CUI Training Exam Flashcards

Controlled Unclassified Information (CUI) Overview

• Controlled Unclassified Information (CUI) refers to unclassified information needing safeguarding and dissemination controls based on legal or policy requirements.
• A banner and footer marking "CUI" is mandatory on Department of Defense (DoD) documents containing CUI.

CUI Registry and Policies

• The Information Security Oversight Office (ISOO) CUI Registry serves as a government-wide online repository that provides Federal-level guidance on CUI policy and practices.
• DoD Instruction 5200.48 outlines the implementation of the DoD CUI program.

CUI Management and Handling

• CUI documents must undergo Records Management procedures before their destruction.
• The authorized holder of CUI is responsible for determining the CUI category, markings, and dissemination instructions at the time of creation.
• The responsibility of applying CUI markings and dissemination instructions also lies with the authorized holder.

Protection of CUI

• Protection of CUI is a collective responsibility of DoD military personnel, civilians, and contractors.
• All parties involved in handling CUI can decontrol it, including the originator, original classification authority (if designated), or designated offices for decontrolling.

Destruction and Security of CUI

• The goal of destroying CUI is to ensure it becomes unreadable, indecipherable, and irrecoverable in all forms, including electronic formats.
• CUI is categorized into two subsets:
  • CUI Basic: Lacks specific handling or dissemination controls outlined by laws or regulations.
  • CUI Specified: Has specific handling controls mandated by legal or policy frameworks.

Consequences and Requirements

• Unauthorized disclosure (UD) of CUI can lead to administrative, civil, or criminal sanctions.
• Inclusion of a header banner marking is mandatory to alert users that CUI is present in documents.
• Moderate confidentiality is required for the configuration of systems and networks that handle CUI.