Controlled Unclassified Information (CUI) is a category of unclassified information within the U.S. Federal government. The CUI program was created by President Obama’s Executive Order 13556 to create a streamlined method for information sharing and safeguarding. The Information Security Oversight Office (ISOO) acts as the Executive Agent (EA) of the National Archives and Records Administration (NARA), and is responsible for oversight of the CUI program. The ISOO monitors the implementation of the CUI program by executive branch agencies. CUI will replace agency specific labels such as For Official Use Only (FOUO), Sensitive But Unclassified (SBU), and Law Enforcement Sensitive (LES) on new data and some data with legacy labels will also qualify as Controlled Unclassified Information.[2][3] Federal contractors who handle CUI will be required to self-assess (or, in some cases, require a government official to review) with the Cybersecurity Maturity Model Certification (CMMC) under the Cyber AB (Accreditation Board).
- ^ Use of the CUI logo is controlled by the National Archives's regulations at 36 C.F.R. 1200.7
- ^ Casteli, Elise (January 22, 2008). "New policy expected soon for sensitive information". Federal Times. Archived from the original on January 2, 2013.
- ^ "Memorandum For The Heads Of Executive Departments And Agencies - Designation and Sharing of Controlled Unclassified Information (CUI)" (Press release). The Office of the White House. May 7, 2008. Archived from the original on June 1, 2009. Retrieved October 21, 2008. Alt URL