The proposed FAR CUI rule points to NIST SP 800-171 Rev. 3 for contractors handling CUI across the federal government, and DoW has said it will incorporate Rev. 3 into CMMC through future rulemaking. Rev. 2 still governs your DoW contracts today, but the changes are not small: requirements drop from 110 to 97, while assessment objectives grow from 320 to 422, plus 88 ODP statements. This session covers what changed, what those changes mean in practice, and what meaningful preparation looks like.