Headquarters Facilities Master Security Plan - Chapter 13, Controlled Unclassified Information

All unclassified information that requires any safeguarding or dissemination control is CUI. Law, regulation, or Government-wide policy must require or permit such controls. Agencies therefore may not implement safeguarding or dissemination controls for any unclassified information other than those controls consistent with the CUI Program.  Prior to the CUI Program, agencies often employed ad hoc, agency-specific policies, procedures, and markings to handle this information. This patchwork approach caused agencies to mark and handle information inconsistently, implement unclear or unnecessarily restrictive disseminating policies, and create obstacles to sharing information. CUI replaces legacy markings such as OUO, SBU, and other superseded markings.   The CUI program overrides agency-specific or ad hoc requirements when they conflict, but does not alter, limit, or supersede a requirement stated in laws, regulations, or Government-wide policies or impede the statutory authority of agency heads.  This chapter is maintained by the Office of Classification (EHSS-60) in partnership with the CUI Program Office (IM-41).