Glossary · C
CUI
Controlled Unclassified Information is information the US federal government creates or possesses, or that a contractor handles on its behalf, that requires safeguarding under law, regulation or policy but is not classified.
Extended definition
In more detail.
Categories are defined in the CUI Registry maintained by the National Archives. Contractors receiving CUI under defense contracts must protect it according to NIST SP 800-171 and, increasingly, demonstrate CMMC Level 2. Knowing where CUI enters, is stored and is transmitted determines the assessment scope; confining it to a defined enclave keeps that scope manageable.
In our work
Where it appears.
Identifying and confining CUI is the first step in NIST SP 800-171 gap assessment and in secure enclave design.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days