UCOR is transitioning from the superseded OUO orders (471.3, Identifying and Protecting Official Use Only Information, and 471.3-1, Manual for Identifying and Protecting Official Use Only Information) to the new marking requirements of DOE O 471.7, Controlled Unclassified Information.
Follow this link to check out the CUI Categories Directory on the CICO web page.
If employees haven’t completed CUI training on LEARN, CUI-100DE Controlled Unclassified Information Overview, please do so as soon as possible.
What is the difference between CUI Specified and CUI Basic?
CUI Specified – Applicable law, regulation, or government-wide policy require specific protections for a variety of safeguard requirements to include unique markings, enhanced physical safeguards, or limits on who can access the information.
CUI Basic – Because applicable law, regulation, or government-wide policy do not require specific protections, as such, the baseline CUI safeguard protection requirements are used.
Who Can Have Access to a Document Marked as Containing CUI?
Anyone who needs the CUI to perform his/her job or other DOE-authorized activity may have access to the document. Such access is granted by the person in possession of the document. CUI Specified documents may require additional access controls. Refer to the applicable LRGWP for requirements.
How Do I Protect a Document Marked as Containing CUI?
- In use — You should take reasonable precautions to prevent access to the information by those who don’t need it for official activities. Cover sheets or proper storage are ways to prevent inadvertent access.
- Storage — CUI must be stored in locked receptacles to prevent or detect unauthorized access, such as file cabinets, desks, or offices.
- Reproduction — CUI documents may be reproduced to the minimum extent necessary, ensuring that all copies are marked as required.
- Destruction — CUI documents may be destroyed by using a cross cut shredder that produces particles that are no more than 1 mm by 5 mm or any other locally approved method.
- Transmission by mail — Place the document in a sealed, opaque envelope and write “To Be Opened by Addressee Only” on the outside. May be shipped through interagency mail systems, USPS, or commercial delivery services. DO NOT place markings on the outside of the package.
- Transmission by fax or email — Use encryption methods (e.g., Entrust) whenever possible. If encryption is not available and mailing is not a feasible alternative, then regular e-mail may be used with a password protected file and the password sent in a separate e-mail or phone call.
- Processing CUI on a computer — The system must prevent access by unauthorized persons (e.g., use of password or file access controls).
View the CICO web page for all the information pertaining to CUI.
