--- title: What Is Controlled Unclassified Information (CUI)? description: Controlled Unclassified Information CUI is government info that needs to be safeguarded. Learn more about the process for protecting CUI. image: https://sanctumfederal.com/hubfs/Blog%20Featured%20Images/SF_blog_29.jpg --- Blog # What Is Controlled Unclassified Information (CUI)? By Ashley Neu | Posted on April 21, 2022 | Posted in [Territory](https://sanctumfederal.com/federal-sales-articles/tag/territory) - - - The United States [Department of Defense (DoD)](https://www.dodcui.mil/) defines Controlled Unclassified Information (CUI) as "Government created or owned UNCLASSIFIED information that must be safeguarded from unauthorized disclosure." The idea of CUI was established by Executive Order 13556 on November 4, 2010. It was a product of the realization that across all levels of mission areas, DoD personnel and Federal Contractors will receive, create, handle or disburse information that, while labelled UNCLASSIFIED, provides value to the United States and may be targeted by strategic competitors and/or adversaries. Prior to establishing CUI, individual agencies used their own unique labels to identify UNCLASSIFIED information in need of safeguarding. Such labels included: - Confidential Business Information (CBI), - Personally Identifiable Information (PII), - Procurement Sensitive, - Sensitive But-Unclassified (SBU), - For Official Use Only** **(FOUO) Under EO 13556, these labels were standardized under the single Controlled Unclassified Information (CUI) label. [Guide To Selling To The Federal Government ](https://sanctumfederal.com/how-to-sell-to-the-federal-government/)   ## **What Is CUI Basic** And CUI Specified? > Law, regulation, or Government-wide policy may require or permit safeguarding or dissemination controls in three ways: Requiring or permitting agencies to control or protect the information but providing no specific controls, which makes the information CUI Basic; requiring or permitting agencies to control or protect the information and providing specific controls for doing so, which makes the information CUI Specified; or requiring or permitting agencies to control the information and specifying only some of those controls, which makes the information CUI Specified, but with CUI Basic controls where the authority does not specify. > > [CUI Registry ](https://www.archives.gov/cui/registry/cui-glossary.html#:~:text=CUI%20Basic%20is%20the%20subset,part%20and%20the%20CUI%20Registry.) Simply put, information designated as CUI Basic does not have to be labeled in any specific way, while CUI Specified information includes a clear process for signifying it as CUI. CUI Specified data may be required to use unique markings, increased physical safeguards and even limits on who can access the data. Each CUI Category is designated a Safeguarding and/or Dissemination Authority; this authority determines whether or not information related to their category should be labeled as Basic or Specified. ## **Controlled Unclassified Information Categories & Marking Procedure** As stated previously, CUI Specified markings are determined based on the category's Safeguarding and/or Dissemination Authority. There are [125 CUI categories](https://www.archives.gov/cui/registry/category-list) organized under 20 organizational index groupings: 1. Critical Infrastructure  2. Defense  3. Export control  4. Financial  5. Immigration  6. Intelligence  7. International Agreements  8. Law Enforcement  9. Legal  10. Natural and cultural resources  11. North American Treaty Organization  12. Nuclear  13. Patent  14. Privacy  15. Procurement and acquisition  16. Proprietary Business Information  17. Provisional  18. Statistical  19. Tax  20. Transportation  The CUI Registry outlines for each category: - The correct banner marking - Category description - Category marking - Banner format and marking notes - Links to the category's Safeguarding and/or Dissemination Authority or Authorities if multiple are assigned - Whether each Authority labels the data under their responsibility as Basic or Specified and the related banner marking All documents need to be labeled with their appropriate banner markings to alert those who access them of their CUI nature. CUI markings MUST appear at the top of the page and use the following format: "CUI" or "CONTROLLED" // [CUI Category Marking, If Required] // [Limited Dissemination Controls, If Applicable] [Limited Dissemination Controls ](https://www.archives.gov/cui/registry/limited-dissemination)and Markings Include: - NOFORN: No foreign dissemination - FED ONLY: Federal employees only - FEDCON: Federal employees and contractors only - NOCON: No dissemination to contractors - DL ONLY: Dissemination list controlled - RELIDO: Releasable by information disclosure official - REL TO [USA, LIST]: Authorized for release to certain nationals only - DISPLAY ONLY [USE, LIST]: Display only - Attorney-Client: Attorney-client - Attorney-WP: Attorney work product ## Need Hands-On Help In Understanding The Federal Market? Register for our OnDemand Federal Sales Certification Training Course and gain the tactical skills you need to effectively sell to the Federal Government! [REGISTER NOW](https://learn.kevinfederal.com) - Share : - - - ### Categories - [Territory (13)](https://sanctumfederal.com/federal-sales-articles/tag/territory) - [Execution (7)](https://sanctumfederal.com/federal-sales-articles/tag/execution) - [Planning (7)](https://sanctumfederal.com/federal-sales-articles/tag/planning) - [Money (3)](https://sanctumfederal.com/federal-sales-articles/tag/money) ### Related Posts [![What Is The Risk Management Framework (RMF)?](https://sanctumfederal.com/hs-fs/hubfs/Blog%20Featured%20Images/SF_blog_37.jpg?height=400&name=SF_blog_37.jpg) ](https://sanctumfederal.com/federal-sales-articles/what-is-the-risk-management-framework-rmf) #### [What Is The Risk Management Framework (RMF)?](https://sanctumfederal.com/federal-sales-articles/what-is-the-risk-management-framework-rmf) The Risk Management Framework (RMF) provides a 7-step repeatable process used to identify, mitigate and monitor risk within information systems and organizations. The RMF process is managed by the National Institute of Standards and Technology (NIST) under the Federal Information Security Modernization Act (FISMA) and applies to all US federal information systems. While originally adopted by US federal agencies, RMF can easily be applied to all organizations in both the public and private [Learn More](https://sanctumfederal.com/federal-sales-articles/what-is-the-risk-management-framework-rmf) [![What Is Supply Chain Risk Management?](https://sanctumfederal.com/hs-fs/hubfs/SF_blog_40.jpg?height=400&name=SF_blog_40.jpg) ](https://sanctumfederal.com/federal-sales-articles/supply-chain-risk-management-scrm) #### [What Is Supply Chain Risk Management?](https://sanctumfederal.com/federal-sales-articles/supply-chain-risk-management-scrm) Supply Chain Risk Management (SCRM) is the process of assessing and mitigating the risk of vulnerabilities within the acquisition supply chain from being exploited. Within the Federal Government, specifically, supply chains may be targeted by foreign military/intelligence, corporations, terrorists or criminal organizations seeking any information that could weaken the United States' economic and national security. Information targeted could include, but not limited to: Classified Information [Learn More](https://sanctumfederal.com/federal-sales-articles/supply-chain-risk-management-scrm) [![What Is A DUNS Number & Unique Entity Identifier (UEI)?](https://sanctumfederal.com/hs-fs/hubfs/Blog%20Featured%20Images/SF_blog_34.jpg?height=400&name=SF_blog_34.jpg) ](https://sanctumfederal.com/federal-sales-articles/what-is-a-duns-number-uei) #### [What Is A DUNS Number & Unique Entity Identifier (UEI)?](https://sanctumfederal.com/federal-sales-articles/what-is-a-duns-number-uei) Since 1998, the DUNS number has been the primary entity identifier used for federal contracting purposes. Starting April 4, 2022, the General Services Administration (GSA) will replace the DUNS Number with a nonproprietary system know as the "Unique Entity Identifier" or UEI, for short. Do You Still Need A DUNS Number? The DUNS numbering system is a proprietary system owned by Dun & Bradstreet. It consists of assigning a nine-digit identification code to businesses once its patented process [Learn More](https://sanctumfederal.com/federal-sales-articles/what-is-a-duns-number-uei) [![logo-white](https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/logo-white.svg) ](https://sanctumfederal.com/home) - [**](https://mobile.twitter.com/sanctumfederal) - [**](https://www.linkedin.com/company/sanctumfederal/) - [**](https://www.facebook.com/SanctumFederal) - [![](https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/mail.svg)info@sanctumfederal.com ](mailto:mailto:sales@sanctumfederal.com) - [![](https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/mobile.svg)(703) 688-2437](tel:(703)%20688-2437) ![](https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/location.svg) **Headquarters** [ 530 E. Hunt Way San Tan Valley, Arizona 85143](https://goo.gl/maps/Lvwuhme2uSD5SyKEA) - [![](https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/earth.svg)KevinFederal.com](https://www.kevinfederal.com) All rights reserved. Copyright © Sanctum Federal ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ashley Neu", "url" : "https://sanctumfederal.com/federal-sales-articles/author/ashleyjane-consulting" }, "dateModified" : "2023-07-04T15:29:21.057Z", "datePublished" : "2022-04-21T13:24:11.000Z", "headline" : "What Is Controlled Unclassified Information (CUI)?", "image" : [ "https://sanctumfederal.com/hubfs/Blog%20Featured%20Images/SF_blog_29.jpg" ], "mainEntityOfPage" : { "@id" : "https://sanctumfederal.com/federal-sales-articles/what-is-controlled-unclassified-information-cui", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://sanctumfederal.com/hubfs/Sanctum%20Federal%20-%202022/SF_logo_horizontal_primary.png" }, "name" : "Sanctum Federal" } } ```