This is a Sources Sought to conduct market research and to determine the availability of vendors capable of providing a Controlled Unclassified Information (CUI) program that standardizes and simplifies the way the Executive Branch handles unclassified information that requires safeguarding or dissemination controls, pursuant to and consistent with applicable law, Federal regulations, and Government-wide policies.
The VA CUI Program will be implemented in phases. In other words, legacy practices (policies and practices used to protect Sensitive but Unclassified [SBU], Personally Identifiable Information [PII], VA Sensitive Information/Data, Protected Health Information [PHI], and other sensitive information types) and CUI practices will coexist until full migration is achieved. VA legacy practices will eventually be replaced by CUI standardized approaches to information protection and handling.
As part of your RFI response, please address your expertise and qualifications in the following areas:
- Controlled Unclassified Information (CUI) Training and Web-based Training Development
- Development and execution of training on CUI Program (including PII and PHI).
- Development and execution of web-based training programs
- Knowledge of VA CUI legacy practices and protocols necessary to develop and execute phased training until the VA fully migrates to the new NARA-defined CUI standards….




