If your organization handles Controlled Unclassified Information (CUI) and plans to bid on or maintain DoD contracts, preparation must begin now. Required security controls need to be implemented and assessable prior to contract award.