Controlled Unclassified Information
Controlled Unclassified Information (CUI) is information that requires safeguarding but is not classified. Defense contractors handling CUI must implement NIST SP 800-171 security controls and comply with DFARS 252.204-7012 requirements.
Click any question to start a conversation with the AI expert.
What are the different CUI categories and how do I mark them?
What are the 110 NIST SP 800-171 security controls?
How do I report a cyber incident involving CUI?
What should be included in a System Security Plan?
What are the CUI flow-down requirements for subcontractors?
What cloud services are approved for CUI storage?
Get instant, expert answers from our AI-powered compliance assistant.