DARPA-PS-26-126_RAAPTR_Attachment_J_CUI_Guide.pdf

Distribution Statement A: Approved For Public Release

Controlled Unclassified Information Guide

Program: Radio Frequency Architectures Applying Photonic Timing and Routing (RAAPTR)

Program Manager: Dr. Justin Cohen Program Security Officer: Mr. James K. Persons

Date: June 23, 2026 Version: 1.0

Dr. Justin Cohen Mr. James K. Persons MXO Program Manager MXO Program Security Officer ii

FOREWORD

1. DESCRIPTION

2. AUTHORITY

3. DISTRIBUTION

GENERAL

1. PURPOSE

2. APPLICABILITY AND SCOPE

3. OFFICE OF PRIMARY RESPONSIBILITY

4. CONTROLLED UNCLASSIFIED INFORMATION (CUI) CHALLENGES

5. CUI CATEGORIES

6. EXPORT CONTROL RESTRICTED INFORMATION

7. DISCLOSURE OF CUI

8. CUI PROTECTION REQUIREMENTS

9. NOTIFICATION OF UNAUTHORIZED DISCLOSURE

10. INFORMATION PROTECTION GUIDANCE CHARTS

iii

FOREWORD

1. DESCRIPTION

(U) The Radio Frequency Architectures Applying Photonic Timing and Routing (RAAPTR) program will deliver next-generation, high-precision timing for radar and other Radio Frequency (RF) systems. RAAPTR integrates advanced optical and electronic technologies with specialized packaging designed to eliminate vibration sensitivity. This creates a state-of-the-art timing backbone that enables air assets to achieve the same precision traditionally reserved for stationary, ground-based systems.

2. AUTHORITY

CUI elements referenced in this guide are under the authority of Executive Order 13556, Controlled Unclassified Information, November 4, 2010 (as amended) and in accordance with DoDI 5200.48, “Controlled Unclassified Information,” March 6, 2020.

3. Distribution:

Distribution Statement A: Approved For Public Release.

1. PURPOSE

a. The purpose of this CUI guide is to ensure the protection of RAAPTR information IAW DoDI 5200.48. RAAPTR information must be controlled and stored consistent with DFARS 252.204-7012 requirements as detailed in National Institute for Standards and Technology (NIST) 800-171.

b. This guide is not for classified national security information as defined in

Executive Order 13526 but identifies specific elements of sensitive information that are unclassified but require additional protections.

2. APPLICABILITY AND SCOPE: This guide applies information, material and processes generated by RAAPTR. This guide is the basis for identifying, protecting and marking of information and material designated as a type of controlled unclassified information (CUI) associated with RAAPTR. This guide is used in conjunction with related guidance (security classification guides, DoD Policy, etc) associated with the overall effort of RAAPTR. The scope of this guide is based on RAAPTR as planned at the date of this guide and may change over the course of RAAPTR.

3. OFFICE OF PRIMARY RESPONSIBILITY (OPR): The Office of Primary Responsibility is MXOsecurity@darpa.mil.

4. CONTROLLED UNCLASSIFIED INFORMATION (CUI) CHALLENGES: CUI Challenges are directed to the OPR. Information is protected in accordance with this guide until the challenge is resolved.

5. CUI Categories. The following CUI Categories are used to protect RAAPTR:

a. Export Control: Export Controlled: Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations (ITAR) and the munitions list; license applications; and sensitive nuclear technology information.

b. Export Control: Export Controlled Research: Related to the systematic investigation into and study of materials and sources in order to establish facts and reach new conclusions.

c. Proprietary Business Information: Material and information relating to, or associated with, a company's products, business, or activities, including but not limited to mailto:MXOsecurity@darpa.mil financial information; data or statements; trade secrets; product research and development;

existing and future product designs and performance specifications.

d. Defense: Controlled Technical Information: Means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information is to be marked with one of the distribution statements B through F, in accordance with Department of Defense Instruction 5230.24, "Distribution Statements of Technical Documents." The term does not include information that is lawfully publicly available without restrictions. "Technical Information" means technical data or computer software, as those terms are defined in Defense Federal Acquisition Regulation Supplement clause 252.227-7013, "Rights in Technical Data - Noncommercial Items" (48 CFR 252.227-7013). Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

e. Intelligence: Operations Security (OPSEC): Critical information determined to give evidence of the planning and execution of sensitive (frequently classified) government activities after going through a formal systematic vetting process in accordance with National Security Presidential Memorandum Number 28. This process identifies unclassified information that must be protected. It almost always results from an agency’s official OPSEC program or is otherwise commonly approved for use by the CUI Senior Agency Official.

6. EXPORT CONTROL RESTRICTED INFORMATION: Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations.

This CUI guide does not relieve any program participant from export control requirements.

7. DISCLOSURE of CUI.

a. Public Disclosure. Public Disclosure of any RAAPTR information must follow the DISTAR process. Please contact the RAAPTR OPR and Public_Release_Center@darpa.mil for additional guidance.

b. Freedom of Information Act (FOIA) Requests. All FOIA request are directed to the DARPA FOIA Office.

c. Foreign Disclosure. CUI controlled by DARPA may be shared with foreign nationals if access to such information would accomplish a lawful government purpose and would not be detrimental to national security.

mailto:Public_Release_Center@darpa.mil

8. CUI PROTECTION REQUIREMENTS: RAAPTR CUI must be stored in accordance with DODI 5200.48. Processing of CUI is only authorized on systems compliant with DFARS 252.204-7012 as detailed in NIST 800-171.

9. UNAUTHORIZED DISCLOSURE

a. Personnel must immediately report all unauthorized disclosures or suspected and known security incidents, and suspicious activities involving CUI to the RAAPTR PSO and PSR at MXOsecurity@darpa.mil.

b. Data breaches of Defense Industrial Base (DIB) networks and systems involving

RAAPTR CUI material must be reported IAW DFARS 252.204-7012 requirements. In addition, all breaches must be reported to the DARPA Project contracting officer and program security officer (PSO) upon discovery.

mailto:MXOsecurity@darpa.mil

10. INFORMATION PROTECTION GUIDANCE CHARTS

These charts are provided to assist in identifying what types of information associated with the RAAPTR effort may be sensitive, provide guidance on the relevant markings for this information to control dissemination, and provide guidance on when these dissemination controls no longer apply. Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations. This CUI Guide does not relieve any program participant from export control requirements. If at any time there are questions regarding which category of information something falls under, or what dissemination controls apply, individuals should request guidance from scott.rolston.ctr@darpa.mil.

Element of Information

Index Category Reason LDC or Distribution Statement

Remarks

Data contractually identified as controlled by a business or individual as proprietary.

Proprietary Business Information

General Proprietary Business Information

(PROPIN)

18 U.S. Code § 1905

18 U.S. Code § 664

Federal Employees and Contractors Only (FEDCON)

FOIA Exemption 3 may be applicable

Information or data defined within the Commerce Control List (CCL), United States Munitions List (USML), or applied license applications to control export.

Export Control

Export Controlled

10 USC 130(a), 13 USC 301(g), 42 USC 2077(a), 42 USC 2156, 42 USC 2168(a), 50 USC 4614(c), 50 USC 4605(l)(5), 15 CFR 718.3, 15 CFR 736 Supplement 2, 15 CFR 748.1(c), 15 CFR 760.5(c)

15 CFR 772.1, 15 CFR 774

Supplement 1, 15 CFR 774 Supplement 2, 22 CFR Part 120, 22 CFR 124.9(a)(5), 22 CFR 126.10(b), 32 CFR 250.4(a), 32 CFR 250.9

Distribution Statement C.

Distribution authorized to U.S.

Government agencies and their contractors, Export Controlled, June 17, 2026. Other requests for this document must be referred to DARPA MXO Office.

FOIA Exemptions 3 & 4 may be applicable

RAAPTR RF system architectures and key performance

Defense Controlled Technical

10 U.S.C. 130, 15 CFR

772.1, 15 CFR 774

Distribution statements B through F

FOIA Exemptions 3 & 4 may be applicable mailto:scott.rolston.ctr@darpa.mil parameters applicable in next-generation military systems is protected as CUI and may be CTI.

Information

(CTI)

Supplement 1, 15 CFR 774 Supplement 2, 22 CFR 120

22 CFR 121, 48 CFR

252.204-7012

Design elements and packaging methods that enable photonic oscillators and analog- RF components to meet RAAPTR environmental metrics

Export Control

Export Controlled Research

15 CFR 734.8(b), 22 CFR 120

Distribution Statement C.

Distribution authorized to U.S.

Government agencies and their contractors, Export Controlled, June 17, 2026. Other requests for this document must be referred to DARPA MXO Office.

FOIA Exemption 4 may be applicable

Program documents and briefs that contain specific performance metrics, technical specifications, or significant breakthroughs, when aggregated, could compromise operational security of RAAPTR efforts. This includes pre-decisional information pertaining to upcoming or planned program goals or tests.

Intelligence OPSEC DARPA OPERATIONS

SECURITY (OPSEC)

PLAN

DoDD 5205.02E

DoDM 5205.02

Federal Employees and Contractors Only (FEDCON)

FOIA Exemption 2 may be applicable https://www.govinfo.gov/content/pkg/CFR-2018-title15-vol2/pdf/CFR-2018-title15-vol2-sec734-8.pdf https://www.govinfo.gov/content/pkg/CFR-2011-title22-vol1/pdf/CFR-2011-title22-vol1-chapI-subchapM.pdf

Internal devices and device designs of RAAPTR hardware that do not reveal the full photonic oscillator or analog-RF component design

N/A N/A DoDI 3210.1

(USD(AT&L))

Memorandum, "Fundamental Research," May 24, 2010.

UNCLASSIFIED Development of internal devices, and flow-down requirements on internal devices, are approved for sharing within performer teams at the Fundamental Research level, provided they do not disclose the complete photonic oscillator or analog-RF designs