Controlled Unclassified Information BriefingJune 8, 2021

DUSN SECURITY & INTELLIGENCE

2

Policy Overview

What is CUI?

CUI Index

Categories of CUI

Required Markings

Dissemination Vs. Distribution

What do I need to know?

CUI: Agenda

3

What are the authoritative documents governing CUI? Executive Order 13556, “Controlled Unclassified Information,” November 4,

2010DoDM 5200.01, Volume 4 – The original guidance on implementation of CUI

using “For Official Use Only” and “FOUO” for markings, now called “legacy” Feb 24, 2012. (CANCELED)– Note: Legacy FOUO documents do not require remarking.

32 Code of Federal Regulations, part 2002, September 14, 2016DoDI 5200.48, “Controlled Unclassified Information (CUI)” March 6, 2020 (one

year)

DON CUI Policy status: Currently incorporating CUI into the SECNAV 5510.36 “Information Security Program.”DON Phase 1 implementation status: The DON’s phased approach to CUI implementation focuses on training, awareness, applying the CUI Marking to the banner and footer, and applying the designation indicator block to the cover page of all unclassified documents containing CUI.

CUI: Policy Overview

4

Controlled Unclassified Information is Unclassified Information that is subject to control under a Law, Regulation or Government-wide policy and identified in the CUI Registry.

What is the CUI Registry? The CUI Registry provides an official list of the categories used to identify the

various types of CUI categories and their associated markings. The DoD CUI Registry is available at https://www.dodcui.mil The ISOO CUI Registry is available at https://www.archives.gov/cui The CUI Registry provides information on the specific categories and

subcategories of information that the Executive branch protects.

Common CUI for Department of Navy Contract: Privacy (including Health) Export Control Financial

What is CUI?

Defense Controlled Technical

Information OPSEC

5

125 Categories of CUI

5

Provisional (9) Statistical (4) Tax (4) Transportation (2) Critical Infrastructure (11)

Defense (4) Export Control (2) Financial (12) Immigration (7) Intelligence (8)

NATO (2) Natural & CulturalResources (3) Legal (12) Law

Enforcement (18)International

Agreements (1)

Nuclear (5) Patent (3) Privacy (9) ProprietaryBusiness (6)

All 20 Index Groupings includes additional subgroups for a total 125 subgroups* across the US Government

The 125 subgroups are defined as “categories” by the ISOO Registry

Procurement &Acquisition (3)

6

CUI: Marking the Header and Footer

Overall markings: CUI appears in all caps in the header and footer.

Controlled by: DDI/CL&SCUI Category: OPSECLDC: FEDCONPOC: Email or Office Phone

7

CUI designation indicator blockAppears in lower right hand

cornerControlled by: [Name of DoD

Component/Agency] (Only if not on letterhead)

Controlled by: [Name of Office]CUI Category: (List category or

categories of CUI – should not be more than 3)

Limited Dissemination Control (LDC) or Distribution Statement:

POC: [Office Phone or email address]

CUI: Marking the designation indicator block

Controlled by: DDI/CL&SCUI Category: OPSECLDC: FEDCONPOC: Email or Office Phone

8

Portion markings Portion marking is optional,

but if used, all portions must be marked.

CUI: Portion Marking a Document

Controlled by: DDI/CL&SCUI Category: OPSECDISTRO: BPOC: Email or Office Phone

9

CUI: Marking Email

REMEMBER: CUI can ONLY be transmitted using CUI accredited networks (encrypt)

CUI

CUI

10

CUI: Limited Dissemination Controls (LDC)

Currently approved LDCs. It is important to note “FED ONLY” or “FEDCON” allow dissemination to anyone in the Federal Governmentand not just DoD.

If the information is intended to be shared with only DoD Components or other specific entities, it is recommended to use theDissemination List option (DL). The format would be as follows: “LDC: DL (See below)” if distribution is listed in document or “LDC: DL (See next or last page)” if it on a separate page.

11

Distribution statements, in accordance with DoDI 5230.24, are authorized for use with Export Controlled and Controlled Technical Information (Other scientific, technical, and engineering information)

CUI: Distribution Statements (DISTRO)

12

Unclassified DoD Information is not automatically available for public dissemination. All unclassified DoD information is controlled until it is approved for public release. Note: All information must be reviewed prior to public release IAW DoDI 5230.09

Per DoDI 5200.48 “Controlled Unclassified Information (CUI)” requires the use of CUI. FOUO is only authorized on legacy documents.

You must include “CUI” in the header and footerYou must include the CUI Designation Indicator Block to the bottom right

corner of the over page.You must identify the appropriate category of CUI (no more than 3)You must include dissemination or Distribution

CUI: What you need to know

Controlled by: DUSN/I&SCUI Category: OPSECLDC: DL Only POC: Email or Office Phone

Controlled by: DUSN/I&SCUI Category: CTI, EXPTDISTRO: B POC: Email or Office Phone

13

Questions?