Unclassified Documents: Personal Employee Data Files
News Article: Understanding Controlled Unclassified Information (CUI) Banner Markings
Controlled Unclassified Information (CUI) is a category of information that requires safeguarding to protect against unauthorised access, use, disclosure, or compromise. The source documents for CUI authorities, which outline the various CUI categories, their applicable authorities, and banner markings, stem primarily from the CUI Registry maintained by the National Archives and Records Administration (NARA) under Executive Order 13556.
The CUI Registry specifies the categories and subcategories of CUI, including Basic and Specified CUI. Basic CUI includes information authorized for protection by a general statute or regulation, while Specified CUI contains additional safeguarding or dissemination controls tied to specific agency or statutory provisions. Each category includes prescribed banner markings and handling instructions.
The primary banner marking for Basic CUI is simply "CUI," while Specified CUI often carries the marking "CUI//SP-PERS." For instance, the associated banner marking for 5 CFR 293.106, a regulation pertaining to federal agency employees, is CUI//SP-PERS. On the other hand, the banner marking "CUI" is related to basic authorities, such as 45 USC 362(d).
It's important to note that the alternative banner marking for Basic authorities is "CUI//PERS," but it was not mentioned in the context of 45 USC 362(d) or 5 CFR 293.106. The category marking "PERS" is specific to specified authorities, as previously stated.
NIST SP 800-171 provides cybersecurity protection requirements for CUI, including flow control and handling requirements aligned with CUI policies. However, it does not define marking authorities. For compliance, DoD contractors reference these sources along with the CMMC standards and Department of Defense regulations.
If you need the definitive list of CUI authorities and banner markings, consult the official CUI Registry on NARA’s website (https://www.archives.gov/cui) as that is the source document specifying Basic and Specified CUI categories and associated banner markings.
In the context of financial business operations, Controlled Unclassified Information (CUI) markings are essential for safeguarding sensitive data, as they outline applicable authorities and banner markings for each CUI category. For instance, the National Archives and Records Administration (NARA) maintains a database known as the CUI Registry, which specifies various CUI categories, their corresponding banner markings, and handling instructions.
