DoD CUI: Policy & Practice Training Course

What is CUI?

Controlled Unclassified Information (CUI) is information the United States government either creates or possesses that is limited to dissemination to those with a lawful government purpose. It is not classified information.

What are CUI Safeguarding standards?

CUI safeguarding standards are divided into two types: CUI Basic and CUI Specified. CUI Basic applies when there are no specific handling or dissemination controls set forth by law or policy.

How should CUI be marked?

A CUI banner must be included on the information that includes the CUI control marking, the CUI category or subcategory marking, and limited dissemination markings. All document markings must also include information that identifies the designating agency, like letterhead or other agency indicators. Designating agencies can also include a decontrolling date in their markings to indicate a specific day or event that makes the decontrolling schedule evident, and a point of contact for decontrolling should be included.

Is CUI training required?

Yes, all personnel who have access to CUI need to be trained on how to designate CUI, the different categories and subcategories, the CUI Registry, and marking, safeguarding, disseminating, and decontrolling CUI. Employees must be trained when they begin working for the agency and then once every two years.

What are some examples of DoD CUI categories?

Some examples of CUI categories are NNPI (nuclear reactors, materials, and safeguarding) and Unclassified Controlled Nuclear Information-Defense.