Information may be cui in accordance with

The Federal Information Systems Modernization Act (FISMA) requires that CUI Basic be protected at the FISMA Moderate level and can be marked as either CUI or Controlled.

CUI Basic contains the baseline handling and dissemination controls as identified in the Final Rule issued by NARA (the National Archives and Records Administration) on November 14, 2016.The rule affects Federal executive branch agencies that handle CUI and all organizations (sources) that handle, possess, use, share, or receive CUI-or which operate, use, or have access to Federal information and information systems on behalf of an agency. The Archivist of the United States delegated these responsibilities to the Information Security Oversight Office (ISOO).ДЈ2 CFR Part 2002 вЂњControlled Unclassified InformationвЂќ was issuedВ by ISOOВ to establish policy for agencies on designating, safeguarding, disseminating, marking, decontrolling, and disposing of CUI, self-inspection and oversight requirements, and other facets of the Program. Manufacturing Extension Partnership (MEP)Д¬ontrolled Unclassified InformationВ is any information that law, regulation, or governmentwide policy requires to have safeguarding or disseminating controls, excluding information that is classified underВ Executive Order 13526,Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amendedД®xecutive Order 13556 вЂњControlled Unclassified InformationвЂќВ (the Order), establishes a program for managing CUI across the Executive branch and designates the National Archives and Records Administration (NARA) as Executive Agent to implement the Order and oversee agency actions to ensure compliance.Data Breach Response: A Guide For Businsess.Contacting The FBI After a Cyber Incident.Protecting Personal Information: A Guide For Business.

Information may be cui in accordance with