Controlled Unclassified Information (CUI)





  • November 14: 32 CFR Part 2002 became effective.
  • January-August: The Executive Agent (EA), in consultation with the NARA Strategy and Communications Office and the Office of Management and Budget (OMB), continued adjudication of 32 CFR Part 2002 comments with Executive branch agencies.
  • January and forward: ISOO EA continued to broaden its outreach activities through meetings with Senior Agency Officials and their staffs, as well as State, local, tribal and private sector entities, and public interest groups.




  • September: ISOO, in consultation with the NARA Strategy and Communications Office, submitted revised 32 CFR Part 2002 and consolidated results of all comment adjudications to OMB.
  • May 8: ISOO published proposed rule 32 CFR Part 2002.
  • January-April: ISOO continued its iterative policy development strategy to incorporate uniform CUI policies and practicies into the Code of Federal Regulations (CFR) through CUI Advisory Council meetings, working group discussions, surveys, and analysis and consolidation of existing practices and procedures, policy drafting, agency  comments, public comments, and comment adjudication.




  • August 26: The EA published comprehensive updates to the CUI Registry that included - (1) reorganized access, (2) additional category-subcategory detail information to identify authorities with specific handling requirements based in law/regulation or Government-wide policies, (3) a glossary, and (4) search functionality.
  • July 3: The EA and the Department of Justice Office of Information Policy issued Revised Guidance regarding CUI and the Freedom of Information Act (this supersedes the joint issuance dated November 22, 2011).
  • February and forward: The EA designed tools to standardize Oversight activities within the CUI program and offered agency appraisals to - (1) assess the current state of an agency’s CUI-like program, (2) assist ISOO in developing its oversight activities and methods, and (3) support agency efforts in preparing for implementation of the CUI Program.



  • July 27: The EA issued Controlled Unclassified Information (CUI) Office Memorandum: Review of Proposed Categories for CUI Registry, requesting that agencies identify information types that require control for major business purposes but lack necessary laws, regulations or Government-wide policies for inclusion in the CUI Registry.
  • March: The EA launched an iterative policy development strategy, holding semi-monthly working group meetings with agency stakeholders to survey, consolidate, and aggregate current practices for safeguarding, dissemination, decontrol and marking of CUI across the Executive branch in order to inform the drafting of a new Government-wide CUI policy.



History of CUI

  • December 15, 2009: The Departments of Justice and Homeland Security released its Report and Recommendations of the Presidential Task Force on Controlled Unclassified Information, providing 40 recommendations, including one for a single, standardized framework for marking, safeguarding and disseminating SBU information across the Federal government. The President directed his National Security Staff (NSS) to draft an Executive Order (EO) on CUI, supporting the key elements articulated by the CUI Task Force, including the scope of CUI reform to include all SBU information within the Executive branch, not merely terrorism information.
  • May 27, 2009: President Obama directed the Attorney General and the Secretary of Homeland Security, to lead a Task Force on Classified Information and Controlled Unclassified Information to reexamine the concept of CUI and to generate recommendations as to whether and how to reform existing practices.
  • May 21, 2008: The Archivist of the United States established the CUI Office within NARA to act as the CUI Executive Agent (EA). Based on the May 7, 2008 Presidential Memorandum, the EA developed initial draft implementation guidance with the advice of interagency partners, engaged in outreach to CUI stakeholders, and developed preliminary plans for an online CUI registry and training.
  • May 7, 2008: President Bush signed Designation and Sharing of CUI, a memorandum that adopted “CUI” as the single designator for all SBU information in the Information Sharing Environment (ISE) to facilitate the movement of terrorism information and designated the National Archives and Records Administration (NARA) as the Executive Agent (EA).