← Glossary · Compliance
CUI
Controlled Unclassified Information — unclassified but protected government data.
CUI is information the US government creates or possesses, or that a non-federal organization possesses on behalf of the government, that requires safeguarding under law, regulation, or government-wide policy.
Handling CUI triggers DFARS 252.204-7012 and NIST 800-171 obligations. Most CMMC Level 2 contracts exist because CUI is in play.
Related terms
See how Scarlet Risk covers CUI.
One platform for compliance, cyber, crypto, and world-watch risk.
Schedule Live Demo