home/glossary/Controlled Unclassified Information

Controlled Unclassified Information

nounid 2017·updated May 9, 2026
verified

Information that a law, regulation, or government-wide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]

MWE

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems68 citations · 68 defined by this document · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.01.02 ¶ 103.01.02 ¶ 203.01.03 ¶ 103.01.03 ¶ 203.01.03 ¶ 303.01.03 ¶ 403.01.09 ¶ 103.01.09 ¶ 203.01.10.c ¶ 103.01.12.d ¶ 103.01.18.c03.01.18.c ¶ 103.01.20.c03.01.22.a03.01.22.b03.01.22.b ¶ 103.02.01.b ¶ 103.02.02.a.103.04.11.a03.04.11.b03.04.11.b ¶ 103.07.04.c03.08.01 ¶ 103.08.01 ¶ 2+44 more

Classifications

Entity Type

Data100%manual reviewaxis_review_queue.v1

Sensitivity

Regulated95%rule-basedr:sens.regulated.framework.v1

Information Class

Cui95%rule-basedr:info.cui.named.v1

Variants

acronym
CUI
possessive
Controlled Unclassified Information's

Framework definitions

NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
A categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).
NIST SP 800-531 senseview framework →
§1
A categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).
NIST SP 800-53A1 senseview framework →
§1
A categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).
NIST SP 800-172r31 senseview framework →
§1 · glossary
Information that a law, regulation, or government-wide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]
Attribution from the CKI glossary mapping stage (acronym list + glossary)
NIST SP 800-171r31 senseview framework →
§1 · glossary
Information that law, regulation, or governmentwide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]
Attribution from the CKI glossary mapping stage (glossary)
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
A categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.