SP330023R5001 Attachment J.11 - CUI Marking Guidance.pptx

What is Controlled Unclassified Information (CUI)?

Unclassified information the Government creates/possesses that a law, regulation, or Government-wide policy requires/permits any agency to handle using safeguarding or dissemination controls (i.e., DoD work products and emails) Unclassified information an entity creates/possesses for/on behalf of the Government that is protected by law, regulation, or Government-wide policy (i.e., information associated with DoD contracts) A safeguarding system for UNCLASSIFIED information Examples (includes, but not limited to):

PII/Privacy Act Information Critical information (OPSEC) Source Selection Information Intelligence Information Controlled Technical Information Export Controlled Information Emergency Management Information Law Enforcement Information Legal Privilege Pre-decision Budget/Policy Information Defense Critical Infrastructure Information/DoD Critical Infrastructure Security Information

Source: DoD CUI Awareness Training As of November 2020, DI CUI Briefing from J7 Town Hall on April 21, 2021

Warfighter Always

CUI

CUI

FOUO vs. CUI “FOUO” was authorized to protect UNCLASSIFIED information that “may be exempt from mandatory disclosure under the Freedom of Information Act(FOIA).” Markings were designated/controlled by the nine (9) FOIA exemptions.

CUI Program:

Developed a common marking system across Federal agencies Created categories to capture the many types of UNCLASSIFIED information requiring safeguarding Categorized according to the specific law, regulation, or government-wide policy requiring control All legacy-marked FOUO does not necessarily qualify as CUI (i.e., not automatically a one-to-one swap) Information previously marked FOUO does not need to be re-marked; however, if that same information is put in a new document or is shared outside the department, reassessment is needed to see if it meets CUI criteria and requires re-marking

Source: DoD CUI Awareness Training As of November 2020, DI CUI Briefing from J7 Town Hall on April 21, 2021

FOUO markings no longer authorized!

FOUO

CUI

CUI

CUI

Minimum Marking Requirements Include acronym “CUI” in the header (above everything) and footer (below everything) of each page of the document (Do not add “Unclassified” before the “CUI” marking)

Include a CUI Designation Indicator Block on the first page, containing (at minimum):

Line (1): Controlled by:

(Name of the DoD Component determining that the information is CUI (i.e., DLA Distribution) (If letterhead/another standard indicator of origination is used, this line may be omitted).

Line (2): Controlled by:

(The office making the determination/creating the document (MSC level, J code level, or even a subordinate level, use best judgement for clarity given who the audience will be, etc. ) (i.e., DLA Distribution J7, DLA Distribution J7AB, or DLA Distribution J7AF)

Line (3): CUI Category: Identify all types of CUI contained in the document A complete list of DoD CUI Indexes/Categories can be found at https://www.dodcui.mil/Home/DoD-CUI-Registry/) Use only the DoD-approved category abbreviations/acronyms!

Line (4): Distribution/Dissemination Controls:

(The distribution statement or the limited dissemination control (LDC) applicable to the document) (LDCs identify the audience deemed to have an authorized lawful government purpose to use the CUI) (See the DLA DI CUI-Help Guidance Spreadsheet or a complete list of LDC markings can be found at https://www.dodcui.mil/).

Line (5): POC: Name and phone number or office mailbox for the originating DoD Component or authorized CUI holder (i.e., who should be called about the document, document originator or central POC)

Source: DoD CUI Awareness Training As November 2020, DI CUI Briefing from J7 Town Hall on April 21, 2021, DLA Intelligence New Cumberland, DLAI 5200.48

Authorized document holder responsible for determining, at time of creation, whether information falls into a CUI category, and if so, for applying CUI markings accordingly!

Excel Spreadsheet Markings Include “CUI” in the header/footer to ensure it displays on all pages File Print Page Setup Header/Footer Tab Customer Header/Footer

Include the CUI Designation Indicator Block at the top of the excel spreadsheet, not in the header, so it only appears on the first page

Source: DoD CUI Awareness Training As of November 2020

CUI

CUI

Emails Containing CUI Source: DI CUI Briefing from J7 Town Hall on April 21, 2021; DLA Intelligence New Cumberland ; Email from DLA HQ J72 dated 8/9/2021

Emails must be encrypted if possible!

Include the acronym “CUI” at the top and bottom of the message content (not in Subject Line of email).

Include a CUI designation indicator block containing (at minimum) the Line (1) – (5) information noted above on Slide 3.

Emails containing both Source Selection Sensitive and CUI must contain both the “Source Selection Information – See FAR 2.101 & 3.104” legend (in email subject line) and CUI header/footer banners & CUI designation indicator block (as instructed above)

CUI

CUI

image1.jpg image2.png image3.png image4.png image5.png