Agency - Any "Executive agency," as defined in 5 U.S.C. 105, and the United States Postal Service; any "Military Department" as defined in 5 U.S.C. 102; and any other entity within the Executive branch that uses, handles, or stores CUI.
Authorized Holder - An individual or organizational entity who has a Lawful Government Purpose for originating, receiving, using, handling, or storing CUI.
Category/Subcategory Markings - Markings approved by the CUI EA that are associated with the categories and subcategories listed in the CUI Registry.
Classified Information - Information that has been determined pursuant to Executive Order 13526, or any predecessor or successor Order, or the Atomic Energy Act of 1954, as amended, and its implementing directives to require protection against unauthorized disclosure.
Control Level - A term that encompasses the category/subcategory and dissemination status of specific CUI, as determined by the original designator.
Controlled Environment - Any area or space for which the agency has confidence that the physical and procedural protections provide adequate barriers and managed access controls to meet the requirements established for protecting CUI and/or information systems containing CUI against unauthorized access or disclosure.
Controlled Unclassified Information (CUI) - Information that requires safeguarding and/or dissemination controls pursuant to and consistent with law, regulations, and Government-wide policies, excluding information that is classified under Executive Order 13526 of December 29, 2009, or the Atomic Energy Act, as amended.
CUI Control Marking - Either the word "Controlled" or the acronym "CUI."
CUI Directive - 32 CFR 2002.
CUI Program - The rules, organization, and procedures for CUI, as delineated in Executive Order 13556, 32 CFR 2002, the CUI Registry, and additional issuances by the Executive Agent.
CUI Program Manager - An official, designated by the agency head or Senior Agency Official for CUI, to serve as an agency's official representative for consultation with the CUI Executive Agent on all matters related to the day-to-day operations of an agency's CUI program, in both direct and interagency contexts.
Decontrol - The decision and consequent actions that CUI no longer requires the safeguarding and or dissemination controls that had been previously applied.
Dissemination - Transferring CUI from one authorized holder to another authorized holder through any means.
Executive Agent (EA or CUI Executive Agent or CUI EA)- Pursuant to Section 2 (c) of Executive Order 13556 "Controlled Unclassified Information" (the Order), "The National Archives and Records Administration shall serve as the Executive Agent to implement ... and oversee agency actions to ensure compliance with this (O)rder."
"Interest of the US Government" - The goals and objectives of the United States Government, including, but not limited to, national security or other security considerations, foreign policy interests, proprietary business or other financial interests, law enforcement matters, or personal privacy.
Lawful Government Purpose - Standard applied when determining whether individuals, organizations, or groupings of users may receive or access CUI that is not subject to Limited Dissemination. Lawful Government Purpose means any activity, function, operation, or other circumstance authorized by the United States Government.
Legacy Material - Unclassified information that was created and/or marked prior to the implementation of the CUI Program.
Limited Dissemination - Type of dissemination for CUI that includes any dissemination control applied and authorized by the CUI Executive Agent.
Limited Dissemination Control Markings - Markings approved by the CUI Executive Agent that instruct authorized handlers of the information on any restriction for access to and dissemination of the information by or to certain individuals, organizations, or other identifiable group(s).
Misuse of CUI - Any situation where CUI is used in a manner inconsistent with the guidance contained in Executive Order 13556, "Controlled Unclassified Information," November 4, 2010, the CUI Registry, additional issuances from the CUI Executive Agent, or any of the laws, regulations, and Government-wide policies that establish the designation of CUI categories and subcategories.
Non-Federal Recipient Entity - A State, local, or territorial government entities, federally recognized Indian tribe, institution of higher education, or nonprofit organization that is a recipient or sub-recipient of CUI.
Originating Agency - The Executive branch agency responsible for the creation of a specific item of CUI.
Portion - Ordinarily a paragraph, but including subjects, titles, graphics, tables, charts, bullet statements, sub-paragraphs, bullets and other portions within slide presentations, etc.
Protection - The application of dissemination and safeguarding controls when originating or handling information that meets the standards for designation as CUI in a manner that minimizes the risk of unauthorized disclosure and permits timely access by the intended recipient.
Public Release - The act of making information formerly designated as CUI available to the general public through the official processes of an agency. Authorized dissemination of CUI to State, local, tribal, or private sector entities or other information sharing partners does not constitute Public Release of the information. A release of information requested or made pursuant to the Privacy Act does not constitute Public Release of the information.
Pulverization - A physically destructive method of sanitizing media; the act of grinding to a powder or dust.
Registry (CUI Registry) - The CUI Registry is the authoritative source for guidance regarding CUI policies and practices. The Registry identifies the categories and subcategories of unclassified information that require safeguarding and dissemination controls consistent with law, regulation, and Government-wide policies. The Registry provides definitions for each category and subcategory; identifies the basis for safeguarding and dissemination controls; contains associated markings, and applicable safeguarding, dissemination, and decontrol procedures; and specifies that may be originated only by certain Executive branch agencies and organizations. The Executive Agent is the approval authority for all categories and subcategories of information identified as CUI in the Registry and only those categories or subcategories listed are considered CUI.
Self-inspection - The internal review and evaluation of individual agency activities and the agency as a whole with respect to the implementation of the program established under the Order.
Senior Agency Official for CUI - A senior official designated in writing by an agency head and responsible to that agency head for implementation of the CUI Program within the agency. The Senior Agency Official for CUI will also be the primary point of contact for official correspondence, accountability reporting and other matters of record between the agency and the CUI Executive Agent.
Unauthorized Disclosure - Providing or making CUI available to individuals or entities, whether intentional or otherwise, which are not authorized to view or possess the information, pursuant to law, regulation, Government-wide policy, or directives issued by the CUI Executive Agent.
Unclassified Information - Information that has no basis for protection under the CUI Program and does not meet the standards for classification under Executive Order 13526.