The level of system and network configuration required for Controlled Unclassified Information (CUI) is moderate confidentiality. This means that the systems and networks handling CUI must have configurations that provide a moderate level of confidentiality to protect the information. This requirement is part of the guidelines for handling CUI as mandated by the Department of Defense (DoD) .