On January 15, 2025, the FAR Council published a proposed FAR CUI Rule to integrate the Controlled Unclassified Information (CUI) Program into federal acquisitions, aiming to standardize CUI protections and clarify contractor responsibilities across industries, while also aligning them with broader cybersecurity and compliance initiatives. The proposed rule would create uniform cybersecurity, training, and incident reporting requirements for contractors and subcontractors managing CUI. The FAR CUI Rule is advancing through the rulemaking process, with the public comment period ending on March 17, 2025.