What is Controlled Unclassified Information?

As defined by Presidential Executive Order 13556 (the Order) and 32 CFR Part 2002, CUI is information that the Federal Government creates or possesses, or that an entity creates or possesses for or on behalf of the Federal Government, that a law, regulation, or Federal Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. CUI does not include information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies that is classified under Executive Order 13526 or the Atomic Energy Act, as amended.

In order to qualify for federal contracts that require safeguarding of CUI, the University must implement a compliant infrastructure. 32 CFR Part 2002 requires use of NIST Special Publication 800-171 when establishing that infrastructure.