On December 15, 2009, the Departments of Justice and Homeland Security released its Report and Recommendations of the Presidential Task Force on Controlled Unclassified Information, providing 40 recommendations, including one for a single, standardized framework for marking, safeguarding and disseminating SBU information across the Federal government. The President directed his National Security Staff (NSS) to draft an Executive Order (EO) on CUI, supporting the key elements articulated by the CUI Task Force, including the scope of CUI reform to include all SBU information within the Executive branch, not merely terrorism information.
On May 27, 2009, President Obama directed the Attorney General and the Secretary of Homeland Security, to lead a Task Force on Classified Information and Controlled Unclassified Information to reexamine the concept of CUI and, within 90 days, to generate recommendations as to whether and how to reform existing practices.
In May 2008, the Archivist of the United States established the CUI Office within NARA to act as the CUI Executive Agent (EA). Based on the May 7, 2008 Presidential Memorandum, the CUI EA developed initial draft implementation guidance with the advice of interagency partners, actively engaged in outreach to CUI stakeholders, and developed preliminary plans for an online CUI registry and training.
On May 7, 2008, President Bush signed Designation and Sharing of CUI, a memorandum that adopted “CUI” as the single designator for all SBU information in the Information Sharing Environment (ISE), which was created by IRTPA to facilitate the movement of terrorism information; designated the National Archives and Records Administration (NARA) as the Executive Agent; and established the CUI Council, as a sub-committee of the Information Sharing Council (ISC). (On July 2, 2009, the ISC was merged into the Information Sharing and Access Interagency Policy Committee, co-chaired by the National Security Staff’s Senior Director for Information Sharing Policy and the PM-ISE).
In October 2006, the SBU Coordinating Committee, chaired by the Program Manager, Information Sharing Environment (PM-ISE) began development of a Guideline 3 Report. That body consulted with representatives from the Information Security Oversight Office (ISOO), Controlled Access Program Coordination Office (CAPCO), and state, local, tribal, and private sector partners.
On December 16, 2005, President Bush issued five guidelines, in support of IRTPA. Guideline 3 called for the Secretary of Homeland Security and the Attorney General to submit to the President recommendations for the standardization of Sensitive But Unclassified (SBU) procedures.