What is Controlled Unclassified Information (CUI)?
Learn about CUI, how to identify it, and the importance of protecting it under CMMC.
Published: September 15th, 2023By: Data Security AnalystLast updated: June 23rd, 2025
CUIData ProtectionCMMC Basics
What is Controlled Unclassified Information (CUI)?
Controlled Unclassified Information (CUI) is information the U.S. Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. The National Archives CUI Program is the authoritative source.
Key Characteristics:
- Not classified, but still sensitive.
- Requires protection from unauthorized disclosure.
- Marking is crucial for identification.
Examples include technical drawings, proprietary research data related to government contracts, and some types of personal information. CMMC focuses heavily on the protection of CUI.