home/glossary/CUI transfer

CUI transfer

nounid 163536·updated Aug 30, 2026
verified

This is a compositional phrase, not a term of art with a field-specific meaning distinct from its parts. In the CUI regulatory framework — governed by Executive Order 13556, 32 CFR Part 2002, and implemented through NIST SP 800-171 and CMMC — "disseminating" CUI is defined as when authorized holders transmit, transfer, or provide access to CUI to other authorized holders through any means; "transfer" is one item in that list, not a separately defined concept. The CUI program addresses transferring records — for example, requiring authorized holders to decontrol CUI when possible when transferring records to NARA, and to indicate continued control on the appropriate transfer forms when the CUI requires ongoing control. The phrase "CUI transfer" in the sentence you quoted ("transfers between organizations based on data structures and content") is simply applying the ordinary meaning of *transfer* to CUI-bearing data flows, using the surrounding context to specify the scope.

MWE

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0179
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
transfers between organizations based on data structures and content.the sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

This is a compositional phrase, not a term of art with a field-specific meaning distinct from its parts. In the CUI regulatory framework — governed by Executive Order 13556, 32 CFR Part 2002, and implemented through NIST SP 800-171 and CMMC — "disseminating" CUI is defined as when authorized holders transmit, transfer, or provide access to CUI to other authorized holders through any means; "transfer" is one item in that list, not a separately defined concept. The CUI program addresses transferring records — for example, requiring authorized holders to decontrol CUI when possible when transferring records to NARA, and to indicate continued control on the appropriate transfer forms when the CUI requires ongoing control. The phrase "CUI transfer" in the sentence you quoted ("transfers between organizations based on data structures and content") is simply applying the ordinary meaning of *transfer* to CUI-bearing data flows, using the surrounding context to specify the scope.

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems2 citations · 2 confirmed by a reviewer · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.01.03 ¶ 203.01.03 ¶ 3

Classifications

Entity Type

Data85%llm-generatedllm:claude-haiku-4-5

Sensitivity

Regulated95%rule-basedr:sens.regulated.framework.v1

Information Class

Cui95%rule-basedr:info.cui.named.v1

Variants

plural
CUI transfers
possessive
CUI transfer's
pluralpossessive
CUI transfers'

Framework definitions

NIST SP 800-171r31 senseview framework →
§1 · attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · web_lookup_draft
This is a compositional phrase, not a term of art with a field-specific meaning distinct from its parts. In the CUI regulatory framework — governed by Executive Order 13556, 32 CFR Part 2002, and implemented through NIST SP 800-171 and CMMC — "disseminating" CUI is defined as when authorized holders transmit, transfer, or provide access to CUI to other authorized holders through any means; "transfer" is one item in that list, not a separately defined concept. The CUI program addresses transferring records — for example, requiring authorized holders to decontrol CUI when possible when transferring records to NARA, and to indicate continued control on the appropriate transfer forms when the CUI requires ongoing control. The phrase "CUI transfer" in the sentence you quoted ("transfers between organizations based on data structures and content") is simply applying the ordinary meaning of *transfer* to CUI-bearing data flows, using the surrounding context to specify the scope.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.