what is cui specified

CUI Specified is a subset of Controlled Unclassified Information (CUI) that has more restrictive controls on the handling and control of the content than CUI Basic. CUI Basic is the subset of CUI for which the authorizing law, regulation, or government-wide policy does not set out specific handling or dissemination controls. CUI Specified refers to 59 categories that have additional requirements beyond the baseline set of rules applicable to Basic categories. The authorizing law, regulation, or government-wide policy contains specific handling controls that it requires or permits agencies to use for CUI Specified. For example, DFARS 7012 requires compliance with cyber incident reporting with covered defense information. CUI Specified is identified by a specific marking, such as LRGWP, which identifies an information type and says to protect it, and also includes one or more specific handling standards for that information.