Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Controlled Unclassified Information (CUI)

Training Camp • Cybersecurity Glossary

What is Controlled Unclassified Information (CUI)?

Controlled Unclassified Information (CUI) is sensitive but unclassified U.S. government data protected under NIST SP 800-171 and the CUI program.

Glossary > Governance, Risk & Compliance > Controlled Unclassified Information (CUI)

Understanding Controlled Unclassified Information (CUI)

Controlled Unclassified Information (CUI) is U.S. government information that requires safeguarding or dissemination controls under law, regulation, or government-wide policy but is not classified. The CUI program is overseen by NARA, and contractors handling CUI in nonfederal systems must implement the security requirements in NIST SP 800-171. Proper marking, access control, and protection of CUI are central to compliance regimes such as CMMC for the defense industrial base.

Learn More About Controlled Unclassified Information (CUI):

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →