Transcription
CONTROLLEDUNCLASSIFIEDINFORMATION
An Introduction to Marking CUI Why We MarkDesignation IndicatorMandatory CUI Banner MarkingCUI Specified vs. CUI BasicCUI Category/ Subcategory MarkingsLimited Dissemination MarkingsPortion MarkingMarking Multiple PagesSupplemental Administrative Indicators2
Why We Mark The loss or improper safeguarding of CUI could beexpected to have a serious adverse effect onorganizational operations, organizational assets, orindividuals.― significant degradation in mission capability toan extent and duration that the organization isable to perform its primary functions, theeffectiveness of the functions is significantlyreduced;― significant damage to organizational assets;― significant financial loss; or― significant harm to individuals that does notinvolve loss of life or serious life threateninginjuriesThe loss or improper safeguarding of CUI has a directimpact on national security3
Designation Indicator All documents containing CUIMUST indicate the agency ofdesignation.- This may come in several forms,including a letterhead, signatureblock, or “controlled by line” A best practice is also to includethe contact information of thedesignating agency, and identify apoint of contact or division withinthe organization4
Mandatory CUI Banner Marking It is mandatory to include abanner marking at the top ofthe page denoting ControlledUnclassified Information Optional best practice is toinclude on bottom as well5
CUI Category/ Subcategory marking CUI Category or Subcategory marking areseparated by a double forward slash (//) fromthe CUI Control Marking.- If there are multiple CUI Category orSubcategory markings in the banner they mustbe separated by a single forward slash (/) Note that in the example provided:- The mandatory CONTROLLED marking is present- The category, critical infrastructure (CRIT), falls after twoforward slashes (//)- The sub-category of critical infrastructure, water (WATER),falls after a single slash6
CUI Basic vs. CUI Specified CUI Basic LRGWP identifies an information type and says protect it.Examples include: Agriculture, Ammonium Nitrate, Water Assessments,Emergency Management, Bank Secrecy, Budget, Comptroller General,Geodetic Product Information, Asylee, Visas, Information SystemsVulnerabilities, Terrorist Screening, Informant, Privilege, Victim, Death Records CUI Specified LRGWP identifies an information type and says to protect it, andalso includes one or more specific handling standards for that information.Examples include: Sensitive Security Information, Student Records,Personnel, Source Selection, Nuclear, Safeguards Information, NATORestricted, NATO Unclassified, Federal Grand Jury, Witness Protection, DNA,Criminal History Records, Financial Records, Export Control, Protected CriticalInfrastructure Information, Controlled Technical InformationCONTROLLEDU NCLASS I FI EDI NFORMATION7
Marking CUI Specified Since CUI Specified can call for differentcontrols and protection than CUI Basic, itis mandatory to label it in a banner (SP-) All categories or subcategories relating tospecified information MUST have SPprecede the category or subcategorymarking8
Limited Dissemination Controls cont. Limited Dissemination Controlsare not mandatory Limited Dissemination ControlsMarkings are separated fromother elements of the banner bytwo forward slashes (//) When a document containsmultiple Limited DisseminationControl Markings, those LimitedDissemination Control Markingsseparated by a single slash (/)9
Portion Markings Though not required, portion markingis a highly encouraged practice byISOO. CUI Portion Markings are placed atthe beginning of the portion to whichthey apply and must be usedthroughout the entire document. When marking CUI, if a portion of thedocument does not contain CUI it canbe denoted as Uncontrolled (U).10
Portion Markings cont. Portion marking can be used toindicate categories or subcategoriesas well as limited disseminationcontrols. Notice that Controlled UnclassifiedInformation and Uncontrolled UnclassifiedInformation are distinguished Notice that NF (No Foreign) is distinguishedin the portion markings11
Marking Multiple Pages The make up of the CUI Banner for a multi-page document is essentially the sum of all ofthe CUI markings in the document; include all specified category or subcategorymarkings and any limited dissemination control markings used throughout the documentin the banner.12
Supplemental Administrative Marking Supplemental AgencyMarkings can be usedto denote non-finalstatus of a document. Cannot be used tocontrol CUI andcannot becommingled into theCUI Banner Marking.13
Information Security Oversight OfficeAttn: CUI ProgramNational Archives and Records Administration700 Pennsylvania Avenue, N.W., Room 100Washington, DC 20408-0001(202) 357-6870 (voice)(202) 357-6871/6872 (fax)
Sep 06, 2017 · The first step to marking CUI is to include the designation indicator. Consider this is a sort of return address. At a minimum\ബ it should include the agency from which the CUI document originated. A best practice, however, would be to also include the n對ame and contact information of the
