home/glossary/Controlled Unclassified Information

Controlled Unclassified Information

nounverified·updated May 9, 2026

Information that a law, regulation, or government-wide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]

MWENIST SP 800-172r3

Senses

NISTIR 7298: Glossary of Key Information Security Terms, Revision 2

A categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).

NIST SP 800-171r3glossary

Information that law, regulation, or governmentwide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]

Classifications

Entity Type

Data100%manual reviewaxis_review_queue.v1
?unassignedlast reviewed

Sensitivity

Regulated95%rule-basedr:sens.regulated.framework.v1
?unassignedlast reviewed

Information Class

Cui95%rule-basedr:info.cui.named.v1
?unassignedlast reviewed

Variants

acronym
CUI
possessive
Controlled Unclassified Information's