Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

What Is CUI? A Foundational Overview for DoD Personnel

6 Jul 2026 · 3 min

Watch on YouTube

3:25

The video provides a concise briefing on Controlled Unclassified Information (CUI) as it applies to Department of Defense (DoD) personnel. It explains that CUI is unclassified information created or possessed by the U.S. government that may only be disseminated to individuals with a lawful government purpose, distinguishing it from classified material where a “need‑to‑know” must be proven. The briefing cites the governing authorities—DoD Instruction 5200.48 (effective 6 Mar 2020) and National Defense Regulation 32 CFR Part 2002—and outlines the CUI Program that sets rules, organization, and procedures for handling CUI. Oversight is performed by the CUI Executive Agent, the National Archives and Records Administration (NARA), specifically the Director of the Information Security Oversight Office, which maintains the publicly accessible CUI Registry containing approved categories, markings, and de‑controlling procedures. Example categories highlighted are Nuclear‑Related Information (NNPI) and Unclassified Controlled Nuclear Information – Defense. The segment concludes that understanding CUI’s definition, access criteria, and categorization informs proper marking, safeguarding, and dissemination. A brief promotional interlude for Atlantic Training’s Wave platform is also included but is not central to the instructional content.

Chapters

Controlled Unclassified Information, or CUI, falls under two important government regulations. First, the Department of Defense, or DOD, Instruction 5200.48, effective March 6, 2020, establishes the policy, procedures, and responsibilities for CUI. National Defense Regulation 32 CFR Part 2002 details the specific regulations related to CUI. So, the first question is, what exactly constitutes CUI? It's unclassified information the United States government either creates or possesses that is limited to dissemination to those with a lawful government purpose. In other words, it's not classified information, but it is still not meant to be shared with people outside of its intended purpose. The biggest difference between CUI and classified information is that, unlike classified information, an individual or organization doesn't have to prove that they need to know the information, only that they have a lawful government purpose to access it. For example, any member of Congress and personal or professional staff are authorized to CUI from DoD. All CUI is handled by the CUI Program, an executive branch-wide program that includes the rules, organization, and procedures for CUI.
Is your employee training scattered across spreadsheets and emails? There's a better way to grow your team. Atlantic Training provides world-class HR and soft skills courses, all hosted inside our Wave management platform. From onboarding automation to tracking leadership development, Wave tracks it all. And you get the software for free when you choose your Training Plan. Click the link below to build your custom plan now.
Oversight of the CUI program is handled by the CUI Executive Agent, which is the National Archives and Records Administration, or NARA. Their job is to implement the CUI program and ensure federal agencies comply. This job is delegated to the Director of the Information Security Oversight Office. The Executive Agent also maintains the CUI Registry that houses all guidance, policy, Instructions and Information on CUI. This registry is publicly accessible and includes information on CUI categories and subcategories, markings, decontrolling procedures, and other guidance. Agencies can only use the categories or subcategories approved by the executive agent and published in the CUI registry. A couple of examples of CUI categories are NNPI and Unclassified Controlled Nuclear Information Defense. NNPI relates to information on nuclear reactors, materials, and safeguarding concerns. Unclassified Controlled Nuclear Information Defense relates to special nuclear material, equipment, and facilities. Understanding what CUI is, who has access to it, and how it's categorized provides good information that will further determine how it's marked, safeguarded, and disseminated appropriately.