
Are you a defense contractor being told that everything is CUI—or that your contract contains CUI—without anything actually being marked? Or unsure whether you handle CUI at all, and therefore whether CMMC Level 1 or Level 2 applies to you?...
Storing CUI
32 CFR says that authorized holders must take reasonable precautions to guard against unauthorized disclosure of CUI. They must include the following measures among the reasonable precautions:(1) Establish controlled environments in whic...
Interview with the ISOO
Have you ever wondered where NIST 800-171 came from or why it was written? In August 2020 I had the opportunity to interview a representative from the Information Security Oversight Office (ISOO) on my YouTube channel DIB Tech Talk (
Marking and Labeling CUI
At minimum, CUI markings for unclassified DoD documents will include the acronym “CUI” in the banner and footer of the document. If portion markings are selected, then all document subjects and titles, as well as individual sections, parts, par...
Creating and Designating CUI
The authorized holder of a document or material is responsible for determining, at the time of creation, whether information in a document or material falls into a CUI category. If so, the authorized holder is responsible for applying CUI marki...