Authorized holders are responsible for applying Controlled Unclassified Information (CUI) markings
. This includes federal agencies and contractors or third parties who work with federal data
. The marking process includes identification, categorization, and the application of CUI markings, with training and awareness being key components
. When a document or material falls into a CUI category, the authorized holder applies CUI markings and dissemination instructions
. If a contractor thinks information might be CUI, but it is not labeled, they should consult their Prime or KO (contracting officer)
. Key stakeholders and their responsibilities include:
- CUI Designating Officials Individuals within federal agencies who determine whether information qualifies as CUI based on laws, regulations, and policies
- Information Owners Also known as data stewards, they are responsible for ensuring that any CUI under their control is appropriately marked according to CUI guidelines
- Program Managers and Supervisors They ensure that their teams understand CUI requirements and adhere to marking protocols
- Employees and Contractors They ensure that the information is correctly marked and protected, and are trained to recognize CUI and understand safeguarding requirements
- CUI Program Managers and Coordinators They oversee the implementation of the CUI program within their organizations and develop policies, procedures, and training programs to ensure compliance with CUI marking requirements
CUI markings are applied only to those information types/categories found on the CUI Registry and can be linked to laws, regulations, or policies
. Contractors can create and mark CUI documents and can be listed as the point of contact in the CUI designation indicator block
. Staff members are responsible for recognizing and designating sensitive information as CUI using the correct guidance, categories, and markings
