CUI (Controlled Unclassified Information)

Controlled Unclassified Information is unclassified but sensitive information that requires safeguarding under government-wide policies (Executive Order 13556). CUI categories include privacy, proprietary business information, critical infrastructure, and law enforcement information. CUI handling is governed by NIST 800-171 in nonfederal systems and CMMC in DoD supply chain contracts.