Policies


Executive Order 13556
Controlled Unclassified Information 
This order establishes an open and uniform program for managing information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Government-wide policies, excluding information that is classified under Executive Order 13526 of December 29, 2009, or the Atomic Energy Act, as amended.


32 Code of Federal Regulations, Part 2002
Controlled Unclassified Information
The implementing directive describes the executive branch’s Controlled Unclassified Information (CUI) Program (the CUI Program) and establishes policy for designating, handling, and decontrolling information that qualifies as CUI.


DoD Instruction 5200.48
Controlled Unclassified Information (CUI)
Establishes policy, assigns responsibilities, and prescribes procedures for CUI throughout the DoD in accordance with Executive Order (E.O.) 13556; Part 2002 of Title 32, Code of Federal Regulations (CFR); and Defense Federal Acquisition Regulation Supplement (DFARS) Sections 252.204-7008 and 252.204-7012.

Related Policies

DoD Instruction 5230.24
Distribution Statements on DoD Technical Information
Establishes a standard framework and markings for managing, sharing, safeguarding, and distributing technical information in accordance with national and operational security, privacy, records management, intellectual property, Federal procurement, and export-control policies, regulations, and laws.

NIST Special Publication 800-53, Revision 5
Security and Privacy Controls for Federal Information Systems and Organizations

NIST Special Publication 800-171, Revision 2
Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations

DoD Information Security Policies

DoD Instruction 5200.01
DoD Information Security Program and Protection of Sensitive Compartmented Information (SCI)
Establishes policy and assigns responsibilities for DoD classified information security programs to include special access programs, sensitive compartment information (SCI), foreign government information, and information protected by alternate compensatory control measures (ACCM).

DoD Manual 5200.01, Volume 1
DoD Information Security Program:  Overview, Classification, and Declassification
Provides guidance on information security program management and the identification, classification, marking, protection, declassification, and  destruction of classified national security information (CNSI).

DoD Manual 5200.01, Volume 2
DoD Information Security Program:  Marking of Information

Provides guidance for the correct marking of classified national security information (CNSI) pursuant to Executive Order (E.O.) 13526 and Part 2001 of Title 32, Code of Federal Regulations (CFR).

DoD Manual 5200.01, Volume 3
DoD Information Security Program:  Protection of Classified Information
Provides guidance for safeguarding, storage, destruction, transmission, and transportation of classified information.