This course covers CUI identification, authorized markings, access controls, secure handling, and mandatory cyber-incident reporting requirements for personnel.
Recognize CUI and distinguish it from other information
Apply proper CUI markings and designation standards
Manage access, dissemination controls, and distribution requirements
Safeguard CUI and report incidents within deadlines
In high-velocity engineering, quality, and supply chain operations, personnel routinely handle sensitive drawings, inspection records, and technical packages. When this unclassified information requires safeguarding or dissemination controls pursuant to law, regulation, or government-wide policy, it is categorized as Controlled Unclassified Information (CUI). CUI is not classified information, but failure to protect it can jeopardize defense projects, compromise intellectual property, and violate federal contracts.
Proper handling relies on consulting official registries—such as the government-wide ISOO CUI Registry and the DoD CUI Registry—and applying authorized markings. For defense documents, required markings generally consist of a "CUI" banner at the top and bottom of every page, along with a CUI Designation Indicator Block on the first page or cover. When emailing CUI, employees must use organization-approved accounts and marking notices; attached CUI files retain their own designation block.
Sharing CUI requires verifying a lawful government purpose and ensuring no Limited Dissemination Controls (LDCs like FED ONLY, NOFORN, or REL TO) or DoD distribution statements are violated. The absence of an LDC does not mean a document is approved for public release. In daily practice, CUI must never be stored in personal cloud drives, sent from personal email accounts, or left unattended on shared printers. If CUI is mishandled or exposed to an unapproved environment, employees must immediately preserve evidence without making extra CUI copies and report the event through internal security channels. For contractors subject to DFARS 252.204-7012, cyber incidents involving covered defense information require formal reporting within 72 hours.
This program is available with English and French closed captions.
You’ll never find yourself scratching your head, trying to figure out why you can’t get our videos to play or courses loaded into any platform.
Oversee training records, create employee certifications, and track compliance deadlines. All in one centralized system.
Each title includes an embed feature that allows users to add videos to their existing training platform or LMS.
Access a comprehensive training library covering multiple departments, with instant updates as new topics are added.
No Worries. Here's Some Helpful Info.
Max/Title Price
Volume discounts available
Unlock pricing options and volume discounts for your business
Disclaimer: This independently developed awareness course is not official DoD, DCSA, CDSE, NARA, or ISOO training. It does not provide certification, access authorization, or authority to mark, share, decontrol, or release CUI. Completion does not replace official, employer, contract, role, system, or government-required training. This course draws on public CUI guidance from NARA/ISOO and the Department of Defense. Requirements vary by information, contract, system, organization, and role. Follow applicable requirements and your organization’s approved procedures.