Controlled unclassified information
Controlled unclassified information (CUI) is unclassified information that requires safeguarding or dissemination controls under applicable laws, regulations, and government-wide policies. These controls help protect information from unauthorized access or disclosure.
FCA has established a CUI program to ensure the agency safeguards and disseminates CUI in accordance with all applicable requirements. FCA has designated a CUI senior agency official and CUI program manager to oversee the program.
| CUI Senior Agency Official | CUI Program Manager |
|---|---|
|
Jerry Versace Chief Information Officer Director, Office of Information Technology |
Wesley Fravel Associate Director, Information Protection Division |
For more information, contact [email protected]..
-
Executive Order 13556 “Controlled Unclassified Information" established an executive branch-wide program for managing CUI. The order designated the National Archives and Records Administration (NARA) to implement the program and oversee agency compliance. Within NARA, the Information Security Oversight Office (ISOO) manages day-to-day oversight of CUI requirements.
ISOO issued 32 CFR Part 2002 “Controlled Unclassified Information", to establish policies for identifying, safeguarding, disseminating, marking, decontrolling, and disposing of CUI. The regulation also establishes requirements for self-inspections, oversight, and other aspects of the CUI program.
-
Under 32 CFR Part 2002.20, federal agencies must apply CUI markings uniformly and conspicuously to all documents and information containing CUI. Under 32 CFR 2002.38, an agency’s CUI senior agency official may waive some or all CUI marking requirements if marking the information would be excessively burdensome. These waivers apply only while the information remains under the agency’s control.
FCA has approved CUI marking waivers for legacy materials, as well as for the following categories of information:
Financial supervision information
General procurement and acquisition
Information systems vulnerability information
