Introduction to Controlled Unclassified Information (CUI) Marking
Controlled Unclassified
Information
An Introduction to Marking CUI
C
o
n
t
r
o
l
l
e
d
U
n
c
l
a
s
s
i
f
i
e
d
I
n
f
o
r
m
a
t
i
o
n
–
C
U
I
–
i
s
d
e
f
i
n
e
d
b
y
E
x
e
c
u
t
i
v
e
O
r
d
e
r
1
3
5
5
6
,
C
o
n
t
r
o
l
l
e
d
U
n
c
l
a
s
s
i
f
i
e
d
I
n
f
o
r
m
a
t
i
o
n
a
s
:
sensitive information that requires protection under
laws, regulations and Government-wide policies –
protection that Executive Branch agencies have
been doing for decades, but on an ad hoc and
inconsistent basis. In the slides that follow we will
discuss the types of information protected under the
CUI program.
CUI Defined
An Introduction to Marking CUI
2
National Aeronautics and Space Administration
CUI
Why We Mark
An Introduction to Marking CUI
3
The loss or improper safeguarding of CUI could be
expected to have a serious adverse effect on organizational
operations, organizational assets, or individuals.
significant degradation in mission capability to an extent
and duration that the organization is able to perform its
primary functions, the effectiveness of the functions is
significantly reduced;
significant damage to organizational assets;
significant financial loss; or
significant harm to individuals that does not
involve loss of life or serious life threatening injuries
The loss or improper safeguarding of CUI has a
direct
impact on national security
National Aeronautics and Space Administration
CUI
Category /
Subcategory Marking
An Introduction to Marking CUI
4
•
CUI Category or Subcategory marking
are separated by a double forward slash
(//) from the CUI Control Marking.
•
If there are multiple CUI Category or
Subcategory markings in the banner
they must be separated by a single
forward slash (/)
National Aeronautics and Space Administration
CUI
Basic vs. CUI Specified
An Introduction to Marking CUI
5
C
U
I
B
a
s
i
c
=
L
R
G
W
P
i
d
e
n
t
i
f
i
e
s
a
n
i
n
f
o
r
m
a
t
i
o
n
t
y
p
e
a
n
d
s
a
y
s
p
r
o
t
e
c
t
i
t
.
N
O
T
E
:
N
A
S
A
w
i
l
l
m
o
s
t
l
y
u
s
e
C
U
I
/
B
a
s
i
c
Examples include: Agriculture, Ammonium Nitrate, Water Assessments,
Emergency Management, Bank Secrecy, Budget, Comptroller General,
Geodetic Product Information, Asylee, Visas, Information Systems
Vulnerabilities, Terrorist Screening, Informant, Privilege, Victim, Death Records
C
U
I
S
p
e
c
i
f
i
e
d
=
L
R
G
W
P
i
d
e
n
t
i
f
i
e
s
a
n
i
n
f
o
r
m
a
t
i
o
n
t
y
p
e
a
n
d
s
a
y
s
t
o
p
r
o
t
e
c
t
i
t
,
a
n
d
a
l
s
o
i
n
c
l
u
d
e
s
o
n
e
o
r
m
o
r
e
s
p
e
c
i
f
i
c
h
a
n
d
l
i
n
g
s
t
a
n
d
a
r
d
s
f
o
r
t
h
a
t
i
n
f
o
r
m
a
t
i
o
n
.
Examples include: Sensitive Security Information, Student Records, Personnel,
Source Selection, Nuclear, Safeguards Information, NATO Restricted, NATO
Unclassified, Federal Grand Jury, Witness Protection, DNA, Criminal History
Records, Financial Records, Export Control, Protected Critical Infrastructure
Information, Controlled Technical Information
National Aeronautics and Space Administration
Marking CUI
Specified
An Introduction to Marking CUI
6
•
Since CUI Specified can call for
different controls and protection than
CUI Basic, it is mandatory to label it
in a banner (SP-)
•
All categories or subcategories
relating to specified information
MUST have SP- precede the
category or subcategory marking
National Aeronautics and Space Administration
Limited Dissemination
Controls
An Introduction to Marking CUI
7
•
Limited Dissemination
Controls Markings are
separated from other
elements of the banner
by two forward slashes (//)
•
When a document
contains multiple Limited
Dissemination Control
Markings, those Limited
Dissemination Control
Markings separated by a
single slash (/)
In this
example, the
specified
category is
indicated by
SP-XXX, and
the “No Foreign
dissemination”
control is used.
Limited Dissemination Controls are
NOT
mandatory
National Aeronautics and Space Administration
Supplemental Administrative
Marking
An Introduction to Marking CUI
8
CUI
Banner
Marking
•
Supplemental Agency
Markings can be used
to denote non-final
status of a document.
•
Cannot be used to
control CUI and
cannot be
commingled into the
CUI Banner Marking.
Administrative
Indicator
National Aeronautics and Space Administration
9
Controlled Unclassified Information (CUI) is sensitive information requiring protection under laws and regulations. This introduction covers the definition of CUI, why marking is important, categorization, basic vs specified CUI, and examples of information types requiring protection. Improper safeguarding of CUI can lead to serious adverse effects on organizational operations, assets, and individuals, impacting national security. Marking CUI involves separating category or subcategory markings from the CUI Control Marking. Understanding and correctly marking CUI is crucial for organizational security and national well-being.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
E N D
Presentation Transcript
Controlled Unclassified Information An Introduction to Marking CUI
CUI Defined Controlled Unclassified Information CUI is defined by Executive Order 13556, Controlled Unclassified Information as: sensitive information that requires protection under laws, regulations and Government-wide policies protection that Executive Branch agencies have been doing for decades, but on an ad hoc and inconsistent basis. In the slides that follow we will discuss the types of information protected under the CUI program. National Aeronautics and Space Administration 2 An Introduction to Marking CUI
CUI Why We Mark The loss or improper safeguarding of CUI could be expected to have a serious adverse effect on organizational operations, organizational assets, or individuals. significant degradation in mission capability to an extent and duration that the organization is able to perform its primary functions, the effectiveness of the functions is significantly reduced; significant damage to organizational assets; significant financial loss; or significant harm to individuals that does not involve loss of life or serious life threatening injuries The loss or improper safeguarding of CUI has a direct impact on national security National Aeronautics and Space Administration 3 An Introduction to Marking CUI
CUI Category / Subcategory Marking CUI Category or Subcategory marking are separated by a double forward slash (//) from the CUI Control Marking. If there are multiple CUI Category or Subcategory markings in the banner they must be separated by a single forward slash (/) NOTE: In the example provided: The mandatory CONTROLLED marking is present The category, critical infrastructure (CRIT), falls after two forward slashes (//) The subcategory of critical infrastructure, water (WATER), falls after a single slash National Aeronautics and Space Administration 4 An Introduction to Marking CUI
CUI Basic vs. CUI Specified CUI Basic = LRGWP identifies an information type and says protect it. NOTE: NASA will mostly use CUI/Basic Examples include: Agriculture, Ammonium Nitrate, Water Assessments, Emergency Management, Bank Secrecy, Budget, Comptroller General, Geodetic Product Information, Asylee, Visas, Information Systems Vulnerabilities, Terrorist Screening, Informant, Privilege, Victim, Death Records CUI Specified = LRGWP identifies an information type and says to protect it, and also includes one or more specific handling standards for that information. Examples include: Sensitive Security Information, Student Records, Personnel, Source Selection, Nuclear, Safeguards Information, NATO Restricted, NATO Unclassified, Federal Grand Jury, Witness Protection, DNA, Criminal History Records, Financial Records, Export Control, Protected Critical Infrastructure Information, Controlled Technical Information National Aeronautics and Space Administration 5 An Introduction to Marking CUI
Marking CUI Specified Since CUI Specified can call for different controls and protection than CUI Basic, it is mandatory to label it in a banner (SP-) All categories or subcategories relating to specified information MUST have SP- precede the category or subcategory marking National Aeronautics and Space Administration 6 An Introduction to Marking CUI
Limited Dissemination Controls Limited Dissemination Controls are NOT mandatory Limited Dissemination Controls Markings are separated from other elements of the banner by two forward slashes (//) When a document contains multiple Limited Dissemination Control Markings, those Limited Dissemination Control Markings separated by a single slash (/) In this example, the specified category is indicated by SP-XXX, and the No Foreign dissemination control is used. National Aeronautics and Space Administration 7 An Introduction to Marking CUI
Supplemental Administrative Marking Supplemental Agency Markings can be used to denote non-final status of a document. Cannot be used to control CUI and cannot be commingled into the CUI Banner Marking. CUI Banner Marking Administrative Indicator National Aeronautics and Space Administration 8 An Introduction to Marking CUI
