Policy-and-Training

The following policies govern CUI:

• DoDI 5200.48 "Controlled Unclassified Information."

• 32 CFR 2002 Part IV National Archives and Records Administration 32 CFR Part 2002 “Controlled Unclassified Information”

• E.O. 13556 Vol 75, No 216. “Controlled Unclassified Information”

• NIST Special Publication 800-171 Rev. 2 “ Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations”

• CUI Reports to the President

• CUI Notices

Training for Industry is required when requested by the Government Contracting Activity (GCA) for contracts with CUI requirements. Industry may use the CUI training developed by the Center for Development of Security Excellence (CDSE) to meet training requirements or create custom training.

If creating custom training, Industry must include the minimum requirements found in DoDI 5200.48, Controlled Unclassified Information (CUI). It’s recommended that if developing and implementing custom CUI training, Industry should ensure training developed by industry is acceptable with the GCA and that it is aligned with Law, Regulation, or Government-wide Policy.

If developing custom CUI training, DCSA provides the following additional resources:

Training Reference Guide for Industry

The Center for Development of Security Excellence (CDSE) has developed and released an eLearning course titled, DoD Mandatory Controlled Unclassified Information (CUI) Training (IF141.06), and it fulfills the 11 training requirements. This CDSE-developed course is the official DoD CUI training course for all DoD personnel.

CDSE also provides a CUI Toolkit. The Toolkit includes training, policy documents, resources, and an FAQ video.The memorandum for Clarifying Guidance for Controlled Unclassified Information Training Requirements, released on 30 June 2023, identifies this training as the official DoD training.