flow of CUI

The movement of Controlled Unclassified Information (CUI) across boundaries — within a system, between interconnected systems, and into or out of an organization — as a subject of policy-governed enforcement. It is distinguished from access control in that it regulates *where* CUI can transit within a system and between systems, rather than *who* is allowed to access the information, and without regard to subsequent accesses to that information. Organizations use information flow control policies and enforcement mechanisms to control the flow of information between designated sources and destinations — such as networks, individuals, and devices — within systems and between interconnected systems. In practice, identifying and controlling how CUI flows throughout an organization determines the manner in which all other protective controls will be implemented, with enforcement applied via boundary devices, encryption requirements, proxy routing, and data-transfer restrictions.

Advisory only. A term this product ships is defined by an authority document, not by a search result.